Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 13:10
Static task
static1
Behavioral task
behavioral1
Sample
419c8d747f0f2ccd379f715fc3b82515_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
419c8d747f0f2ccd379f715fc3b82515_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
419c8d747f0f2ccd379f715fc3b82515_JaffaCakes118.html
-
Size
175KB
-
MD5
419c8d747f0f2ccd379f715fc3b82515
-
SHA1
29c7d820ed2b610fb495b7851ffc3fad0b3a9e62
-
SHA256
cdacb6c4e0e6b2c07f6b82a986e6f687d28a6226129829540b8ed130959b23d7
-
SHA512
9d6e911810232d36a05139fe0a6d3c0e02fe498c5bc7bf6d8163faca57b845978cf226df5d1effb9bd47df76eea6ac1ed689808caceb3bf11866fc6a32df6298
-
SSDEEP
1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3sGNkFYYfBCJisE+aeTH+WK/Lf1/hmnVSV:SOoT3s/F9BCJiim
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10050" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17827" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "17827" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "17709" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8804" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "27020" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10083" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9720" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8804" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10165" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17945" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10375" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9720" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10171" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9802" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8804" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18037" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e000000000200000000001066000000010000200000007fbdad6aa4797d131bf8d4426d800e09796cfa33e52763cefa35399f9b88254e000000000e80000000020000200000007b134114fafcaaafe75d83ad564cd58c623a6a2caeabc8510c3d0728f682374e20000000bbd0b05259b4d3479205d9e74ed9c3589b0796065844fe191ed40172d14165d540000000553b6ca44723ffd395256c24fd313da60aeaa42ab05d109f5ea30b1f3e84b860f5c8ab6fa4a4170f40b0c11599832eb4e46d763379dcc285a377968d87c6e939 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17709" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18707" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18707" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421854100" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10171" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10050" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18037" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10375" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9808" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "27020" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "17827" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9808" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2180 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2180 iexplore.exe 2180 iexplore.exe 3068 IEXPLORE.EXE 3068 IEXPLORE.EXE 3068 IEXPLORE.EXE 3068 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2180 wrote to memory of 3068 2180 iexplore.exe 28 PID 2180 wrote to memory of 3068 2180 iexplore.exe 28 PID 2180 wrote to memory of 3068 2180 iexplore.exe 28 PID 2180 wrote to memory of 3068 2180 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\419c8d747f0f2ccd379f715fc3b82515_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2180 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3068
