Analysis
-
max time kernel
128s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 02:59
Static task
static1
Behavioral task
behavioral1
Sample
4444814bca9bee31b55052c10df41b06_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4444814bca9bee31b55052c10df41b06_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
4444814bca9bee31b55052c10df41b06_JaffaCakes118.html
-
Size
175KB
-
MD5
4444814bca9bee31b55052c10df41b06
-
SHA1
1ebe3e3d25c22252a82275eed7aa74666e3864a2
-
SHA256
9f488cb1404aa84b3410fb9860e132e68219bf8933cd6492eb971be0d7a6d958
-
SHA512
002461b6d89d73c6df506203b31e5c4d23915b14b3c11a663676631df3716bc2f2839bd0cf67178cbdb3b46c3699e30b2b05b13aa38e0c1b532756caef5aeaa7
-
SSDEEP
1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS39GNkFJYfBCJiZZ+aeTH+WK/Lf1/hpnVSV:S9CT39/FsBCJiwB
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8922" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6742" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "16552" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9132" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "14290" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8928" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6660" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8922" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "16762" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "14411" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "16670" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6748" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "16762" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8928" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14411" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "16552" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9132" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000009ab7a878814a27e05d34f29312d7ca1fb2b2ac8c5c9ee172d106febabffd554e000000000e8000000002000020000000ed3bc0ac94544ecb303860781ffb17b3e21c3f08627f7cb40de114608c1d8d4e2000000061b53407e8c725823689bea5de419e014bf98f3ede22ec77385902393b0f32c94000000001e23c27296aa588a88399ac9fab72f381367ed557331e8ca1233de35d175ae53017b31c6c33fbbf7418101c9c8873aef23e6ab4d96b0a2b5e98da4cd1299a70 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "16558" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70d56c0b74a6da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "16552" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "14405" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6742" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "16670" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6660" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10419" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "200" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 352 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 352 iexplore.exe 352 iexplore.exe 2056 IEXPLORE.EXE 2056 IEXPLORE.EXE 2056 IEXPLORE.EXE 2056 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 352 wrote to memory of 2056 352 iexplore.exe 28 PID 352 wrote to memory of 2056 352 iexplore.exe 28 PID 352 wrote to memory of 2056 352 iexplore.exe 28 PID 352 wrote to memory of 2056 352 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4444814bca9bee31b55052c10df41b06_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:352 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:352 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2056
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5ab6340d49922b0cfdf38cc9be9b76abe
SHA1ba346cee49b481d01e417a2a37d1a55acae7abc2
SHA256fc1bed7a71804a78adab77c7c8e258ff2625e336c45a868f7ed50fedf7c3f98d
SHA512d0cdc9e746da964926f040423149a00ea50a48f8ae4b8eb4e1879b25d042fe662cd5e557fcc54f822d5dee6cee7a4490bd39172b0ccb2b8b20e18c8810289be9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53b2d9e6762f9fb6b1986d7112b463ccf
SHA1fdaaec653a57156c25b486ab7f9fa89cbe1d851f
SHA256b56acfa1601321ad01fdb4f4ab26c4955d209c979d6adc1353ade9d89588eebc
SHA51260493f738e69dfd45a1e394817cad53f8c0964f0a5d3df18cbd38c1695980568552a74b731616481d39d56ff64b08867518ce2c71f1c8a5577713ae249e97d7f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57fd51e0c26bf62c25ef364ee94e32de4
SHA1e57031f43ebcb093ead8d398f7049a3f1d77ad26
