Malware Analysis Report

2024-10-23 17:25

Sample ID 240510-phnj7sdh4s
Target 2f0ff1ae1ed433b4f29c480d3f548ff3_JaffaCakes118
SHA256 fb1ec98e612ab409fae1d83057901f3e198dec09bf0df688d91966eb89ffaf21
Tags
socgholish downloader
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

fb1ec98e612ab409fae1d83057901f3e198dec09bf0df688d91966eb89ffaf21

Threat Level: Known bad

The file 2f0ff1ae1ed433b4f29c480d3f548ff3_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

socgholish downloader

SocGholish

Modifies Internet Explorer settings

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-10 12:19

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-10 12:19

Reported

2024-05-10 12:22

Platform

win7-20231129-en

Max time kernel

120s

Max time network

148s

Command Line

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f0ff1ae1ed433b4f29c480d3f548ff3_JaffaCakes118.html

Signatures

SocGholish

downloader socgholish

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 401b2b7bd4a2da01 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000164a605d0342e5439424784ee83fe3ea00000000020000000000106600000001000020000000efd4176c8bafcec3f10066af996fff930420d983c8a75cca143c0b4a682c90bc000000000e8000000002000020000000364972f6dc007c01b7d5d47c5988215a68cb3ec4c0f5ca32cdfd5e77e33f157390000000c21097fd21df9141ddd6f0600a800ae3bb5b1fcbae9e729f20da8fedbdb8f6b1634f22ebe82627534ad9a900632b76c3faa893c7e5ce299b73e2884b26340a8a4cd2857ffa2c7f038da49affc9388030c6a09f4bb4801c2f28b9a3132fdee17b87076e872c7662e603a04c5d08eb2f4bfa170b206c43701a322340cf58deb92aeb9babb02ca8450afd0103505458503a40000000924c5cb612e6d24152adff61f295a9c792364d1df2dd1100ceea3747b502cdb17c305bca818d81b35aa55a232ac88aa829605c216d2e0b7f17cbdb66645a16f9 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9F27D011-0EC7-11EF-B459-56A82BE80DF6} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000164a605d0342e5439424784ee83fe3ea000000000200000000001066000000010000200000002c081ac9a738b7a1ba509a23a8e28a639aa5abd24f074a5132f08a01fad28f01000000000e8000000002000020000000c106557823ccc672cdfb4add3d8eaed92b91457a2ff6690f5eff90d4ca329d6520000000920b244ac00b927a8bccef80f8278ddd1a714d1610c2c23a921fb78d2a3b42e540000000ce2b05b4a855056d437fbf409b60f5faf0950f9942114a9980c19361dc9e337aff1a51da712a281b888ce79f55fe7309c05cf8aa311dc9f83dd5e02f87847a71 C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421505468" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\iexplore.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A

Processes

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f0ff1ae1ed433b4f29c480d3f548ff3_JaffaCakes118.html

