Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
127s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 13:18
Static task
static1
Behavioral task
behavioral1
Sample
3fa9b260d34660ca1935943c2b905f1a_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3fa9b260d34660ca1935943c2b905f1a_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3fa9b260d34660ca1935943c2b905f1a_JaffaCakes118.html
-
Size
176KB
-
MD5
3fa9b260d34660ca1935943c2b905f1a
-
SHA1
57b566c4e9174679842393b469896af0177e7ca2
-
SHA256
ba7ede6b20324ed4f6c25d69362976a3842495a2b386ba395b059a581e8b51f0
-
SHA512
1ba90b7295dff6e84ba1825074ed056acd62a6d6dfba6daee57e5d17e726fd9c304ca2aa8fb14fbab79123d42eee14b2ad36a66f4e48b11d56054aa3ee38fcdf
-
SSDEEP
1536:Sqt58gd8Wu8pI8Cd8hd8dQgbH//WoS3GGNkFyYfBCJiZ++aeTH+WK/Lf1/hpnVSV:SHCT3G/FDBCJi9B
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "17975" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "27937" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "233" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "37201" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "37133" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "27943" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "37201" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "27321" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18054" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8790" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8776" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8790" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8776" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8790" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e936100000000020000000000106600000001000020000000cf1ed34bdd5ea9d8369ed23b566c153ad05ca524928db79e649ffc66b553ab7e000000000e8000000002000020000000e840cc84e05635aa510dbb1a45c865019e0a46a8db7c25835afff91816bfccaa20000000cd22d216e036f5c7daec9dbd151cc771177e31bd6ade738b95b311f0bc77de0e4000000045f043f151b2e9e803e7fa4a67e060ec945f9e0561bcf3da5fb73194a72e80b8667ae1b5e077315113f658223d2bc6c43f96acafb9c49cd523917f3b29b18a61 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "37215" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "37215" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18063" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18057" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17975" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "233" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18054" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "45500" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "27855" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1932 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1932 iexplore.exe 1932 iexplore.exe 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1932 wrote to memory of 2556 1932 iexplore.exe 28 PID 1932 wrote to memory of 2556 1932 iexplore.exe 28 PID 1932 wrote to memory of 2556 1932 iexplore.exe 28 PID 1932 wrote to memory of 2556 1932 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3fa9b260d34660ca1935943c2b905f1a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1932 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2556
