Analysis
-
max time kernel
134s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 00:38
Static task
static1
Behavioral task
behavioral1
Sample
2c7c5d064b2d31f7e4dd6931ac88deb5_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2c7c5d064b2d31f7e4dd6931ac88deb5_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
2c7c5d064b2d31f7e4dd6931ac88deb5_JaffaCakes118.html
-
Size
226KB
-
MD5
2c7c5d064b2d31f7e4dd6931ac88deb5
-
SHA1
77842637818269cb38ad18cc5e99257f8b2ebb14
-
SHA256
e85cfe05b53f6efef0dfb0bb82156a2bf695c194749b1b9d6c705d05a20b69c9
-
SHA512
2e4e543590ed92653c4496dab3f2e8f2fb6cf11f55bf95bfbd550e33fe91469b34910a4fe3689f01d0dd24690f4718c7bf6bbac9dd39206dc01cb96ea1201024
-
SSDEEP
3072:1gI7mCHS9E0nSpaXBb9iDhy5YmI0viE4CHXLz+dfMu2lAYrBPgKMtPJ4:OAprQFxlBPV
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e000000000200000000001066000000010000200000007a59c6cbf08e7dcc20d3bec652568d76e6d23dae4c1d039f7eb19ec1465996a7000000000e800000000200002000000056dda62849df268f16d97e0077beb368176180d436b7bd466ec5433f619cd77c2000000067b104a168bd43e0fb8b85ad891561900b1876cd469e5954bd336829db4f5ee5400000006e98e959158af1caa626799964d5933aded4629a3bb84f3acbdcdfe414ed82a6634d510e43c248d3a6c1885f73df888d1fe5308399f89357eaaf9a42379bc587 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A3D304C1-0E65-11EF-B85E-52C7B7C5B073} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421463385" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0eb7c9372a2da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 112 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 112 iexplore.exe 112 iexplore.exe 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 112 wrote to memory of 2476 112 iexplore.exe 28 PID 112 wrote to memory of 2476 112 iexplore.exe 28 PID 112 wrote to memory of 2476 112 iexplore.exe 28 PID 112 wrote to memory of 2476 112 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c7c5d064b2d31f7e4dd6931ac88deb5_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:112 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:112 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2476
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5b6e71adf7324685d8f60c97bdb99f892
SHA1ac45dd58c3dfb5d68ffdbc27817f1e5ad5720830
SHA25640a181e9a8b85b862afc89a604eb290be3b5cd68937feb9ccfc467d3589e8e5c
SHA512f864a712e300632059c0678ff5f54412fc7f7a1db02e469bcdc77be452886b55cd3d08ff51076278d1a21b091b2fc459e30c53b0d8e8855dbfefa59f0ee4cea9
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA
Filesize472B
MD5172831834ea62b24f27ae09586544041
SHA11bb2f6eb9c319fe96051c9a7db6cc4b882912471
SHA256c88fedc9c4ce58c474cbda40048f9c60ea139d81438401ca3f9f38de59e57319
SHA512ab2e156cf49e575074aabec3dc76df497408755944acb34ea9a67f85eb75bfd1fc4eb898b445cab38d6cfb799288668ca6ca9338422de9d774264dffcda4de44
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
Filesize472B
MD508b42de8e5fe706ca8f5159cf7f38b76
SHA133c2bbdbf57a54ebcc6a17da1419d661c46899f1
SHA256c18980e956391123486c0cb4398901884bb4d3258b9b9b6b3f14c2c224bbd65c
SHA5121f7e9fa94c503036b895a2ab9029af9c798c89826ea2e5d3e12c4a8c01c1c773c1237dcf6515249224a13fd71581e2ebbf69381f121e8b7dcfbbb61a7618d772
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Filesize230B