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 www.blogger.com udp
US 8.8.8.8:53 khamsat.com udp
US 8.8.8.8:53 1.bp.blogspot.com udp
US 8.8.8.8:53 4.bp.blogspot.com udp
US 8.8.8.8:53 img2.blogblog.com udp
US 8.8.8.8:53 3.bp.blogspot.com udp
US 8.8.8.8:53 resources.blogblog.com udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 dl.dropboxusercontent.com udp
US 8.8.8.8:53 ps-masters.blogspot.com udp
US 8.8.8.8:53 www.shy22.com udp
US 8.8.8.8:53 i.imgur.com udp
US 8.8.8.8:53 www.linkwithin.com udp
US 8.8.8.8:53 2.bp.blogspot.com udp
US 8.8.8.8:53 lh4.ggpht.com udp
US 8.8.8.8:53 www.psdeluxe.com udp
US 8.8.8.8:53 im33.gulfup.com udp
US 8.8.8.8:53 img1.blogblog.com udp
US 8.8.8.8:53 apis.google.com udp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
US 151.101.130.137:80 code.jquery.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 216.58.204.74:80 fonts.googleapis.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 162.125.64.15:443 dl.dropboxusercontent.com tcp
US 151.101.130.137:80 code.jquery.com tcp
IE 34.248.220.171:443 khamsat.com tcp
GB 162.125.64.15:443 dl.dropboxusercontent.com tcp
GB 216.58.204.74:80 fonts.googleapis.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
IE 34.248.220.171:443 khamsat.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.200.9:80 img1.blogblog.com tcp
GB 142.250.200.9:80 img1.blogblog.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 216.58.201.97:80 ps-masters.blogspot.com tcp
GB 216.58.201.97:80 ps-masters.blogspot.com tcp
GB 216.58.201.97:80 ps-masters.blogspot.com tcp
GB 216.58.204.74:80 fonts.googleapis.com tcp
GB 146.75.72.193:80 i.imgur.com tcp
GB 146.75.72.193:80 i.imgur.com tcp
GB 216.58.204.74:80 fonts.googleapis.com tcp
US 74.63.241.22:80 www.shy22.com tcp
US 74.63.241.22:80 www.shy22.com tcp
US 74.63.241.22:80 www.shy22.com tcp
US 74.63.241.22:80 www.shy22.com tcp
US 74.63.241.22:80 www.shy22.com tcp
SG 118.139.179.30:80 www.linkwithin.com tcp
US 74.63.241.22:80 www.shy22.com tcp
SG 118.139.179.30:80 www.linkwithin.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 142.250.200.9:443 img1.blogblog.com tcp
GB 216.58.201.110:443 apis.google.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 216.58.201.110:443 apis.google.com tcp
US 3.33.130.190:80 www.psdeluxe.com tcp
US 3.33.130.190:80 www.psdeluxe.com tcp
GB 146.75.72.193:443 i.imgur.com tcp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 8.8.8.8:53 pki.goog udp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 216.239.32.29:80 pki.goog tcp
US 8.8.8.8:53 lh5.googleusercontent.com udp
US 8.8.8.8:53 lh4.googleusercontent.com udp
GB 142.250.200.33:443 lh4.googleusercontent.com tcp
GB 142.250.200.33:443 lh4.googleusercontent.com tcp
GB 142.250.200.33:443 lh4.googleusercontent.com tcp
GB 142.250.200.33:443 lh4.googleusercontent.com tcp
US 8.8.8.8:53 lh6.googleusercontent.com udp
GB 216.58.212.195:80 fonts.gstatic.com tcp
GB 216.58.212.195:80 fonts.gstatic.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
US 8.8.8.8:53 blogger.googleusercontent.com udp
US 8.8.8.8:53 img.youtube.com udp
GB 142.250.200.33:443 blogger.googleusercontent.com tcp
GB 142.250.200.33:443 blogger.googleusercontent.com tcp
GB 142.250.200.33:443 blogger.googleusercontent.com tcp
GB 142.250.200.33:443 blogger.googleusercontent.com tcp
GB 142.250.200.33:443 blogger.googleusercontent.com tcp
GB 142.250.200.33:443 blogger.googleusercontent.com tcp
US 8.8.8.8:53 ocsp.r2m02.amazontrust.com udp
GB 142.250.180.14:443 img.youtube.com tcp
GB 142.250.180.14:443 img.youtube.com tcp
US 8.8.8.8:53 ocsp.r2m02.amazontrust.com udp
DK 143.204.245.189:80 ocsp.r2m02.amazontrust.com tcp
US 8.8.8.8:53 www.facebook.com udp
DK 143.204.245.189:80 ocsp.r2m02.amazontrust.com tcp
US 8.8.8.8:53 psmasters.disqus.com udp
GB 163.70.151.35:80 www.facebook.com tcp
GB 163.70.151.35:80 www.facebook.com tcp
US 199.232.192.134:80 psmasters.disqus.com tcp
US 199.232.192.134:80 psmasters.disqus.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 199.232.192.134:443 psmasters.disqus.com tcp
US 199.232.192.134:443 psmasters.disqus.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 142.250.200.33:443 lh3.googleusercontent.com tcp
GB 142.250.200.33:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 a.disquscdn.com udp
US 199.232.194.49:443 a.disquscdn.com tcp
US 199.232.194.49:443 a.disquscdn.com tcp
GB 142.250.200.33:443 lh3.googleusercontent.com tcp
GB 142.250.200.33:443 lh3.googleusercontent.com tcp
US 199.232.194.49:443 a.disquscdn.com tcp
US 199.232.194.49:443 a.disquscdn.com tcp
US 8.8.8.8:53 im33.gulfup.com udp
NL 23.62.61.129:80 www.bing.com tcp
NL 23.62.61.129:80 www.bing.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp

Files

C:\Users\Admin\AppData\Local\Temp\Tar1D65.tmp

MD5 435a9ac180383f9fa094131b173a2f7b
SHA1 76944ea657a9db94f9a4bef38f88c46ed4166983
SHA256 67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA512 1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

C:\Users\Admin\AppData\Local\Temp\Cab1D41.tmp

MD5 29f65ba8e88c063813cc50a4ea544e93
SHA1 05a7040d5c127e68c25d81cc51271ffb8bef3568
SHA256 1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512 e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 a266bb7dcc38a562631361bbf61dd11b
SHA1 3b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA512 0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 aa77561ffe6d710693a2b4be2178d36a
SHA1 cdd65a679e35cbfb8ddd7f7510cd48dfdbeaa43d
SHA256 d4f5915ceb947e1bd3e887173ccb4db953742a1536a1f3e19e7634a59e4c62cc
SHA512 991bcf012a96d5d782274fb2311f1c208bf07c4773c43226a3b7964b721c64ea57a143977fdd5201e5a0876f2a469be314475eed0dab0bd3273feb292f6df128

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 e1614ac7b5eef0c72b8a56488371d795
SHA1 2aafc45952500c6d4b671e29445fd9abad41857a
SHA256 efc99f3850fee7c4e1f9b28a2b7b85656afa273abba131eb6dc85ff59c5131c5
SHA512 ce589b94d0833641f43608135c955e7d31ed6fab5d114f8b4db3b2bde637d17d41ee51989754eb82eea36921ff2058163b9cce3c9adb8fca473cce082e5b5c8b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ce1ef93a887b2dcce78e890748a72d6b
SHA1 0d4b1c8d7c9f1c4780303930947ed838ba02f861
SHA256 cad63340cc4106a6aa7ea660290187a83d642ae3367e288fc67c1243729511a1
SHA512 e493d482519c59bb3459338e233cd2f7391f888b5972b5a63802eb31fa346a6aabf09390aece18e0a282d2080814985069bd4d054530974cf3129cfc1682fc37

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 fd0e13504b4fafed2f32903e2b264f09
SHA1 50624138d8b3cc079ca2922b3f15b788a0518cfb
SHA256 d58fe341a8f7be36857cd47f466df469f0e57eea24799d96a69dde6debf8588c
SHA512 ad7ce6e67f0eb6303152b08dd96db166ccb163c5e529b552e0f650cbda20bc0be5c0e0ae47345dbc2b9bfd0fcb0ab451f7c61fc5fd6ea1a37667af798f06c68d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 6457f528abcb88be4d1fb50d4b3aec91
SHA1 022c534c3790efa0efb5ad3ba674a7fcd1c2198d
SHA256 968769e1ebfe05691a0909b02468b38118b4f0c9d94d4dec556ac27cf3575d61
SHA512 5ad411a7e29db6e703b5ba7f9d586ef2e0e50f22951261bddc582a0b32401461e0587391a15cc8b98df4a72e5730066658756207d8f892ac11cb03135c1362d4