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505a12629f3de786b7972991f93d43884
SHA18922f4ff79c2bb9249d2849a8adc03a3f90a78f4
SHA2567af4736935a48da24a34b906a62bdb17908c3bd6bf4a18f6634cf34edffddce3
SHA5121a79ada75d083e19929c8ed4cc29a1247ca3635983b901853f482ed565fb4a3f7d9455222ef6d96fd7f43b2b582b0a3dfb6a6f9bf04fc9de60d71c566b0c196e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ac0089f4c814a8f7297d4ccaf5fb336b
SHA1fd9cfe8e8e4ca13a76ead1b2e2a955b8e0b34719
SHA25659c17bbdc2931b2d079e2923f603c0d1e3387794e9536bc330ae0b7c470babc8
SHA512f7c42f29bc8b5d633a2b499b76cd96af8ec6c7936a891e92de8d25e32c061b3a76b9610144395b82ac67f238ef356d19f7874c766b7a6d04f792a388e9065dd6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4e4ec73a2ab295d69ba0dd58e1a7c4e
SHA1073242829461058ea48eb49b7b0c0e7450ddc906
SHA2566a3810f7ba6ed2d3d028acb8a15aef6ee2973c8d076fbee558d216a2e0884564
SHA512a000e010271c0fe5cd3260af3b38339626d8807349d1e9eadab95e944592b8f39bfb6d76e193a52071970bcd716a283d8b7aaf6ba8176fd4f3445fb24f5dde51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5572cd8b0f751efa554bc5fe16b2e16f4
SHA17bca0db99a18606bc505d052d7e6515e47480173
SHA256370f0f5e165a9c32a11cabbd45747a534a1470844ce5c77d9bc46080d948334e
SHA512bebe375239e7f252d47fb4098c29675ab0d644d50d4301fecb6a5885f87157c997f0142f93cf960ae09ec3b456635b130cccc4956563cd38061f035e0570eca0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e44071eb15c808d3cc95d141645c8d5c
SHA17706c50417b5695f8c3831b7c0544f49757c707c
SHA256297a23cc2278c4493d512f7210333e728f7072d026a059a1f99a47f36a112680
SHA512b70348cbb666d93cc6dc02a534e31f78717b91b047a9e0e33399dbd23209b14271816b58eb99a3e9e997ca205e9c300dd467618f82823a3cd75bfe54849c0caa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c8816023ec1cca51c905dc1963c847d7
SHA1f757d7e590e12f9bdc0215def1b1c432f82b1f50
SHA2561f588170b5782c5f863ed6e181f7b3af9f28fb53ae4e740e9633a3aba440a04b
SHA5126fc19430aa5c424ee7c8f986f66593fcdcf81632afee7b1e525c0d0601ef298dbd0154b2b5be7461aff84dbce88555acf3f013c315fb832ffed99e4d44f700f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fdc6d34d05eefd0e569ef8b225aaf781
SHA12c5bdf0b6f4144a87882199af771a9ce6eccb9b8
SHA256567efcd5991ef8887232822eceb519baf9e2fafa71ee644678b8064ef9599903
SHA5124ab49ec57fdbf8794acc873396805d254ed0fb4f58146b796e0a03d45101d9dad6430864810387c0f8974a97513ed7534faca6985e547e1bd5e70fa960957f80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e5877f4e82e0bfd50cf3efb6e9189dd8
SHA182e596b31835bbc00565a7f23d902ca5ba7e7d23
SHA256c641948718a5f65df99a3520a25b2cdd11eae489307ac199138668db263ba606
SHA51234d487858f85c367730e2ed0945a46cd01a081c1db6e88ea7394ea27469103fbc20d58d1cdeabb8646255f932277bf79906be249bd874211696da18c5e2dece3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549354a8895e822c18da82fbc1ea70de7
SHA108faf9fc0d5440e83e2006d06c7210f0a452a033
SHA256ae0b00adbe9b6f438bc346da52d9f4e4f8959e8a8f0acbeecac0bff9603d1ee6