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD535a62188a39dacbf08f0e3e71892d707
SHA1f3ee7d50d054091e6d75febef0ff6fbd94e8e1ee
SHA256f0767ba73af0701ad4b9064e1577a383d20bdfb96ea73cd4c114d56439a1fbc6
SHA512201391e2e85b771b0bce0332a6d24aa38d94eb43b6bd9c87845bfec1d6eff513a84ba802df1c958abb1807629937b3963898c40a1c2f67a3a6912522224ff230
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_6E4381F77BE6F6EB436B295D285593C5
Filesize471B
MD55a9904faebec3b8f5e2901208811fb5b
SHA18cd21e8b4f938951f805f3066fb3468c03b3dc23
SHA256a6b1be0586c89ff27db5c72f99b72ba9a07c91c991e6d13683e8de37c60d86bb
SHA512d306c4d45ced62d1f5df8eb234d492880fb6831f83f615aa5dcdf22b1b60d125787f8ec6b2aa6d8ebe5cb894661f4d4f2175e4516c3769d0b918784cbc8816e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5bd199eae6cf27935eb9af0a79f4f2e73
SHA1a3c0f00157e0e2792d329faf234f52f113365ff2
SHA256596ac8e82939e3fe1091b12749c4120b4cdb8fae884f50fd26f690884b66449e
SHA512595cc7ffeeb8b0bed81823464e4e3bda9db509c2382451bd2a42ada69cd9cc345b2ba8af2b4a1476f6e7288de47cc46c912552c6353955de72c9f017e7fb4d0d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b8523afa5073f851eccb52f38afd8e6a
SHA165a99af49adc3b340a57a744e9a3a6a4d1316529
SHA2564e661a4e11a50755c553b8b47321488d1ea9a5a15ea059daed4c6a153b7c9c3b
SHA512d3db2ac3515e48f06e4bd87dbdc441be402553942ee9fc420b223f18c9dc554693da92bd427454da269134f57d5c8b0aeff6be589849c8e5260d6a340907ed76
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ae1f558eb38941e92ed558bd7d9f9581
SHA1279fdce5a7a8c9a55480169bc40ab5ccd1e080a3
SHA25687b6c993a870eb56deb049aee7f68ee351d99e6aafec5037e689115ad4ca35c3
SHA5121ac09f9613408ccb01b0ee6653886f061a4d9786665e43690b1a6c456e62f7867689339ea9c6096ff94fd903177c53b885c445619c2a244b589cb3a618805313
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54354129fc11fa31a723d9d6ab90382b8
SHA1111543ed576b1bafccf8736b9871cf808ab4ca0f
SHA256f3edf5d0158152ac4d42c25f5c22eab6f7710c3253b2573f54cdedf0ed535502
SHA512adc57fef14385e3032b330204e4a44289fda96ae859a26d9177daeac75056216e695d8c168c4f1baaab860273359456a39b098a18a68100ebecde41e0ed9c519
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b67aab7dffb894d3e5afc217d75c3348
SHA16e65541ef5ae5632cb538792985c8d2e9acb4471
SHA2567b3871976a900e78961bcf1f8cde379b8d5894f2f2ae5315d06873d52bb08ee0
SHA512b941dcff6c23dad0a0354639c1eab611e9d916ce9ca184ffcee04d873f227688817099949d983c8fbf5bcff293e6c2d873eba80d6cfcdd586a27b1cfd423d841
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f249b14bfcb856a45ddfdf1345703bbd
SHA165386b3c0b2a07b4cbbd4687b09b57717d2eb3b2
SHA25618a4be8fb3eadb491e7df2e0de449a1fde90b960e1bfcbcf1aaa7b1a982469ac
SHA512a6b5c9d3eb05c7a95abb46c9c295647695aa8329fc94e06a767e657fc84dcba7b638f060f5d5bc2e675e0f00602eb8810f904baf9f4070ebc2f7c63a4d85a9cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56be6ba118e7eb7b729be5446b6b2c3d8
SHA11755c39518626dbe58a9229d59159a0855f832e5
SHA2562c6d4e3b8cbb97502e286dfad93e7dca92bb61a957fdbb7778a2ffa2a78cb82b
SHA5125ea871674997ac3aa7a3da86dcd22672836defdfe23be864754b77e7e44d995735197410d6bd6b95778e322266b3948d51e5b00229fdac058d1a3370e95d9d61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55b498ac72bd3ffb05c980ba76eadc67b