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

MD5 c3df71d1b58ef52f0c6c8fe1e658d4ec
SHA1 fd58fdccf6f39a896142db2b97286b89df02bd57
SHA256 0d41e19c6c4ed65ecd636804c27b908b588849b5b5b022af2768b8da19f32950
SHA512 7ca6a314a2796d73030730685eef8fe5278f43f0039b4b593ab9cc824fbc5a02f980410bdfae4d06b0e5d6a0fe110854620c3e725c41df43a5d46c3ed78d4830

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 fb6d34b3aa6554065da39a5190535f9f
SHA1 d0a0a04ee9f9a2d9f549fefc52690a6c402f1228
SHA256 8b59b89c65e039236e2ab6a04dee68af9c6fbcc5db80ad39c067a1928b433767
SHA512 840afaa92bc549c13969eb5ae56773f4275b54dda9ac7806a4811c06a8950e99da203b70d92d00d117791c2a5dcf6112803cb8fd05712632296c228b634b6a4e

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d034b828bce6c16a9fe43b396def3dc6
SHA1 110e46ded35a04954aa519799da5756790049c09
SHA256 d5766c9fa701b4dede6cd61e48ebc02fc2adc1f5063005df04327f364f386d58
SHA512 4eb72974b4dd168cf619c10320af1036a38b791ef0355196a3cca82ca16a321b81deee4aaca9760f4e9d93c1d0746926d53c69817c602ab4bbcd4f7242cb7c3a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 f3810f9d959b8ee4393034cadeb45298
SHA1 a73ad4397c615681e5d12c4ee99279e691f65fdc
SHA256 d87fbb3ea1e91731a9f42c56af1d05c45b5e08a44550738b4e70338f2b7c73a3
SHA512 787dacf4333535060d220ea2f9cbd13d4e638866dd3393a3ddf032f95da7998925b33d4459d8b3cf9257522cd74b7c1dcba70d2b0f1eea361677d25bc7e22460

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

MD5 3e455215095192e1b75d379fb187298a
SHA1 b1bc968bd4f49d622aa89a81f2150152a41d829c
SHA256 ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
SHA512 54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A9377E7E528F7E56B69A81C500ABC24

MD5 f58d1ce93e5480b8f059dc08c363aa17
SHA1 30f8c6ac0fcecd178d4fcefe09976b324f9b0514
SHA256 f617e6b7af775b9690f6ebb5907f2ba9b219f8567bf19b7f7cf2c621c61d0957
SHA512 705de16be62b831bdb6728a5c46345fdf865143358b2c2a0662e1cdb02c164e4ceff2ae6bfc05a7b540670d26c2ed18bfd0b6bed4143b6b6d9e0e7fe78c5b4c3

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VWUWR2XR\jquery-latest[1].js

MD5 3d93b072d14f2bd1ede58f4847f537fd
SHA1 73e5d044bd153dd912930e8be433059454ce19cd
SHA256 3029834a820c79c154c377f52e2719fc3ff2a27600a07ae089ea7fde9087f6bc
SHA512 78ac19342bee3a1c5ca864d702e742f561f629429ff0877572a36831ce83299b8df2ea4bdb6c63dd990975c9320dddc68ec8b5407299dee8345d01d090644d26

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VWUWR2XR\NBTDropDown%20RecentPost[1].js

MD5 f3e04340f4992b1ce10938b5be14c794
SHA1 6b117bc31b83485d2a204dc230c500e7492d7735
SHA256 6f61f2a24196e592b3725d5e3ace791e0cf6cce0309e12c424f30b37f3f40694
SHA512 ae121c14dc7716b5d4f0c7091d23bd5f7bef7d6564d5570201dc503b383a086f794c5eee5458663ee4c266e01748a812e79548d8b54ac579bde7177a64257605

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 2b510e12d300e84054662a69cdfaadfa
SHA1 131160d7cad10387635105531cd9da1242599560
SHA256 0c7fbcaa1662061dbab5d37a0adcb09f2f5780e0872c83fa36f633c3d7a92ee9
SHA512 469e21c5c30b373cd1a79195b17d8e29d9fd73dbad1556a23b41dd6ce1c5d1ef08781ed24283af6ce1caea7299e343f8f04738ead58aa4afa1453e1f899dd6bb

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 29d9cee35b8d9083f28ec8db46193b61
SHA1 d6de783b26d0fc8a8422205c4bd4bd73af5ec653
SHA256 407d7b25a55d5c8516441394b99574a9db48f87a5530c0420d925bd20b078b39
SHA512 762969d3072e0d754a3f00c511ca3668ed5b128bae179b42c3aac1e42f7216944a41ca943fb806afe318efa058cb90e3908061d80bc10e5064419e6908906658

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 bbc670d6f7949f68352c758669a73e60
SHA1 8ec13b456b29bf2ab6c1b6a4b6026f82462d3014
SHA256 5624e30c45251d898a334500ab93e851e450d96e2201af7e400ce2e416bf00db
SHA512 cbd4c512af205c2f24628fdff942a8197efdb1c60587f7a68e712fbfcd57ddfd08aa034e29817ba62eec20908711ef21aaab70ab60a4a7a2532011cc83096339