SHA5128db13d50030837d153a8982214d69a702176dec8e1839b7f9d797d33580789db829d658381cb49cd4498b41318488fb4038b22034fc0c137e7679bcd21687ae2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ca7e1e9f3b4400595f5b23b12690f08c
SHA1783ef547bae56881536f1ad87d501b19857aba11
SHA2568d00b9e6bfab5ff8e3c3f0ebd37f35c248c68fc7f968c05b9a8d5e5d9e422c98
SHA5123eab02487539601dfe4b4c5496bbd304d947870d53b3a57de78d12a1bb4b6adefc45ac627d2bc12be224a738a3cb59456bcdadbf476dad0f19fc0c1161f06924
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50e42356183bba0f5825dc7201942c710
SHA1b77bb5c3a97d67fb6c7c84d8fade658e4db7c487
SHA25629c5a4761e87c3b75fe3e31410ee8807fb9ae9dfba4bc0f479879f481a66f362
SHA512f634386067fb89bb9fbe9900339ecd094ad804126748ee65d951cb981814408dc60661b2112ec37571e409e7179198c542215e2d742b483d09ccce01a9fe6e49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5126d0a798df8f9fa67c6cad94170bb0a
SHA19d08c6ccf110e48ba96896f896391ba5a293ab11
SHA256aa6872d4949914af7557b269df471daa17118374f9bff43e1683a5d479c4729a
SHA5122623f2447c05c553e6d2d72e5e775d797f5789e3ff10535c089e257029a57555f09851fa845123b65ca08604b03fb2b68b741ea240f5d01e737d4a9e62fdb11b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e9aa123d409c062d656f3d492ff647fc
SHA19484ec53f4cd7c30ba83be41300d5fa6a12d170f
SHA2561375944bb841b8d41f448fe8e8d957143c92d394dc236cb818704db837b57dbd
SHA5124afb5bacbbf8aa263f0aec2e0ac54068fdb5ac21a8ed2822c4173eb2cdc22022e80dd6bbac20ddcff5bb772b9fbb3ced28b7522dd6bdd06e940c1027262d11bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540472ba62bc69a9211de0c54fe58bbad
SHA115a391cd79500529995ec0328f2fecc4b9c7c06e
SHA2565b16f64f58e9aeca9f1651a3951813492af2ccc49e42e2447c940827bf50ca2e
SHA5122c07f9a102e514e2a195ce92fba21b6dd6cd225c867bd4d77309b810370addc51d80427f1be93b9303e5b00fbd43ad2ef108654e154ea96365543ae648ed6451
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4c105fe87fae14b9190b2420f46c07f
SHA117848ec65db47a2613d1381eadc40d6382a2367c
SHA256a35f34c786d87a874e96454a010e6ff67929c29577ee35995b6fb3062e2987e1
SHA5127afd1d5a4e5885bc65f2029eaa2e5d6f326388a807750fbba50f25379080115ac72957bc24b997e425b5cd9570352aa5d86b7423256cc6a2b013ac7713f73321
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54844e854b3500cfa0c33c177ff53a14c
SHA1b3bbd76b309b27b9669c74064b61eaa2436ae622
SHA256c6044ecc4328ef8697141b4e185230b36b20bfa55e7ca93402fc4c5001f7bc68
SHA512a50b9e7fede528be3e751507e7426a1559d60234957c7274902290d58e12e84fd856a4667055cc30cbfd0620fb0708ecdeeeffecb8c813ddc84985c03e5b3de2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57bd0bd11c1fa18affc11822822cf0596
SHA15310c523e269fe44b9071e399bd96ba76db5f0fe
SHA256597887da6ba4c8b4b5854da7dceb9f61a4624fa5374e0f165614d26fd724e700
SHA512899eb5acc1b576a4ddf5f9f0e60ac59deab339a67942f3c6dba2ebac3412e9186e249a58e1b50c2869cf4d2f19a563bd67fe3901dae1bd7e9f4d693f141c54b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5818a2ee92cb1744f94f856f93f1d46bd
SHA1381c4c7784e5d1b28d48286f4c4cdbee2e843f3f
SHA2562dd9cf807fe00a9faf0634221e9effc2fcf52000126831b388ee08cb8ccf92f7
SHA51273758d0031457d7bb5f5d2cbe5992f9be59728ae392d00e71b28779d521d7b7b8aa8202d232f67aca5406f33ce8fe274a813bef6b995c15656f7fd5dc6c30d66
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53fd4779a6ae3047a68ed99f01d60daf3
SHA1bbe74577baa0712e2fc95242f713f33c61717edb
SHA2568febef391add40c32afddd8f655c888242f790a6ed9c1659dd354fc5b09fb407