MD5299c0c8a2da0d0f0e360fd9ad389e38d
SHA12239fa86be1de9facb6c73a1018e07ec66a59f30
SHA2567077c036f48f698e52f7dbd754c4d99841ab3f9ceb43a8f3999d6af2a676169b
SHA512a086007a94394e38cb1bca9fe8772b1ce1402291acb16a61e95580b70c354c93545dd3d55889f6264de59f0570d073933accfa0d05482955c9f8b3136df19ba1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5ad4069c933a27ad365914cfa5ed69fa4
SHA116237e7ec0ebf0b84fb478566875a0401fb0f822
SHA25672f793b6c7e151e1561a169fb7273b65d50e43aaceb664a72a34a04ff1981a8f
SHA512ab3542deb5a74f96e4e13e4949c4c24c41967f4b369d4204ff11899deeaa8335bbec749bbdf8fcbdb1aeafe74eb56704b926b02ea1bf69561dfea16a1b2493cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5d386c66dd41ae5e332f3757f7cc29cfa
SHA1b72c83e8b0b73e91b7bb40e0e28712be801c028c
SHA256849d349e259402ca9673ba4c4a1d7574a08126bcbace92cbf30c7074b88197d7
SHA51224ae2b57a26afd4636909f81ab0e802a6c04799bacc06f3c6f172d64b48c38e5d8d9a42c6809af6d8cdb09f04f158daf34e889fa6efb9dfcbf97a064677505e8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD511f8e64af97c9890bc6128e1d88b9839
SHA1174385f8c7e37d123411bd10b45849283656275e
SHA256bcdf07f099686ffc5bcd3740268b212b1c42ce7f0a2cad5c75bd907adf14c952
SHA51275c5a091d2022c6ecdafdb729539c68e21f7f31b6cbd3a0f89e0074c1e56bcf3223392d38922bda51e67cc2e0662575bedaaf0e6b9cb9aed122d1942f491383c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD58d0bd6f9cdad67f6c011a49a45981789
SHA1c8caec8299180ceb31617a01b2c4e7ecd12dbf02
SHA256615bdeb3cda1dbb52462432d1d7b15bbf3c5d77f0842914cc4ddb60fd7dd5ea6
SHA512453096027f1f3f5eef96323f8918be41639ba6ba1614647fea67430d8f0306ba57aeff7f9d28f426e100fcf2668d4d45bad4b0bcec5475cc4770fd245974e980
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57dbca7dd25598535aa512d0a6f0ac02e
SHA1358e04cadf86101d1a8fc4618e8079a4f11f0bb5
SHA256dbd02808e5f11a8304cf504e585af7734a38cbf06ec407bcc305df78a53f2b63
SHA51296ac3f8661e1d606cc895fcad1bd751db007d71e7269c113c7025c867cab8654f2d96dfc483f3fe0f6b2c786d0ff82e47cbb9a7c80648100ebd965cdf600af93
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD581b820bdbe81922fbd7ddb554c0d56d6
SHA1d95af3004d31c007e200ea802be6602167c5cf43
SHA256e5267ee9feb05e085f1ad70af65b2efb73785afe8a90aed0f0a7b6559a6ba574
SHA512fc9a0e40503596a56f8c09e0aa2b165e6d39cbba95df96c8673b304c2651f1458aef22beec543cd18b3a0f4a79e0958d5d6756442e60357196e65d5a6d3cb002
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD526f532aa1e7e310a2062df6ac3eb8ad9
SHA1abf8b7fec4f46555819f1d47c1b458f09fc2001d
SHA256b35d61092b1d49367ef2f0220108f743cb0b43ae600870cf35ae80d02dc392f9
SHA512d69a76247037ba08a3075088312be0043f980d21b357b4ce801ec8d6843b4c39f8a8490c1a97e79cd61fb4d0f4c74211cb6e30aad45cb9ea533703c26e09e7ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e8df1bb9a0185903eb06a2ae21806f77
SHA1146317a5aed6c7d4936a99c8cd1badb1b98b84de
SHA2561802522b3870e5ebb5c9352b945d67d40863ecab2cf471136b9055d0560aa8e5
SHA512a7b4cdda6a7835b5177f584f7110c0d560433e2a897e6fa42d6da49f7d49d34231367d73e76163285ce5cfff1077f71e76487c26215b2426515e589ead5ef9fe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f5d1eea5c569c4b3a918a7c04793e5cf
SHA1629ec09790dcf56a9e4908f0691ebf05334525a5
SHA25611b9fad94abeaa8282831726b89bd25cb8f091c957100de7a777cae8ec1be314