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 2bfa2275b95a43496eb3a1592ea5cf7f
SHA1 467a1e1bcd6574f0a681abe7df9e14c373b7b908
SHA256 2661cc285660c72ce91f9f93d13257df5d55cfef8ba6629127589b99e0a5fad7
SHA512 c4de8f7f142fb90218dc31dde3a2d2f57363419d2da1de6799fdea4c8fa909a9db155c074af75b0f9d1c132869c1d36143228840130659f88df1390c6d006ac0

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 0c27ccd9ba81ae81e0bba8b5c58194b5
SHA1 a96ee8296beba2b3830eeb6f8a296fc22574fc85
SHA256 68c28c717f752741f317c790a49ac73dbe59bfa6f0831bff701696f33b78bb07
SHA512 314e8d700d45931d52c8c296352e72efa3ef214a7cf43b2c15cb50945f445aeef5188f7a304a03ce515bcff64dab39671d7d5a94a682318a3cfde65b83f6c5af

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 8df9a08f5e5ce1ce15d479592fb4e491
SHA1 f45e3b21b9c662879ec1de660a68a9337a1a68d4
SHA256 2a71cc678892511f114523c8109623c7a9f949ff0ae1a8b4acf3517e256c121c
SHA512 1c9a3b738fc417ac26daea7a8f54081e73b8236557ed2339670bdc03bd8c8789f8db2bdfa859fe148d161282741b23d737411e277f11b4d003df4f0bd26e62ac

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

MD5 ad1d5f1aee3c580dcad38e7612165856
SHA1 b78687aa96d46b9cebd450b86e5d45c9ce82b1dd
SHA256 3e3e42aebd3f1ecd48cb3219c40ad52c1365f6c524be6e328fee05b6556f9574
SHA512 52a3c09219f242c3d8185af3d31594f860d9b31ec7604865313c1b5ab1a3fb0c43eaf76c5f6b8760acb863cca695be69e137ace54ea5d4fcf7ff0f92930a7d69

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

MD5 c5dfb849ca051355ee2dba1ac33eb028
SHA1 d69b561148f01c77c54578c10926df5b856976ad
SHA256 cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA512 88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a63eb29c681c500ee2c63c30596b7442
SHA1 463d069a1d5dd215ac53c1920ab1ecb8ef20a882
SHA256 cd77be01d52a3c97046690d80bbb442abb5f06c962a3abeca6ee62c8e7cf9d15
SHA512 a372ce139da1c90af710ca5232a63be6f3333b7b4c9ebaf3bb59c89d60dd5e6b12da09c63a13c1c1fdc2a176320af5951481ebfbfad791593c2f1255a2dfc7d4

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 9c528776593f59c2cc31c3ab9d8f735b
SHA1 e6b051c90686ceaec5f39174c71fff983cb4891f
SHA256 f1bc69f9f92cdbc3f2ae733cd0af1b0fdc685c08e20018cb2592dcf3e968ea98
SHA512 e7bcbcfb408bdd1408633d0ab2847e03a5dec49160059dc514e8c10299ac2d22a317cbb93dbafa0ed1710ff2e33a7986da2f73d887b8ad338cf0fd41474a1d56

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ec07a4a3134c71c95a7796b5eea661c3
SHA1 ba82cfc629540607c57cc5916f377bdf92670a1a
SHA256 e678926a52f1fa7e314c9b9c47168a7573bda622bf90340bd84b175141d4e0d0
SHA512 bb4f52892d6a342f544d2e21be5819a30bcddda3cc66fa44c1adb0b115790f4937e039939c206a5624f00434ac53bbfda4a2e25d9d3024aa28ee95450e92a2d8

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 9acf8b80bdcdfad09c216d97d4d13391
SHA1 2139649586428ca72d24779863a9b6ceeaeb24c9
SHA256 7c220bf0f50a2c5c8e2ff8052629607b1639e9201217efd1801b13147e7b2d6a
SHA512 0398ab3472c47615d32fb42f0ec3d23370360ea2a2fa380941fe22eff81b53d614fc8d3a5b1ffa15fbd94148c0002bbd31d968d313ed63256a39f3d15d5c46e9

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 38934dd878e2465d974c6819561fbe60
SHA1 2141e820598f1ee953a7f59e1bdace8246ed7a21
SHA256 374a8ad2dd66f5ef0704906163a96215f102fd0b9c36fa196d76a2d1de44c7f6
SHA512 4702ffa1485881ad1459731fc5f7ceae1fb894a510e86f8243a643c103c450e2b4fec45fa59455292fd2b8454eaffeba4113e666a054447447867507d2fe89c1

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 150585c995817a1e3aa3b031632abded
SHA1 b40b8c5a16f3ec0994f204646f094f3e6190e0a5
SHA256 8f497485b96cada007e762527aad057a34b428d060e92b925b9505ec94ceb8e2
SHA512 f150c4a57a8e220f5724423170c1b13077ae6297569e497480c916b9c1acdeb0e2b7dc792748cad2c28d289442c54c0cd8db5dcca758648beadf535bc17b263a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 153bb53f8d2b37eab4bf2eebd3214701
SHA1 24e7b342ddb7b2bc80daac868cf1c810483fada0
SHA256 087fede6a374f9569a00d8204b7911eb13d502ef648729948b1aac6c2552548b
SHA512 9f94052da5cf3ec307ccb955149eb6e2ddfa14748c4882a66977703932865f8d1c62b633bdb38af43cc4b6ccdf3f7c5196cfc95398325eded92e87c58090d18e