SHA1d63e8de22ff53d47348884b0f8dbc4691c210bf4
SHA256b6636e7fedca96855b7a324e82060d6ebb0d634184617cf1a00db79cf1f9b9e8
SHA512c972c10a499011041d7cbf419a7d7151d7aab4d9ff673d3e3aeeff7d98a9e1c30ec89feae8b2d0a81525671cbb3ae433faece1f162e6eead6a463b000c69e6af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e9e6228f1bf6e10a5822fc25bbfe5187
SHA195e7eaa89bc1437355b806759d6ae83ecf9f5d6f
SHA256cc3a2194f289f77d6cc8c84637418f44a302c159f3933bdf7ade7e2d6565510a
SHA512936a29b860b3a7a25686d4028c1dff31452c6d214ab8f23fd8168b5b657cc26bb9dc84dc89d874d04873b2928d4f26279cd0c72f57504b26fc774886d3ab91e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dc801e14da09543ad28bd63bb82de8cf
SHA184fccbfd74b3b5a7f22b4bb60206a382aeee11d1
SHA256251a03276ddd856b63a664faf1e798c681da57ade2765b6581a701a7ea4d9005
SHA51238bbea5e10c6719c515145a3f014adc5aed2807d27b2fdfdd15c9ac502422c7117d9ca894e17ff596f4292023c6d645ed8eb64819750522ed55dbaf3599b57de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58101393dce5a459da6b66441df48f13e
SHA1269239c9bf5363d2418ea60cdf7090c7bd1ee7e1
SHA2564233e99d7683679e123dc9c2d6390b3683b9cbd3ed4d6dbdc645030c5e5f7246
SHA512ff14f14d2c033b1349664d144ebea68a36a1cf28b27259a3e2c685694eec7c5d4eba9e71abad330bcc920e3b878ec4cbb4dc1f9e6d8622bf863402b7d91614f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD599cf397bdf390096921492f6ac80b6ee
SHA1a8a6c098b251a8a2ccb3ae564d07d699465d44a0
SHA256fcb068f41aa010b26cbdca41e5e8d6428c185fd3d7b7feb410dbef9f4f455307
SHA51214fe16526076d594ec0172a2232659f19b36054baa245088d0eb0ab89161780852b63e52007e6b6b8c67c56fbceefdfa091b243301c445465f0c21460838715d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fa4a12f3dd773983df0b64a6acd8e379
SHA1c774a4d8e1df9006538c7d283df212e70babc558
SHA256abfc74234f98f70d89b494614ed749d8feb32cf7442dc709285d79c67de0fd69
SHA5120d92551a7db1e1e5832a9ae16c209bf752285a7e039e2f03d8f8cd1e1d0e62e80ff902ebae1b2d7bd9f7017fa07baab3ae07091c040aee1345502463b8711881
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d6ee6401d6901e3af161ca471601b42a
SHA1b00bc94be30b9c307f4c92866205c77ab927c4ea
SHA2562b95bbd1e301d43074b114f9606437fecce565847aabdb9a9b978bf97caf8384
SHA5120415fa65dbc7d08510637b99742ce3a54d66fb0bfc1bc77bb9751b1415703d814c3043003549b97b3cdb81f42fdffc3bc90fa7cfa2aeee7cf89bf701b5a35c00
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56fc6c62eaec34702308cdc9042422fc0
SHA19dc72ff6b1bee50ee11b8c2fbce3c7fd72bcd30a
SHA256f8e78eb36eadbb7ae4b5b3908f6485cf95ec890abea789a8b8cb68c2efc532e3
SHA5126b028427b26383a5bb618a95cfadca02e7b4c6229cc4032377a41c2b388fb1b704d38e11d5402115f05a9347077ad6bff30de82e04942f0022ed564784561e28
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59da6e8c312726303a9e9aacc93af8461
SHA1c98ba183a52fe0400eb01dec65be3c701b6d7dab
SHA2566cfc34b10def069c94e9ff43b6295369bed6b4d57ba9452c280b26258d01be5d
SHA51248e30cdd5ebd633869aa19af198499afdeb3e9c1ad3ac015875286a08a2c3ac9c5edcc993947b0f24932da70c459ab7e5553592e8e907669f7d90956d58f57b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50f280a6afb5cee66529947c940269fa4
SHA1beb378d36492b385af18a3d684f4fabbc3bc1cbb
SHA256726091f22c65f5e3ac148c2b7e2d95a87a829fffaddad94e181e8be648380b39