SHA512fad5323a3db26260700c981176e32267431f636b10186aaacabecb1aa21761b871706cf4efc7d7e8a5f4590dab2319241174ce0bcace6a5bed63658e50ee356a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bae51603f7dec3f2f350860578586b34
SHA190970a0dd7343303bd9d979d26ed1015cf0e8425
SHA256d3df78f76a42a984899ef4315ba0be51b8353f94af883aa9fd1f309fe7fcefcf
SHA512ae521a61df5f335f6562e2184d07f9cf1215a40cf473c15384ff84d93863a0cb832dd471ed7d80d1cbd2fd9123b0c0cd1dd4a8e14a3f9f6418c8e172c1c8863c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD509cf1a2ecf84a0954216dd3c682b30b8
SHA1184715651554af5971208dacb4d1d6b1e5de9f45
SHA256862e88b4fa664205d9f41f94b207f5bc401118165dcb3c4491e6d9ec08d139f4
SHA512efddba6b7b621025b6b557a4c15d631861c157478e0650099fe9530a77a98097d1db0655f245f74b4e89f813225f4b737d06cd811749214d06193e44e3d92219
-
Filesize
990B
MD5e2dd068ea33abef33349c2b311de1d61
SHA1f128bd9dbe31ae90206631860efab6a6f03d8992
SHA256d32ffd0de220dca4831d78796ca3cabcc86eda830a62887ae6459325a612991c
SHA512b60cec3208deb5da38cbe1f9dd77132a170bc0b1827291cafadc91ea18a2f62055e6dbea257d7ee12151cdc703b96836680bd35d9c86cea67a12cfac792b0299
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
990B
MD5f99693f2313b79b5168c207cb7eea000
SHA1be55dc0b2e303d523c10254eeacbf4c105833ac1
SHA2569ce2d73ac81ddd85919e62ffbb9c775be0fa05bea23c8df33491fe69be7ada0f
SHA512771a89d1e90cd3d7075132a820d3ecbb2056f5ac34f87892a9b8128ff6714031520c02f7404a13bc267d11cb16fb420209415e45aee93347b498a2a15b5ec93d
-
Filesize
13KB
MD51185bcc12d4bf08cdb306c8d21927f28
SHA1107d85d7b79e65cfc9521fafbcbd78789fa87890
SHA256c83cc05b2b7676aa6498d8e17e83fd5af2071e23d2d5bc7f1c23f470184a6cfa
SHA51225fd211e82e7ff212a857ed11d6a0c898705d14e6102e8dbf5b315577db8657539eaa45af52668e726c6dbf383ca6e7c1bd174121c760d68eed5f5f0f023d4be
-
Filesize
990B
MD57901159b16b557cba0c5119ec4f46ff6
SHA19f6d5ea69a70ff36094b647efb0acdca1fb12c8c
SHA256dc6ab1c9659a9bc4a882fdffd049af57450fc131565972ac244bbe56543e64bc
SHA512c0cccd4a925f79d7f1b1d895ef7d590468a9a76fc4062fa3ef3404cbf6ec8e6e89cb183e72a578cd47843c73a45b1b7a869666c8b4d48b36d91397f641b2588d
-
Filesize
814B
MD53a288e19d853c18dc95505dfa4e939f4
SHA1f6102d21f43cf3638a15613f25b5a3bbb69585c6
SHA25649c98e82411a56e94fa4c2b410051ef43496d2c109c61b80041b659fb9b868f0
SHA512be8d69d65ef0999c3dbb3719f090b2f488361b0a1c271c5b48cc60b3da40c8e66ec5bbbcf0b4d5036963d56aeca3a78f868e94ecf0d406a88c9a6fd94f922284
-
Filesize
990B
MD57bb9b752b84c24d0def6ae9be6efc1de
SHA1c8f011399064e9750986d596af2b2d524411f4fc
SHA256e1745dd2752a6d1c47d20fa46035e3ea80d8ce177942d0ffce7d1af393b04e41
SHA5128c01414b7716f5d5610b7ff9831a7aab32e46ecb27347e7fc5b53069b814eb424c9c20e3b305d4b64dd049db2b881357c15c57b22a4f38adc4618f4467355e0b
-
Filesize
990B
MD502a0451344f9282bc86a71cd658ef3e6
SHA1f001d1640aa77ea44d27b0e469dc4c835da49545
SHA25627a2f2f97b912a1c5b53f5c0b435cfc3cff64d32cbe08da07367deaec98b7fa3
SHA512296d56c6b03aae07d0039e8784c6a90cbd9eed970c0464735736b5fbe2ff37a2e07f51a3aeba24eff446bb41c0d0847ccd92879ce6ea1e3a9fd976c87cfff3a9
-
Filesize
990B
MD53edbf2475c135fa002edec25c3a42005
SHA1fed2f794cabed35c02b92a2d9b8ffab1ab8518d8
SHA2562d64a1fb940114a1f13a5caad5c4c64654408613d93a68a8be4600e12e5aed24
SHA51238e401995ba3e00d90bd72db94e0473c9516d780d3d6237e8466feedced824af15a4fd30c91cf06048086da2c56061cbc6c9ea200d870c287fc4247e564c11d5