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 615a9d7bdf014ba037888a22c08f29d8
SHA1 94a36db450b4c0b607be123c47c3996dc3d79588
SHA256 398cbcc60dce4f9f429d55a62cb645b84ea0b19b2ee6ace25a38f286342744b2
SHA512 ca7b92e9948c86858242bb9b55cec2ebd5d7179bdaf18eeb3e1374e38bc38da6470ee037ddbd2d9abd0c60f5ca3a29379ac647ea57cc389065c1fb9220e5951d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1e1dceca008a0e8f9c8e12f9a6d67f1e
SHA1 b93c32efcd7126097886ee3ded2eb3c9425dbfb6
SHA256 7d879fd7c2b16a9b7b517df3cfd8809b6e0f72bcb70c05d31dc80ab2a7ce9385
SHA512 5c8bbfeb86ad39b7ab761c33b4569b49f2a7c1189be7e95a41498490612965eb23ef54d068e3e9313bbf6b51d8154d867a8909d38448633c0a04431080887f9a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1c7b0c84292c7dac9889780ccfb3c1c6
SHA1 48c7002a6b6ca4cbba15cd69c3d0e13081ae6e45
SHA256 464d761fdcda98faa71f3cdd2e28b6406609de6ca29ecdc810df269fc184182c
SHA512 44180df22b851184d8ade373deb4f532cd589543f18e94b4a2250075b7d580cb84a645b3e925d78b970e9cf2c0813bf9ee0de93f0e1ed1bdb9fc014af587f9ed

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 7d2595f0bf1b71d33c1d296f698b1852
SHA1 6611507ff85cd9757e139f4b74d9716a7749d59b
SHA256 cad2a5868533310d4b97553c654b6d1448f5ccdb24ef5ed2e6ea8582d4b0b601
SHA512 21846c3222bd02d5248bce4819f0baf75da818b6983c8940fe7ef0d9ec931bdfad714221ecfbcf94c220b841cb877be477bf3849cac3ab20f139195f21796fcf

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 2b786b8b93391bca4981a996ea9c5806
SHA1 dfeeb308820a5a123437cd1e7ff8cdc8b1e93129
SHA256 2157c8eac84c20e1740636bb0a078d996db870344a564fc94d38c1adc29e8590
SHA512 7006ca75ef98718f43a57d6d1a165ff13531de0764dabc279e169a9cd3e3e354baab1e9dd7b95f2d697e8373c9c02bf3f190f6480ef173bad69e33c2597305fe

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d7fe14195000866a0861cf731ec26fb9
SHA1 e47388d9eb8f6228aded16f7d184169a241879d9
SHA256 0e21e30651061915a5f5b5ff8995634934912f3d886e557bc1834af7ba08ec86
SHA512 7a458613df85036e028a88fad0625c529e04636365c9a0973a7d55dd5925111ce1bb7c63c274951426311bd7644268bc7f3d0749aebf5086a8c7bcb7ac412ec5

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 cf69263a048bce29c8fe00638153034f
SHA1 a02439485f44ca3241aae5d38eceb517d4a9d244
SHA256 c43eb52b09edd3d29d62feb32e44fe0968d0507d879036876809e027128353fa
SHA512 c89206ffea7a1eaa90a87a0c3b6c96e1c1f3354bef3dbc15e7a48499f54f2e0d29361f1aa0152b74096a0a8537d6a4ee1df39df6512ce685d0f1b260e1c087fa

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 7729e01a86dd391ee1a555e86a659155
SHA1 67d8fa3e3b40bd48811bf9c75093b73868253b6d
SHA256 b4642d54f4bf642df3313765f77aee88da8d40e4dfc6e5a2bd339b74113426ea
SHA512 91ed639a505bf59ed7bc0afffeab8e7aae0dcf58b4f9fd707e8a4525c00693e5950374ad0f327f47a697591d3e3d2352dcb9530a2066d466f55ee740130ef2b6

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a47659aaccbac49303759724579e7b50
SHA1 e5cea20b5e4aa5bdc19416f8ed49ddf89ab3d0df
SHA256 350c9f32c051c85141d62d30ff121a1a85df2dd0fb806fbe98b409f4a213947e
SHA512 e60521947cfc41275c49fd4c91c36f402de1d04ceb830ca8d495fbcaf598728321799412f6c2f112fb5261cd0f94d7d2c221a1413aad89b4edff946ab6e83b92

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 051e84cac9e97151a84686bb427fd971
SHA1 8df65b3118fed1fee4164a378e511ba0d41dded6
SHA256 fc32c7277fc871a488093161331c583cc1a798aa6509cc9b3472700b9758020a
SHA512 9e30385aa3e5ce7b96d717c416eca3f15e097e8984d753944b6bc35e41168f3f64b6c4516c52962968b90f1efd9e155688849dafe3065d1ebee560cfe18f06a2

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5 e4a68ac854ac5242460afd72481b2a44
SHA1 df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256 cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA512 5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c2b3ac1e5fd5abb2156ffb423a432899
SHA1 44e700838663ffcdfbf9c9656de2226f7e1fe046
SHA256 603f0011fa699c10aaeb209d189a39d369e89e8548fa6e3a8ea6760ecb765845
SHA512 ce5f847404aeae1861db447d2f92be38afd77fb0e9c0d94f2e220dc9d6678ef1c9b268c0eec5585e64875381cb2abdd2a65c6b30f229d6e048fd5c3e43f19d04

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5 88a22388cb99d646948d2da7f302a0ec
SHA1 ba0b0c4d1acd7d7e624941f39ed4a76ceff25fed
SHA256 ec96802fe0f0e10579f8787cbe7ce342ad502a9c3ad0bba9e3c7efdfe0c8d3fb
SHA512 784eeba8429f5a0ede27c0481e9095c5af3d53c576f4b8bfc41ed81cd837125619bf9a36283246c3026a91446756ba62d8a3ff834bff72c21635536b37c3c229