SHA5122f6ae122c8da938e9af54d270e3ddc6d00c56f72a3626a37f8f8ead596bb4e52d0f48be4983d0de1337f9ce9b93e03d1a1ccfb30d40e9da4c52623f1d803e032
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD506e3adccef446c4e7f65b87acff691de
SHA1b6c4a8759decaf57b3d0d0b9d46aa7e2c794fe5f
SHA2565ae7820826fd6cdfca243b383c16d8997f6b909554b5331c784b9bb7b6effbf2
SHA5124ecb24ef31bd75ea5a22920bc1e0c255b2d0b099d6cfae6bb5cd9db9d0a754930f15bddd485124d8b078e89a0c13a3aec3d60161b946d99b1d23815598d9a597
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58704a671d12b3a1cc2d8ec37117b7e16
SHA13da5997a80382fd0a064771828abfcc917862e1f
SHA25612efcaebe26b73ee15ba4dae7b3f6936ec51d65525fa64156831a19c4d406390
SHA51275d9c3e292bbf77149d316604dca190f09a620a75e18e4914f291cedc7a7f68bf5d2b37080fbdfdbd249b394ec3f8096d9c51547636080421a50f28b799e8936
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD592afe3937d09c129c13ae07e846bb3ff
SHA129e8e9896edb439ec11ab50c65532d51cca90990
SHA256f3f7d91b19febfab6eaa0a2cf3bb9a37c5eabee622561330f535e32072e76fd9
SHA512e82edf8222867f359f67ecbb90259ed384cc4bfee6bc7671a5ef64c65c053e80102a66383371acb26f991dd7b0963b340e028746aa77ee97e7c62b44db0f4a6e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5788b05e2cd9238a603191e67d0891014
SHA16e6351ea44896e639a578d6df66e9e55078facbf
SHA2561e6ae37827a838d621aceaa3d965faafb9dd7105d1d8381d05938e180b8eb6b6
SHA51234dc152a7b401f4345cb35ee967a59f77db2c6947fac35266a3bc3ca66f02dc0a84afd7df4fe171f6327a72ae6a2bdb7dec9bbf207e07e723c3bad80b8ed3032
-
Filesize
985B
MD542a566683a85bd6d9d74bdc4dfc68fe5
SHA145e6b1dc033f7b49070163d60888daa1e83acec6
SHA2564b917db626925198d1b1fc58987c0e557d569e49c106ddbddf6fe493da5e92c1
SHA5124d2b2a74a6ca29cc9e448c6a32e47d91625d7ed7ee335798c0aa7bb2f54fc04c2a57236f02f1f5dcf41be72386c467d85b664c5bfcd8c8bccce4bbdafafd1e00
-
Filesize
985B
MD56e7bc809b4678e45443184926a149c96
SHA1707add877c8b45796dcb73e9abd6a1a382c4cfa2
SHA2568a2833c9772d78f72acb15867da7071bd64ba0baeb909407cbd43a08011443d0
SHA51263dd8710c783aab4a6b280dfc71caba14cd7f8910d6019974bdab753390636416470e35a880bb966badcd4663e58e2ca8456984d08bd341a95c9b70ea2972bb0
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
228B
MD59aa183952d849de1915b5d9fdd6a024b
SHA174fab40dabf48417858d9ce1091c11055a8104b8
SHA2562a6c778d8570793d2eaad9db31f487311201ae475e63db263c2c8644d24d89b5
SHA512850768894f2a2d35162ed720f72f90fbd46840e659747784c3bcf7b354df211982ee49b945d13600d4b54340fc71bfbf442c48283a44c31b72ca88afadb3103b
-
Filesize
228B
MD553d36533dc33b5398be5a409d9401148
SHA1ba07bedf64e38bb5e24decaf8f09a59c7387a7c6
SHA256b8657258ded37b1457624ccd387e8517e810d473cdcaf66b876da90bec386c6d
SHA5126aab04978d448f4ab3b6f96d9b8607dbf4bba40fb4990a10ae1817b90f5c4d0aea6799fbba30653aebbdebe7f37890c4d4fa22fbb2b1bba6b50bb984fe73ab15
-
Filesize
228B
MD518613e41292e81e575154a18ce4e9310
SHA1a99844fc1b82afbae02d21097510922063994710
SHA2561343b602d53bb510e2cda516225edf29a378d7df2e90e92e899274427099ee39
SHA5125c99887912747acc150682a0eae409378567f58bfe0ba371a27dbc8f906e06497e084558be24b996d4fc0d3003b6b8798e50612cf46b6d19596694048e0a5036
-
Filesize
228B
MD502fbe9228237164e4e0b94abd2ec81d7
SHA1b1fffd542e595f40468db9e2d24536db3fe4ab0e