-
Filesize
990B
MD52803cb8b0105ccbc6abe89d380b0223f
SHA11491e4337501933e29291c44c95c197bba2b78d4
SHA2560c512ec71060fb27a19d5069e1809599006f22e6bc0e07dfef27e6385b0dd8f6
SHA512dee8f3b2c76475f654f5b229cd33c4dd4da928335ff1dee0edf9baa1b0be30dc1e9389586bdb68e5f2f39696e6b772f657e798ee4981cced1ff9ef07f0d918a7
-
Filesize
990B
MD5b0dfa8aaef9fab7771cf1ca9787f9707
SHA11e66478862d893dcdccd8b30033b8882f4aedaf0
SHA2562fc303238af5f0b3f740180ba35b789af469d4d470e1482ac3a94cf1a8254e83
SHA512c6b65cd58715d184526dcee96d980ff687b26f7e82f9e3099fc46269cca523763e03d0487e178004149b14d4fc5e1ab50db9988331cf5a52b5d0555c6fca4776
-
Filesize
990B
MD55b4e231a0a070c27445d3bf63d6f75a6
SHA1a821df5a85c6ae1921bb47c6e9f6aeb78f2d217f
SHA2566e74948aeaa8b2a1dc835fb0f44f20f6d316d3e9bfaf2176348f7e66424edc07
SHA512e2eb152b59a160858d8b3d51e051a4a2d3218475ffb26ccd0a6e1fdd43e9124ab608febee94f30a30047d8edf11cbbe7f249dc7df4278a9d53d750b18899fedd
-
Filesize
228B
MD5dee88ecb937aa97cf69a27793d65531c
SHA127c3dd526259152061869da8e76c298ece8a03ea
SHA25675e572a1d360ee05d3ea0fca6fe61d688287765ca143cb0864c4032f9b3faec4
SHA5127a34dfd45381a4b4c3b4d99062b35e14f63f9a5d67f091a252d1663f667d0aa23a0e3fd02f3d2736f3a92797fb10aaf4bb877c61141fca24ed5611f9fcb7b2a7
-
Filesize
229B
MD5f642d7d6b90e8802db604503c020ed1f
SHA1f10c65c98066b54756d763a56128c09fe2a98108
SHA2567864adfdf298c13376054a33dbbc7a2e62e845e1c497c54d53a5f910441ba35c
SHA51292aa2122f182002416be405c0bb2af81187ee415d54b9a7a0c0e7ce0b3e1295fe4807738db27690f69bdd8353e3aec30e310282a621e19cf800683be65120684
-
Filesize
229B
MD5b4914eb60347e24d2a298f72de22e644
SHA1af608b5a7c568471c5c096da62418964369c8337
SHA2565bb1b6d1339e4c817b1ec7971eef7343d77365fddc0f4d8eff34bfcbbe635301
SHA51248a3ab592d9da7d93a21454d8f20f2fd1671343b404cd6584eb2caaacd0710548f33cfe8d73c9fcbb3a1fd0b4c5936aa6575f9251ece91024cb7152f769ab8f8
-
Filesize
15KB
MD5c7c7a5e7c868ad1d6b0fd36f0f9b1a36
SHA1da043f6d77e35fd0555ddb9898611ca0842bea2b
SHA2567fd2e6392af25f38f5d65327e1f55b6627976897c1145857fd3fa1d1785ba68c
SHA512f57709b37daf75e1dec634454417c1588381e22794559e0deb2e2c0229fcb72dd059fcb0b42535f0763700ac65eb9ed3c90748bb32d97e1088fabf3f22f5f0fe
-
Filesize
15KB
MD53f82c51fcab5779a68e19e52de35b20a
SHA14143e0beecd2b1b4ec45d4740b36ed65f8dbe530
SHA2565551647a7451c56c4c60b464f7c527b7b8a058118687aee85a0ef0dae3e5699d
SHA51251b41f8842ae3060ae7bcb9d2429cd02ac45dbb8c4741480c3b07022aa1b37c59573fe396c3c76b55abb65a49c6922c88e0ca046912d1fd7a9b19b716dc8d2fa
-
Filesize
27KB
MD5c1940e517958475edce50c556fdc1ed3
SHA14078aeb93fbe0ed2a2009c01f7da433ed5512273
SHA25670ceb4b3ef22a3a907fda6234e859109b9f6dd16395c94d856e0389709d8bf5e
SHA512e3d8f78a23146c0ddc775c47ae60c269647a8b96b2899223dcf17284635ea6bf9dcdc025ecb3992564a4450be3dc0d4a06e131db27d005507ce8979f2b76c004
-
Filesize
990B
MD5f1c8432447badf7bb8b44e5399e45d17
SHA1b64f2fb5c3068ca3ab0687924abbc07cef3bbd27
SHA25665fcc248106db764e40b1e49b6f786a698a005113bf6e41c8c32412550b90fb9
SHA51265a64c583b8c592f2c6137dc198fee93f3e1392724d3d7c7fff9d7d99bd62ff055ae7cd4d45dc6d43dd8d617c7e69c43d96a56f9a846200e37a3f0cd9dba7eb6
-
Filesize
990B
MD55ee4799af7e0026c5a1ae4018c10ea6a
SHA1587461d180e05d1e47d4c1e1087655c7f324e3c7
SHA256a8f1502a2e2e744f56ad333e798c345f998b8a8e1641a01c0c12574a5dce75df
SHA512e988d3d8dfe67e885fe0783169ff11954669f75fedee878185152499c9516510d72861eeda694a7e572c31f373e7c76b21bf90141914bf89957988a263a3da59