SHA5129d65a1353fa6e16f821dfeb0445f923cf57719ef005a5dcfc812401da7a6054bded53f9ef1feeff4078c9a4190bafbc6c65c931d98c3fd096624dbf1d243beed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dac486c6c8e3d69c07e446d1cbd7047e
SHA1d99435c435ec1050af444094ff9cc7a0352f7b49
SHA256ad550104e24272dce62d7d69fca06a7748d6c2c87c48da6c1204c8f4a70f60a8
SHA5128054a372282f2aa78d5d8dc91f2dd48afdcee1361c927a9507ca5966b80d4e75a70c09817212eed8c3a7b7a0d6ba883434490ae7958086ea15736ab0c7ac07c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5178ccbeb3225c8ddcff46ce01018cd1e
SHA1cec484b080bb1d0219f479c252eca41e728718c0
SHA256e97b4fc626e46d3d1a981bf32fa019574e8ea8d1ca361c323d043f8cdf2b5830
SHA51277201356f515e58f74646a228c8b28948a8152f7c278f0b90ce7c95b6d31e482693633d66864cb5b8989b10a0f322e5daa0a0d2d7c435202e6ec594c61182509
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fa131938a2a2bc3ff20ec621f2e96d7e
SHA13fd18415ec197813ebd57936ddde8cf3d6fcc615
SHA256ec9cc57393a0fd5c29ce3d6d44984179f6ec37309c58d43dbcd4797704a1bc21
SHA512cba2dffa1101254a08a6b3c5773508caae9e8931bec34f781d34818f6fe817da35570ba51ab74e0fe9ac9a51bc724cda73692d2c40f2ed0dcdd5b27b7de6aca3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc9c099191bb18fdfdd59376218e2344
SHA101c4c23b723d286c754bf15bcac4157289d3b9bb
SHA256f83d8f5aa599d12b181851e4ff940fb43a573ecc3bf31f13b5f2d7d9c321d5b6
SHA512f428869668a0c6be61f0392088f7a6982b27255124831efccbb4227073fc1b7ad0b4020a67a76dd4e2742e70a97a7afbbd572d03d9fbad3477ef0085f1fad794
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519a3fbb7a089d38595100fda7a5382dc
SHA1f05dc8023bf6a9d3b6e9cfcbb9806972143a4351
SHA256856068906500029477a36eb049cc93aef1f0c7ca81fbb7d6c3069f9cd6704c52
SHA512a24199c026e286f6a8318bdac081bef74a812e2e9b4b26659f82f52a42f7ac72844a60f149e9a264374b262e8aa91e96f6b2c1d2b5a2b0417102cd56d917f4b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD507533aae1397e9d158a185175d6fba8f
SHA118f6757d103b2253885097d4e38f80dbb138bbdb
SHA2562d9e5b9c64dd18bf8aa722de1751992114b55523cec95860b6acfd843662d8b5
SHA5127a2aaf0cca5f254aeaadb26bf0085f4c13d6332bdb0dcb0bfdc5ef9e9e272da2a20fdaa117d407d42b3c5ddb4eadec955e434c4d8cc9aaf5f65f013526292051
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD501203408bec8a57c26785078f96636c6
SHA164b2a135e7385ab8da012eb73befac8f933c5d34
SHA2562d6e74f27a02421f8e72d63630bbb62bb0306d1938ef8aaa51fc6daaf95ab88a
SHA51295fefd6c9704b08a407e44e4ce1745226c5c768995cfb0ee2051394cd5c7641175a0c00662646156a237e126d8d9d2a5b5c7f96855ffc4f3464b2a24e253613b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522506209bf1e5e5fa6f39944a0070d1d
SHA1521417e27088f29d819fee9c64a5d7b3642ed211
SHA256ce266fd588bda359e38208f2dbae43f362eb7bb525e32959d68bf26da8b20f6c
SHA512672ea1d4d9aaecbace0515597febbc772c1a31dec13ed78a44ea3c97f72376cf669cc2a81b7d95ab6ddf0ced808d2f9e357719ef1c95afd5eb7025b7a229c983
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eda36aa580f0f351cc15ebcc6474e9ef
SHA1c03b4998184ee2aab67b04dd52bea443cc9b0d07
SHA256c5a2621862fa455300aa926a15d23b75b34b74a9d8a202cf360a316e9f886dcb
SHA512af9d0c84fbb9342aac91a67739ee784ac33a18089f5291733ae0374bd46efece30eb15dcf35e38f39ff31023fcce7759bcfa684c17aad418acae3143f4078de0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD595bfec5e207fb42a820f7adc89979c81