SHA256b7c5ee9b4506bed8936ec903571b4832e75513f614a4182daf7be6e0506dfe23
SHA5129359c8d0eb0a72b22470ee50ff487a34514e13d9da6158d790a09c923cba4f1f5734edb1d4f32c11d2b64d3ce581811d87d9fec63a10e60155c5c9a8650f1bca
-
Filesize
228B
MD51ce821bc67518c418b02915b87703284
SHA1033eb89b503dd515be89967d90cc7d355e071c65
SHA256b10c998a1b97d0b6931297c2784c4e8b28ba59de3ac503551b58a32c5139f65d
SHA5120da7aec27103b24888a57f1715a28369fc7c15a1f434e0e5a3cd522425865db19dd7a449e887424c2436a5956ae726978a18dd5b478f78407f387e3ba90e300d
-
Filesize
638B
MD55b4306e9578c360530ce736fa53fc33f
SHA1b373f0614a0e9fdde1dedb57d713db237f655c0a
SHA25698605a1aae1389c836bb40b8c866fdeb9a658a3a741f069917914a0f86f7d848
SHA512d5bb2ce930454097554ee50f1cd5cf20983c5b8632a0cb644b1fd42da49f7d53cca898454056b180d3a7809f109b385c6c72af8edd091cf14ce1a69e14dc5fc2
-
Filesize
638B
MD5a795bff79005ddd32708ea5eba1689ca
SHA1de4e8eeee436af20bf7fcaa557d3b3f60a7fff6c
SHA256a64d282cf8506f9de01a90bb5373b8f73be8ba62c8fef59817909ecac10209a3
SHA512323286f648bb906b09cae2aff2c286ad32e173adb6e0d439a68fedcd907a557bb9548ea60294d4790d28c56128771ab702bc04ed9c820c7c91c9e5cb4576bee2
-
Filesize
27KB
MD51b0d96ede4e93b019752a3c30cc4f160
SHA1a99e5e33a8f05f54919508bdaaed4e46a53b4119
SHA256c1fc67a50380935826e0d9ff56ca1a58006a78315d55b6dc3940a32efda13db7
SHA5120ee8caf486199e336395d1dcafbce7333b0d8065b491d326c9b042c3a4adff5426fe402209c07a3f233ebd5e9be2183addc32f20d31effc0fd3e95b07ce26707
-
Filesize
810B
MD50e27f11496a4c4cd1091917f37f66242
SHA1196362a2a3c6c3016bfa4c7b66de964028fd2862
SHA2563c3c9b70ebefbc929489f8473500e66c6b743c6345917110fa468ffe233131b3
SHA51245948a009a2a228bc0375b327743917e42b3c7cdd4af5d06195d27523f6f7fd9009b999a70108f458021da645bb6b7a798045aa2ef8b3ed018baa548b691fbfc
-
Filesize
69KB
MD531c3e93fa6f7b66f483be4c930f0896f
SHA1433c6befe2f06125faaf324df9850df7505705c6
SHA2563b504edb50f7b287cad5136640f2641b3d37b49d3fe50a06b487a581229df10e
SHA512591d90935bdfe536f6f8d9bc7cad9ab28a626149b1e30ac2d46674e82467b1088efe6eb336c3507ecc720d1ec5339fb0f516b76d29cd5cd0f49c983ea97a2cef
-
Filesize
33KB
MD511872e1dff124cf3bc7e46daecff6207
SHA188f1e542852d502730cdc04e951f4a04e43d75cf
SHA2568ec9c75468e03dc8e040891a70fad16e5468990be7cc6db57939abbea8976004
SHA512d8d27bfa689e629f57bd2e807dd348f93d75e8dc22dbb258a0962dab06ae69afbdc39abf487df8b9092c6919dc8fd6a171a9ea71cdc41517240f01e41c3ee552
-
Filesize
41KB
MD5787583185741890bf3e44aa94b3a4950
SHA1c5474ee1378096e6a616efe06476df6eeed574b1
SHA256411c2b32533e711150d06e09be0e195401a9ff657fd3c2ec8fc5caaf5bd3e145
SHA512536d4969e06e09d6d42dc1abd6d6ecce6207eabecf57e8ae58f2d2162c784baee82d4747092a0884a2e2a1346b85139ffdd7893392353dce3f596d0ea1db3429
-
Filesize
13KB
MD5aeca4815fae535475d2e7ee0722dff45
SHA169020885d28af9acc6a6e19b214765d4e70ce2eb
SHA256d3d9282ed24d0e34bebffa3186a859d0d1252e60befebcf0ba6c4590eb4f2034
SHA512f9e2e4b5e70fb368f002549115121b86efe04eb2f9c9fa8d9e7a11b8e1d1e53a35ddf863784dd5446b9e812bc242f958e0e8dab4c80b17fdc63dcd748c453555
-
Filesize
985B
MD5160eb1d2c4c5e90aeb98e0803b07d72c
SHA18a8fedd7510ca354bd86a4318b436bdfd344c64e
SHA256fd0ace31493f0e5106100e8ae3a3723603323e5f6f9e6a034988485dab9da442