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d08b35ed073be36d3aa7e5d6cbe662d7
SHA1 73df855ca8b7bb5b3c963fdd8e2931ec0b9f5b5f
SHA256 19efb7af9a11da714c96994477fa1b870cf3f75527a77642e627867682ec9239
SHA512 433b7c2530e14522485df88a85dbd3408ba028770a309e85abc91fc608446b8e8d8ff7c3d3c0d513849370f9629f8146e321e2e1e88e0e4cf73d78273f891736

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 10a7f11403eb5ebbb1a11eb9294c4d3d
SHA1 0525eb95830fadde235561c394264d3e2740a3af
SHA256 ae02325655374b27569ea9467371b9798bca29421c920f1bfdade5bfcda89173
SHA512 20918a6f7ca5629ec630df79c4d34c3ee69b3d6eaee042458e8150e303158477dfd388e3c366af845e6aa4ef8906a562a9cd1463235ec1957cfb58a8d11db17c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ba69fe3180e44ab8c9f97868b0864c19
SHA1 c055c5b4a7dc87ca76c72ab96e6a023481952f4c
SHA256 0b69098dd90b56752d79885cbf2da7345e4261dc1ba8bc790e7476d141f6d2d8
SHA512 791b8fcc348fa7329ffd94dbf242e2bc998a4a322a352bdd886a4a7ca82559fb9a56bbe55f290457071283eb7ef76b770263d07c4ea705c5580336a5ae09ed4b

C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

MD5 da597791be3b6e732f0bc8b20e38ee62
SHA1 1125c45d285c360542027d7554a5c442288974de
SHA256 5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
SHA512 d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 4a8e55b98e7d891682e881e8038ec0e3
SHA1 070340221403a622215eb192c9a5cf497bc9db51
SHA256 0c54289a6b89e5f4f214734e2f689b4769946397c7d53c9fbb6cae70a5436760
SHA512 f9401151ebfca682708fe6b962665767a57f4c89b44d47fae3377d97eea3e8fd7d1a1493e9cfcc79ddcdab87757964022ac24afc0e9f0e684b6f4f040202b8d9

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c36c99a7ff70911cd50bd9b0bb1b5a51
SHA1 e0b731e55c33a9270915281834e38d4e33d0bc94
SHA256 23b1e26c7d92c0103593595a087c49bb270829c515bfdeb2cefd88610409521e
SHA512 f8871739238db9f36f3e6c2ad594fcc447c8d871e68fb7af8f8f64f5db1dbae27fa17a525938684450ae9552180baa0eb51fc9cbf58bf87e9b8128e5147b19fc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e893cb1b10f8578f0357e3d1486bdc13
SHA1 518ae57e20526472f4fc5e2aabb19ce023ca75be
SHA256 bb65e9e9740806644763bf89238763cbb001868f25db4757cfe5fa25927fb785
SHA512 a6b30fb49093d3595057739a6836aaa5d5ae1229f4753a3081027dc8797eb78694ba282bbdf00f8689e7317bf2c095af2d3f236133b4871b751cd099b7ef897f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c8f9d8b66cea6c4b89441c3776aa6a01
SHA1 414df236f4d16b35fb9411e80127bd066c618756
SHA256 24ad2f1b704d1621f61b719c5d578a1245d07d9497eff75a0e4c40548a37340b
SHA512 b95719c4069a9b615361a1250241ee5eea3a1a689f8122a1ffaeb548245540253bb7db7bb5d5e07ba0bc292c85e7b198069f4ced282c3c5858395e7d5850d71f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 77e9b9271a6448cddc2b30755eb0a38e
SHA1 c84955b8fbf4058d37341d7e994afbe786248574
SHA256 e0cd13e6374c598d0146eb17e69c99cd7f272255c0f940cb64f7dd9acb4e03c2
SHA512 a831cefd27c217561294eab576c6f4eb716468cd9b7b25a8d043cac7369503cbd5dd36760ee46a872585d66fb1d3edb4806c48e6af280003c55d8bbd642bc474

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1cdc6bd4ccd0f71fcc0c646e4cd7db41
SHA1 0d1fcf46bb1350c77e78576b0b666e84fea4b88f
SHA256 727e90738e493bdd45e648d05632941434c7142f6ecb07288a9067f3c100ca49
SHA512 a8617806d2c58e2203d02ae22a23282b18aee7f78dad9cf23c725bb24dbbfccf9793f633cda88d28f5cc0bcbcf6e0eed90a185b7971cb1f012f7b111f637485c

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a4fa63520a4ae1074b7a456f3dcbbf06
SHA1 5983fed1f420750988ea6923af84e501b4a3375b
SHA256 20ec90f1c8e339aa5e67d98df0c84fe1fb933862a76b62d09557bc7035c95542
SHA512 e26c1cefc1df2cbbe7b0004d946227b130c16db856b1b96e75ff684b2c3aabae2f60a3135dc8c2b9335bebb9c8e6ad009a91a76b1445a81b29853ec0024fb4ad

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 614855bdf9a819d8221941270e2a0201
SHA1 43efcbba668cb40e7f1c44b335d8629a095888db
SHA256 008c2144a8e7ee87a000f408d6c7398f5cabadeebb5dcd5f2df854d844143368
SHA512 7fdafbbba16306373d180097ee08bc51e6bfed006a5cd7b707290a9f4dcf4840f41d16a55d518cf840b1dbdeedfa6d46468290ad6fbc88c2d461376446bf9528