SHA15db2c7176f330ac2f75b96af886069ebe79d5386
SHA256715c4d4e175b7422454bb299b8b45f8261363de9defb3ce936ef299f77b6726c
SHA5121b26dcd2cd54a8f7cb69ee106966b48e844e83dfe2dd8bf2996ee2133e564d0a16b144f70658f555b9dc7c8003b7f77cd01955395de424dd37a9af4bb97e3bb0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a57415713ef12047a8e7abb7b27bdd6
SHA1baf432677f281baa9d0263510fc82b587c50f460
SHA2560c2e20b01a75a914b6882110d264f07b9d69c729b1a9ad44852e87248c9aa04f
SHA512c53f1fffb2262210a051de70722dc1ac8b81f4bb39cd6ea9618d87c480715700e724ad1caa6c192d319ea95d9aee49f97d547bdbdee92d014c4f605770ca2a6c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502ee174d1b832c115e84ee2291f99e77
SHA17cc4ffdcc2b77bc3d451fe5d5d7e0296458125fa
SHA25646253f99827675199f8f4c301e6c8f2e890bd2f6382767510cf2d8c1f0b0293f
SHA51261a85ae1ff22eef4c8bdb5e9bc0c9b46db873a712d64bb8b23da8438a9c0892d0497b0d1e5ac5c5ce3a5026898c4bae9de0bb57c222c3c3288bd1f5271ef3045
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ef33334d16f5bc19cd79fc7af225c092
SHA1534b7d2899dd48cc4edc85ddd9769623421c6d13
SHA256a9fbb859d6ce81701ee366fb0d9d70fcd64dfa2b4701a1f7a38d41a025fd3787
SHA512aabf2c2a90d9f778ea6066c46f1d808ac8700a7ebce05e23212a2dfcf4bf6fc7714cafecad77f4ea663533640cd59721a41a2fb7b96727761e8694412ca79943
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55f9c66bc9c4d98b2f1e7f7931281421c
SHA1a0a94277e4022948248061f090ae2c4522a71dd3
SHA256390ed16a425d70492c3e8cc84ef1751c1e87a63f7a58386f5e9e52c57c26af76
SHA5123c677ae21c3ef312236823b5f35c2636520d88b4135ef6496e6d09f91d7be8b748513790c9ce908083bb68b5ca5beef5c68d6aa83525114114a63b7d2565c354
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519f5d7d744b11520cac0b49ba5d5b232
SHA1cd16f2dfad1ad262938a9ef6762fb0ba80371505
SHA2567f735c07f43098ccdc81dcb929a456a11109f271e6e60c0d5ecb96e8d9ace27b
SHA512723b9de8ebfd31452ed9956b082eb26648ce6f19c9a8d5045d4483532bcb9597be7a6add0843b20073b5322c0897a225a8ca58dea1cf7f0f040f4a27d9f396f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a9c02597a4772350c1273461fa56946
SHA18aff12abd288322f6ba0d9a76660b9dc1ca33f99
SHA25615756a6ab4431ce804cb907b74fda7f705346808f5723347b41d10be7c083865
SHA512b187cf42b4a0d4981d534665377dcb20bf719e29d7e01bcb8f94178901b920af1e2e56f79914998aa4a0950aa2ec2b8aec41d8eaec10030e1fc84050c8c3a653
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD583f38df0a97771ae9ad2436e4dcd89ef
SHA1f3dabc7ac6f2a54a6f5cc7bad5aaa9de5f3f4acf
SHA256a94ca055597168c12ddedd129fbf2dfefe708dd8548b718b33110762425e14d7
SHA5126e1d561a27f03d06a665c735138a1974c2f679e331d5508f4d14ef2d313ae00f69b34a74a49b7e30da37c60ab44c1540e78a38f28c04f038214ae2ceead759df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53bbb281f0842cb3e18e8f0932d907adb
SHA11bf657a61ea846cd1a386dbb29c30269f751180d
SHA2569e60aff09754691bba11b780fd65b595aa6743724a76629575c869ae0fa77bfd
SHA51283b1fe64222a7b482d6cb9eb3d850962d223852f43091045991d157adab77633bead5123a9ce9d37e1585eacf030ac087b513b687e7bef6aae0dee06fc8b0937
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fe611eabbbfe7f363616e32dfe5b8c41
SHA1c5f505202bee75fd7f594b56139d703754eca122
SHA256b8adc85d2a33a14f748eb6a6642835beab622b633b90e9915fd3aaae945447f8
SHA5123db43f69e74f9d60790faa7b6d0938ebb61ea183a5fcdf80247b77ab0babb84b228e463c2a1b5780289a3197e5d906b1d628d0a140b43c1a6615b0ba0853e466