SHA51254e2d9f5f7d2815a6a05afb0f0001d78141127af83bba29e9d5242b16c125997bbd73e4c28111d198a81e15ea6a81c0d2221cb34e8466fa1cc075a18b67ae55e
-
Filesize
985B
MD52ecc4de25f8a0ee21e442d6c5d48b4d3
SHA1880228b3a195f75c5ad731e05d79ea818df7a6f4
SHA256e79a93fc75238d1a64332b02af6816cd30f0d2ae1d8359470a7352b085a7e0fa
SHA512d895be26e9ac8f96e084ba661f1cc6fc4ea1293277f2e869a30ad35f4a79b07b3defab8c40603609646269310d136bd8eba72520fac0f04a01d658a781d9441b
-
Filesize
985B
MD5c7e3458856f5f32c60748c9602160683
SHA14300121e3438044e118c1bfa18ef8d816c144d2c
SHA2568417d51a47ec47f7e6d1f6c745fe74cd27f4c09f45c916f9f850900a942b6c11
SHA512ca96938eb25a0df5ea85371ffe4f6eec5387230692c3b2ca4860b4c83f0c9d6a9258131e3ad69e413c94aef3526001762d7865da04d226217e8fbadcc6d0481e
-
Filesize
985B
MD5afec6fbf1a2f21bd6e273ee7498046eb
SHA176133e068cbcbad518095d2efcb731830dcfff03
SHA25682b22918b24d029190248963e41a745b1edfaecb74d2605e11708c00deea0ec1
SHA512c88eb0c4f55df01cd057fb9e9b58c622c4a6c200ee371de85093383434959ce7960ae161dbee4d9d064f6b227a3b2aefe536388459afbbfcf9676e942887e13b
-
Filesize
985B
MD5c73398da73d2ea367f279faf827b6383
SHA111febe3635499d446ff8e95179d6ce737eab214f
SHA256e9194ba14cc6b212419122ae375b481487bbaf17b4644f70e96cec206afc466c
SHA512c53c92c82d15dd66e118a3ed68711aee153f47e0eea7345791e9e89adcb08979a74023bd8c1c5a9a058fcbb1eee464185d7ab6aeead79ccb3d82adf03112eaa0
-
Filesize
985B
MD583fc644c37c2d0d5345897245f5d1f03
SHA19b5ddc3f95baba7d83e6dc73c8b1a063ab764015
SHA256e8afb919e49388ac1352390f78e66b6d76469c1eb4b5dc6cf3a075883051c296
SHA5123729e1092209a0fe158a5c8f518c304d9b76abf9299f7245303670e307f79e37a7ed6c4dbf9a6a4f97527f479b265107678489b11523c85e61fd152aba0d0097
-
Filesize
985B
MD5c963372eb0a4f485918211535d0b6fef
SHA1033eb24af0e4908b03f389f6740c318f4a974e04
SHA2567ec157dbe356df8a2b09b7e934491ec3ac9ca9f258597bc626dd8ab1a3027e91
SHA512e6ff51dafd9b05d6d89b4bf1fc724ce193e3ef9e55fa2c43a53f2dc886345d1b0294707ab21d0810b98b016aa0c66e62dfdc5eb4f16fc01fbc8d600ab44b800e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\base[1].js
Filesize2.4MB
MD5ed2c629dc5e405799ef93b97876abc45
SHA10a2588c1368fe48fb433cad8acc58b1214a77495
SHA2561a552e8ddfd36edc537188b01daf4f0388bb040af577451a8d0f3fe11d538e47
SHA512990b7bb30ce84a94f364e4eaf4bded1ce041ceb3906bc253856dfa2b585e40a92e3fd658d87588b63afe35abf0111fbb616d02f28b2002ddd80e8e0e4c64b795
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\www-embed-player[1].js
Filesize319KB
MD5aafc3991a4c65c32f11e3e55af0c0acb
SHA1c77a8d5a8933d5f4189581f6b9671ff6ec91a2b4
SHA256cf3a4809b702abf801ac1d61beea76a0307884338c26c1f970e3cb6bfc0870c6
SHA512c81b05da256b4ee16d58c6a19100200d0fdc908d05d62536d1229d7f2c639faa0afa922d034f5e12ce9164160b0358df60278b937233681602cd48cda6aaf7d6
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8SD872Q\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8SD872Q\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\embed[2].js
Filesize61KB
MD5a10bbcb280cd85678f7fa91f5987a1b4
SHA1d03518f518678e57318f383add3c26eb4c891d96
SHA256dcd6057e903309b4cd9d73dbeb9ebb179dd625facd8d04c5578bec9e44f54e0e
SHA5126ea2764ec8b7b63c48890f15de50c936406a60bd4805abe6a90e4522eaa4aa88f3543c9f2aea7472d80608ddaf4e1444e37618533982bfaf5d168b3ea8fbaac5
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a