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 8ccb03ea2684256fee6344b6b8fdc826
SHA1 021bf5201dd2c2dc1e65846a443acb4ec184af68
SHA256 77c47c3cfb81458fb9f7b9f613baaa7f8f28b6afc45d5c30ba1e1997a701cd60
SHA512 f93591ac644205e9959e101026dbe62e653900563f48e998526e9ba23cb587ac840b2ff5a62c725f07db732bf81ba00fbe6568c3345509589a6947878a76a72d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 a8f2dd49bc2a5612121f0a9d898115d6
SHA1 689ea5b8bcfad93270644df60d2a4a515be18a0a
SHA256 b528599d17328ed29c5e23fb63e9efc4c5f98179907017d147ba8412e2995cdf
SHA512 9eeac80b49759b198999f74771ab845ca4a047e2c23704f042b31e8d6c9a7443d2357064f496b5690f77197a8f44b7bd12bc9293726d953e13377fb19c5f1e17

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-10 12:19

Reported

2024-05-10 12:22

Platform

win10v2004-20240226-en

Max time kernel

138s

Max time network

167s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2f0ff1ae1ed433b4f29c480d3f548ff3_JaffaCakes118.html

Signatures

N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2f0ff1ae1ed433b4f29c480d3f548ff3_JaffaCakes118.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=3592 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5492 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4540 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5404 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5776 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=4376 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --mojo-platform-channel-handle=6068 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --mojo-platform-channel-handle=3756 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
GB 51.140.244.186:443 nav-edge.smartscreen.microsoft.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 13.107.6.158:443 business.bing.com tcp
US 8.8.8.8:53 239.249.30.184.in-addr.arpa udp
US 8.8.8.8:53 186.244.140.51.in-addr.arpa udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 104.109.143.24:443 bzib.nelreports.net tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
BE 2.21.17.194:443 www.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 24.143.109.104.in-addr.arpa udp
US 8.8.8.8:53 194.17.21.2.in-addr.arpa udp
US 8.8.8.8:53 17.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 13.107.253.64:443 tcp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 nw-umwatson.events.data.microsoft.com udp
US 20.189.173.21:443 nw-umwatson.events.data.microsoft.com tcp
US 8.8.8.8:53 21.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 50.23.12.20.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
NL 23.62.61.75:443 www.bing.com tcp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 ajax.googleapis.com udp
US 8.8.8.8:53 www.blogger.com udp
US 8.8.8.8:53 www.blogger.com udp
US 8.8.8.8:53 khamsat.com udp
US 8.8.8.8:53 khamsat.com udp
US 8.8.8.8:53 1.bp.blogspot.com udp
US 8.8.8.8:53 1.bp.blogspot.com udp
GB 216.58.204.74:80 fonts.googleapis.com tcp
GB 216.58.204.74:80 fonts.googleapis.com tcp
IE 18.202.173.49:443 khamsat.com tcp
GB 142.250.187.225:80 1.bp.blogspot.com tcp
GB 142.250.200.9:443 www.blogger.com tcp
GB 142.250.200.9:443 www.blogger.com tcp
GB 216.58.212.202:80 ajax.googleapis.com tcp
GB 216.58.212.195:80 fonts.gstatic.com tcp
US 8.8.8.8:53 75.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 9.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 49.173.202.18.in-addr.arpa udp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 c.s-microsoft.com udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 s7.addthis.com udp
BE 104.68.81.91:445 s7.addthis.com tcp
US 8.8.8.8:53 4.bp.blogspot.com udp
US 8.8.8.8:53 4.bp.blogspot.com udp
GB 142.250.187.225:80 4.bp.blogspot.com tcp
GB 142.250.200.9:443 www.blogger.com udp
GB 142.250.187.225:80 4.bp.blogspot.com tcp
GB 142.250.187.225:80 4.bp.blogspot.com tcp
GB 142.250.187.225:80 4.bp.blogspot.com tcp
GB 142.250.187.225:80 4.bp.blogspot.com tcp
GB 142.250.187.225:80 4.bp.blogspot.com tcp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 13.107.246.64:443 edgestatic.azureedge.net tcp
US 8.8.8.8:53 3.bp.blogspot.com udp
US 8.8.8.8:53 3.bp.blogspot.com udp
GB 142.250.187.225:80 3.bp.blogspot.com tcp
US 8.8.8.8:53 64.246.107.13.in-addr.arpa udp
US 8.8.8.8:53 s7.addthis.com udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 code.jquery.com udp
US 8.8.8.8:53 dl.dropboxusercontent.com udp
US 8.8.8.8:53 dl.dropboxusercontent.com udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
US 8.8.8.8:53 lh5.googleusercontent.com udp
US 8.8.8.8:53 lh4.googleusercontent.com udp
US 8.8.8.8:53 lh4.googleusercontent.com udp
US 8.8.8.8:53 lh6.googleusercontent.com udp
US 8.8.8.8:53 lh6.googleusercontent.com udp
US 151.101.130.137:80 code.jquery.com tcp
GB 162.125.64.15:443 dl.dropboxusercontent.com tcp