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f361457e220e01c39d9c6899012c2185
SHA12810992d1cf789c6596ec8b0ec0afb4c7a988e10
SHA2560ec46dae253a27a030b0011f3580291e2cb4f37edfff14a91fe10435d6abd913
SHA5120158ab2129972c17ff47b8787b6f8c05ca48b9ab4d78a35b6822ea4e9f1e385332a12ba05ffcfe9bfaced80295b19c089bb9b4d480ef077413d490e90db05094
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD531286719f5a07ef2773eb09f593ff229
SHA1d4790e73063d6c307a4c6c16b744089bbf428e3d
SHA2568c8b30d68250858b74503ef08ffdd74a33d1ce7e23910d413aa757b42f5d79e5
SHA512eb405d84001f0e0cd3545798c7099d1e3f9006cce261d715d0147cca11d2955e9265109e416ffa64beb61c404c47f976bf33572c98b1949d5ba40e8f0c3829ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56233b40b6012fbfab330484adc1e2a08
SHA1cbc5bde4dc3c713f9bd56d0fb310c0bcc227897e
SHA2560c9ea7ebed00e5a03defc1471c995389176860536c10958487e98ced64310291
SHA512ce5e53aa7bddc87172c0ff42c448c41637c4314ab7ec952738df97eb1c7e30f5e27dcdc75488b38a9d47f94edac9c7fbfdeb5c3c7a81bfb3afb730257a901123
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5485deed5ada648555dfffebdfd3e968c
SHA11f6370fdaf8fbaa3a8dc82c94c3eccdba8227bd1
SHA256d5d917577f7ac9a4218f6269c4e15dd5631f0c2714265d83b789854aa82943ec
SHA512ea095e834f7c59727b21bfe2bba3941108f1972d53dbcbbec978bba0a77d39d7eb7d2c9fb4a79fea9c350fe127ce5b5d34d04ef59bf336b72bc4bf5dac3bd5f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57798b991fc410036cb5cdff0ad7eaa19
SHA160944756be36791fa7c888b41215c08f9b9648c9
SHA2563afb6e524fdfa9feb406bae4cd6eae8b6372612eba51f8a5e0d103923012843c
SHA512409af37f5b3d2690e93ee4e70ec0afc52433ab9ec714ba9e852ce377540592d16b060f1b793d8d0bd4a5e8557a4b5d23551e1515b0699a1e19d3eab562ffbf6f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d771b5d56ec0ec4a76dd8bbd51c1aad5
SHA1eaeef157025aaaf5856c1257581b02ff5bff678e
SHA25604e8000123c5af48062f81bb00c031257d5ebb9ad05beb417c30d16be2c7a3fc
SHA512f3b9fc5f1231e909471630129678b53994a887fa9e77b460c8bf0d355da91bff36736007951504bfc4bf1584e736de2ae30451e4876a65b65e36878092dd5dab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD567285eed2ea2584f98c5a50ff32e7f24
SHA1dbe1d3147f0d9877794a7cf4ec1a5c56f09d87e1
SHA2566a4bb87509a4f676f64e10bf4f8532a971f1d577c3fed66426b70ca38d94f522
SHA51271744f174bd6465889efa7e20142c8ca168781f3af10f1350c1013b2366bfadb3b5485b6985edcd5f9e715b8c822310013f34539b762e7028f0b60a7e0707771
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E
Filesize482B
MD5dcc1515c1795804603a12e2bea419ff2
SHA11a5cd77061d24ab54299348d74042aab13f9ad2e
SHA2560ec6bcb0a1b0bad389ee8176f2cf7413bfcbf5ee89198c44195c17ae1300d194
SHA512a488bac19dd47c0ac314bac01088c1397a1f91a999885c213107099e627b2aca784fd949331583e0549eb1f1be956ff07ff685eb3010616fac106ba4ef3687c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD542f9eb99f6f3659d1e19bfa46efe2902
SHA1e8331e3dfa20a3b48fa6760169c46ee3ea47ba50
SHA256dfc02a7ccac68d93358d34580becc86b651817d69401b71b4be00887fe9e0261
SHA51245cf9ca088b5b70903e438df9f57a16026f064f0c3a0d67124fed292a242e933c800c21e811211c271ce9a040fd0ab1fe7c5cd63541a8754a222a3eefe497da6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
Filesize402B
MD57109ff60a3ddc84537a4c2e47ea88061