-
Filesize
990B
MD51d382448d344715267a11340c8ed085e
SHA193d333540df9e5344785346a68bd314a2843fbb4
SHA256336884030113532a34a750e672f8a4742aa7285f37911d1f84ac4715b182101c
SHA5120b22b1783bc46028df38e1975d5183dee6a7ae9962f2f7b2409bdef36b5ebdbfa5ed3749a07f2771ef2c29608b35b5cfe7e6790c433e77fa38eaab140a09c970
-
Filesize
990B
MD5713750caaad9e12bf63539a4097cac6b
SHA15c466eff00b0925bf4687733a31a1c96a58a15f3
SHA2568a4fe703f1f0dff09fd6e2f915e0c0929257bab37ab4629ffd1f1d703b70cf18
SHA5126861b62407d81d907d6199d51ee11e4d81dbfab220ca2d8b13d92a46018d27e79df28bd82c40aa3fe85a289b42d02b0d1cfb5305d84d6f9e5c1af1a0157cccf8
-
Filesize
814B
MD578c69f3e2f0abfb16970f329cf1a1cc2
SHA17ae0095f6a40241228ba88e3ab192f72e3f18259
SHA256b0f09b8f76585ecf71a651e73684acd6f48ec5a7a9d29d1147b01ede7ff40b69
SHA512517f6112eecf15bbd9151b06b17a3f02e6bbffcc5dbbe670a7b8b259349f6e7fae277684604366d474ec2f24b447b2603ab76b2527a1a81a2a541f2579e2ec6c
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\--9dH29IQ9CksBulhkJupx8P-yH9Jquge0_97VfE0Pw[1].js
Filesize52KB
MD55ee99861cceae8e6c26ffbb96ad11a6f
SHA158e3ef362205d6cf11e60cf2b031695ad07ffc71
SHA256fbef5d1f6f4843d0a4b01ba586426ea71f0ffb21fd26aba07b4ffded57c4d0fc
SHA512f3c140b611a6d5ee08b910257f85814db868804334810e7d93844417694a3fdda4e6a4e9dab083ab254bcb824c186b50499885168c96ae087e62bcc60dd85ac8
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\base[1].js
Filesize2.4MB
MD5b99841d18f59252aba4cf98215d490c1
SHA1a2a78a76547eaf63a8a86759f413201786a5b475
SHA25609b01eee472df855b65072b788ff808cb2010728e73c9233d48824829b2d972e
SHA5123ede68aa1153ce444a792b1cabd6ad54d70d2c0e0e5ad41fa338dc6672a1673af89c6dc9474b2a65f4071ccda711430d33d073aad9e794377629fa02c393bcf0
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\embed[1].js
Filesize62KB
MD5a467acbdbc3d3663d75855d00ca33683
SHA157b377fe7ed9a9d0c98bfbe4f25b4ea9cb970e6f
SHA256c99d99cd03bdc2874fe6dfb4bb226ea7301f25152739dabf37cca8c1166eadd2
SHA512058ab3f7c4d4af43c9d1332ec9036aefe64b172513ac82fd66414ed5cdc0fb4ab0987f6bd3a87ac8724cbafc1cc27a595efb616fcf0b66364c1a3e5a95f539d2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\www-embed-player[1].js
Filesize319KB
MD54b7d49ebb5f0c8734271880385969939
SHA137fd08176d209ddc3f21583a3aa57b1cd0b83bdd
SHA256d7553575b975ac3a659f8573f23bad5f7ceff73544d22b3505e1d03b3ffbabe8
SHA512dce0b99dbf0ef910b0ecce8896d43ab1fc9c348a4307c5b3705741ac3abe69bed71a01a16993b0d1cec785266578cf9bbf7319d8212f5fed3db80efdd833095b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ADCJI8Z\www-player[1].css
Filesize367KB
MD569c6c2a25cfac2a8ab7182b8a91325da
SHA176d6c2b5a85fd1cedf7ab5022084cc982ef6f11c
SHA256e4ea3085c10ebdcee3f4b16dd370f467847e40aba7fcae77d60eed0024155864
SHA512b96edfe3029c7fe69d7cc2520c07a5f229b0915aa286ad5d263f13e80c67fcb8a72220c6b9b1cb9b7a885fd8512ad8a5a3a08cf54a5956a1b4debec02c8374c3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\remote[1].js
Filesize117KB
MD556b2c1e6a0b3a4ec2b548c12950e473b
SHA16af67d1fd5abbd89d3f43fe5d986cfc2e07dd537
SHA25603a83a5a4b509550a4a5cb59e0d45371b03828d1ba6304f74eee00cfa9abe54e
SHA51205c1260b3dc65853ca681a4f2e7c61d532d3a3d13e4aebbe8adb5bff95e190730a61d901708b1c556901fba8b930b06632e50c80bc6995bf79c23baf1782f13e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a