GB 162.125.64.15:443 dl.dropboxusercontent.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
GB 142.250.200.33:443 lh6.googleusercontent.com tcp
US 8.8.8.8:53 ps-masters.blogspot.com udp
US 8.8.8.8:53 ps-masters.blogspot.com udp
US 8.8.8.8:53 www.linkwithin.com udp
US 8.8.8.8:53 www.linkwithin.com udp
US 8.8.8.8:53 apis.google.com udp
US 8.8.8.8:53 apis.google.com udp
US 8.8.8.8:53 img2.blogblog.com udp
US 8.8.8.8:53 img2.blogblog.com udp
US 8.8.8.8:53 resources.blogblog.com udp
US 8.8.8.8:53 resources.blogblog.com udp
US 8.8.8.8:53 www.shy22.com udp
US 8.8.8.8:53 www.shy22.com udp
SG 118.139.179.30:80 www.linkwithin.com tcp
GB 216.58.201.97:80 ps-masters.blogspot.com tcp
GB 216.58.201.97:80 ps-masters.blogspot.com tcp
GB 216.58.201.97:80 ps-masters.blogspot.com tcp
GB 142.250.200.9:80 resources.blogblog.com tcp
GB 216.58.201.110:443 apis.google.com tcp
GB 142.250.200.9:443 resources.blogblog.com tcp
NL 185.107.56.194:80 www.shy22.com tcp
SG 118.139.179.30:80 www.linkwithin.com tcp
US 8.8.8.8:53 137.130.101.151.in-addr.arpa udp
US 8.8.8.8:53 15.64.125.162.in-addr.arpa udp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 194.56.107.185.in-addr.arpa udp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
NL 185.107.56.194:80 www.shy22.com tcp
NL 185.107.56.194:80 www.shy22.com tcp
NL 185.107.56.194:80 www.shy22.com tcp
US 8.8.8.8:53 i.imgur.com udp
US 8.8.8.8:53 i.imgur.com udp
SG 118.139.179.30:80 www.linkwithin.com tcp
NL 185.107.56.194:80 www.shy22.com tcp
GB 151.101.60.193:80 i.imgur.com tcp
US 8.8.8.8:53 2.bp.blogspot.com udp
US 8.8.8.8:53 2.bp.blogspot.com udp
US 8.8.8.8:53 i.imgur.com udp
US 8.8.8.8:53 i.imgur.com udp
GB 142.250.187.225:80 2.bp.blogspot.com tcp
GB 146.75.72.193:443 i.imgur.com tcp
US 8.8.8.8:53 lh4.ggpht.com udp
US 8.8.8.8:53 lh4.ggpht.com udp
GB 142.250.187.225:80 lh4.ggpht.com tcp
US 8.8.8.8:53 www.psdeluxe.com udp
US 8.8.8.8:53 www.psdeluxe.com udp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
US 3.33.130.190:80 www.psdeluxe.com tcp
US 8.8.8.8:53 im33.gulfup.com udp
US 8.8.8.8:53 im33.gulfup.com udp
GB 142.250.187.225:80 lh4.ggpht.com tcp
GB 142.250.187.225:80 lh4.ggpht.com tcp
US 8.8.8.8:53 30.179.139.118.in-addr.arpa udp
US 8.8.8.8:53 193.60.101.151.in-addr.arpa udp
US 8.8.8.8:53 img2.blogblog.com udp
US 8.8.8.8:53 img2.blogblog.com udp
US 8.8.8.8:53 img1.blogblog.com udp
US 8.8.8.8:53 img1.blogblog.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
NL 185.107.56.194:80 www.shy22.com tcp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:80 www.facebook.com tcp
US 8.8.8.8:53 blogger.googleusercontent.com udp
US 8.8.8.8:53 blogger.googleusercontent.com udp
GB 163.70.151.35:80 www.facebook.com tcp
US 8.8.8.8:53 23.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 190.130.33.3.in-addr.arpa udp
US 8.8.8.8:53 193.72.75.146.in-addr.arpa udp
GB 142.250.200.33:443 blogger.googleusercontent.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com udp
US 8.8.8.8:53 img.youtube.com udp
US 8.8.8.8:53 img.youtube.com udp
GB 142.250.180.14:443 img.youtube.com tcp
US 8.8.8.8:53 im33.gulfup.com udp
US 8.8.8.8:53 im33.gulfup.com udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
GB 142.250.180.14:443 img.youtube.com udp
US 8.8.8.8:53 im33.gulfup.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 13.107.246.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 216.58.212.195:80 fonts.gstatic.com tcp
US 8.8.8.8:53 connect.facebook.net udp
US 8.8.8.8:53 connect.facebook.net udp
GB 163.70.151.21:445 connect.facebook.net tcp
GB 163.70.151.21:139 connect.facebook.net tcp
US 8.8.8.8:53 133.211.185.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 209.205.72.20.in-addr.arpa udp
GB 142.250.178.4:445 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
NL 23.62.61.56:443 www.bing.com tcp
US 8.8.8.8:53 56.61.62.23.in-addr.arpa udp
GB 142.250.200.9:443 img1.blogblog.com udp
US 8.8.8.8:53 psmasters.disqus.com udp
US 8.8.8.8:53 psmasters.disqus.com udp
GB 216.58.201.110:443 img.youtube.com udp
US 199.232.192.134:80 psmasters.disqus.com tcp
US 199.232.192.134:80 psmasters.disqus.com tcp
US 8.8.8.8:53 psmasters.disqus.com udp
US 8.8.8.8:53 psmasters.disqus.com udp
US 8.8.8.8:53 24.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 134.192.232.199.in-addr.arpa udp
US 199.232.192.134:443 psmasters.disqus.com tcp
US 199.232.192.134:443 psmasters.disqus.com tcp
US 8.8.8.8:53 a.disquscdn.com udp
US 8.8.8.8:53 a.disquscdn.com udp
US 199.232.194.49:443 a.disquscdn.com tcp
US 199.232.194.49:443 a.disquscdn.com tcp
US 8.8.8.8:53 psmasters.disqus.com udp
US 8.8.8.8:53 psmasters.disqus.com udp
US 8.8.8.8:53 49.194.232.199.in-addr.arpa udp
US 199.232.192.134:445 psmasters.disqus.com tcp
US 199.232.196.134:445 psmasters.disqus.com tcp
US 199.232.192.134:139 psmasters.disqus.com tcp

Files

N/A