SHA187ab8cbe427f068746c2d2118d6b757d8ac92208
SHA2569d7c03bea6570341e7ce24024ba9b1c423af69c44989bd2463f76f8dc07f830b
SHA51240bc2b51b9be2139dcc4126f18e0705df41ed3a249fddb914b52f518f152bac03f169f8022350a3779af9b68b0bb36c581f03e42c7540947976ae713f4376ee1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5cdf485739f87636e10fca85115319c6c
SHA141e86befbbee54bdedcfbde9aaf902c84bb97438
SHA256704e1df2dafb87366520fa0195124d740c1f4fa4485b58f9ec940d8236d01a71
SHA512c813df867a3a5cce0e5986c3b5c2aad78f7ffacbaf464b45d2fbdc164137353dc777636fc750e2b53302896cf991f3de16d73f2722556fb61aa2fdf880cd4055
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\cb=gapi[1].js
Filesize133KB
MD54d1bd282f5a3799d4e2880cf69af9269
SHA12ede61be138a7beaa7d6214aa278479dce258adb
SHA2565e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
SHA512615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\3604799710-postmessagerelay[1].js
Filesize11KB
MD540aaadf2a7451d276b940cddefb2d0ed
SHA1b2fc8129a4f5e5a0c8cb631218f40a4230444d9e
SHA2564b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2
SHA5126f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\SKBZGMT4.htm
Filesize43KB
MD58f153cb74847bcedf66d22f59267eee4
SHA1cb210902b75603c5395aba39de1af701887d5369
SHA256c98b6665b138ecd7b993c54c8b61293b6fcfd42a88e145a7668ec6fc6ad42e45
SHA512ca3161bbd758ef26e0e0e04f6fd7e125d500db58766263ebcaf10da38a824574975bcd832f731a18be5dfa47cc26c165068ed0aeb9d88b9c36b29d2a4102a4e5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\errorPageStrings[1]
Filesize2KB
MD5e3e4a98353f119b80b323302f26b78fa
SHA120ee35a370cdd3a8a7d04b506410300fd0a6a864
SHA2569466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66
SHA512d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\fastbutton[2].htm
Filesize226B
MD54df07581948280a6e769a24c5d99d775
SHA1843a2c95362347eb8894a6acb607f139be65ded4
SHA2563561b93a48d81fac116ccd6e60163bd382abb1d594c81240f5718feb1f197f73
SHA512bfe455150379d9ec4303659ac16a5082e093ed248fa9d75276bda05287d8bd51c43aab5896826ca55ffee88dce281df359fed6d38395ac3e7cdb7b68c2d35e4a
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\platform_gapi.iframes.style.common[1].js
Filesize54KB
MD57ef4bc18139bcdbdd14c5b58b0955a67
SHA1afe44fd9a877f81a3c36f571c0fc934324c6cbd7
SHA256192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838
SHA5126c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\forbidframing[1]
Filesize2KB
MD55cd4ca3d0f819a2f671983a0692c6ddd
SHA1bbd2807010e5ba10f26da2bfa0123944d9521c53
SHA256916e48d15e96253e73408f0c85925463f3ee6da0c5600cb42dba50545c50133b
SHA5124420b522cbe8931bba82b4b6f7e78737f3bb98fc61496826acb69cfff266d1ac911b84cb0aeeadd05bd893a5d85d52d51777ed3f62512c4786593689bf2df7f0
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\httpErrorPagesScripts[1]
Filesize8KB
MD53f57b781cb3ef114dd0b665151571b7b
SHA1ce6a63f996df3a1cccb81720e21204b825e0238c
SHA25646e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad
SHA5128cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\rpc_shindig_random[1].js
Filesize14KB
MD523a7ab8d8ba33d255e61be9fc36b1d16
SHA1042d8431d552c81f4e504644ac88adce7bf2b76f
SHA256127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5
SHA512e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a