SHA256065b4133ae41b129363c7c376501e47c1cdf39964bfaf86b26cfc5d03f7890f8
SHA51288be5b6f7d976ced73f030d9caeea81fc7d0c6a551a0f8d6e7e4931f623a0e0426afb7151ff77d5eee3be801e2c178d7187d73e07c576bf91643560601587546
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52791754e04cccde00fe678855b64190c
SHA14bf2716045f96f70621f9b7383a0eda818d2e7c6
SHA256fc735b325244672b4bbef754bb5c842d1b17fed887d5cc93d9632840c5bd51bc
SHA51258421345ff0637eb23f8420a90ac2e1e49755a0531f216208a5c136dd13ffccf4b9a6deb559a8fd0bf0acd9b0dd826da9bf573f45a31e3b96ff2b5a3f57b8b62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5351c4c0f5dc491609663e6d653ae3bd4
SHA1dbffcd4824d075da11d82c4cf3af4fa108ef21d0
SHA2568776bc9ce3c61c4763eb239112e84a402325d41582d3c021686242c300cc3f0a
SHA512060ddbe4c1309c55a1f8307b2c3442ae073d192da4bf2e8309e86548b505f25802f6b4fe60088bdd32231e1da7a1413ca6e46fb3537651f67ef873f867923a89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5362ba434a127f2c937b8777201ae0051
SHA1b95df792329dcc0d87defeac6477ccfe1435f7cd
SHA25656fcdb51d700965d6e77d84c20ac9419e88077152c4eabb653d30ff4b55a993d
SHA512150ba3d246ad4f3496973fe160801353668d718a94254fbec2d000ff0d82e8b001f7deb3719513e4a5fd4e1dd5343a283fdb70e067d35d5a76dc6fb69f8dbca9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55282cbb084602aafd4169c3b77ed7a8b
SHA10178ccbdd9f06f991043ff5195f639483f057ce3
SHA25603596c980b5b067c8ef1c3376dc92e2f2a97f46f0633236283559149e1067419
SHA512c0d9ab2f747aee33eaec19281f31151ae3abaa2bf553a62218d2a3adb255043b3029ef2edf77324f43326f0b5c5eb8b673f5a3135d73758d3dd295a3803437d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57418e60561bde2b8bd479938fad732f0
SHA1967c720d80d1fe0ac92831b6a8778570542bcca7
SHA256a782e177d0aa783d4e46731486d5965b85b407f98a8a1513505e84bf9ad6b4d1
SHA5122af320484d904b80069237eada88291a2c7a566cc9ddd15a369c70185c792f5a76b9c804635b9d85e4a4ad6aa883f215a49a10b6783babf55851596cc63f1e0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57dcdfee24bc2907838052a1ac4649a57
SHA14610b90d3819d04891a684c6fa67a4648041f852
SHA25624f8651a3a38a263b58ddd9be3eb075a361e06368958bc86510a1b36b9a71045
SHA51290d538dcef0aad50b612cc4c70475cd7a97d4c9cb18fccc2279d76de39655e0614505e8d2abff9ba2a0058dee35e94a9c266b13eb2d9a3f8370b38afffb63ba8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD556e4c299e358d2aeefb2bd46ef1dc1a8
SHA143f1308c2af34abdfc2b62fc18378a2dc02a658c
SHA256bd5c56444be9f9113af6813c5ec78fa49d09bc5a741f39eaec9dbb5b609b6573
SHA512eb90ef089376a948e75faa40771d167e20cdfede858a3abfdb388bc9f14a5bbce4e43972685e9b5c713cd3bbeb501831eaacbefd5666fbc27423ad949f3539b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a837426fe0335bb75a1e6a0a08737322
SHA17bc8f548a71e7f56e3da45b96d124e83f0c7b3f5
SHA256025ed8be65196648ab135600098d531e742a1277e6835c36b76f7b68c6cebfd8
SHA5120eab12b04294b5be96b3f01daddc8e3282ac23a6a0a40eb68e8016763ea1f319ca23af99a4e461efbb6b8fc5ff3eb3381891c2ce6fab4a1d1b1be7a5d0d888a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56b64ee9b10ffeb7d8588aa1c87203737
SHA1f2cc00448d1d72436f8f4539f55cc8addbf33def
SHA2569bdff39902aa3620591396d2fb6def2671a87f94e539eb8d93b2980291eb0a57
SHA5128a19dbb358ffe33fd84b42deabd8116444a87eff5348c7f00822f29c725ce7ba09e81810b712c5e1a0fa9460ffbe3397a7e4a89bbfd42979e5e7c043d559d1a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b67cfe46abc9dc65d3e02cede81ffab
SHA1188ca0e3c059cb270bc524e5961177d65eb77eb5
SHA256dad846ce810a20576ec39214696d0d8baf3771f601286a7215f4fd6610ad31df
SHA5123a3da57257575e49f4b725102a2b72f032ad2f717ad5e71ede264be9dbbeed2e94d51ed948f380931d997ae6b78c8e87fad820d6f6f4f5ad617d9f0371ecee5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b2e5827e3a5ff5fc015d4be9e404ab9d
SHA1fc98f023b09e61db9a08cf1d1c66711726cc92c4
SHA25617506da75264d233dc29288c2f02fa401c9dc2680cfb3484c17aae59abdf1d57
SHA512b9d6cc8977a542a23df41d56b87d1294972364cfbaeee611e4ed42b07591d2f1d69a7d6ba8ea076da2da7c46717ab9621f57e88773b75fa4f10741e1f6f9ca7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f9f445591341983a89d59f169903707
SHA1928b1d9a1951cc5f7385b29356fa8e832b2f562b
SHA256541549809887a53d16e9c20b1cbda8f947af47eeb72aff60b406331362fb3fbe
SHA5128a177e4776e921be54c2e1df9d597cb2fc59e343fd81320fe42912d5dda4202a8821ffba026bf552dc8e1df9f43d5209866f41f2c78a601f73d96646c529d5b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a98dcf68c4bcf8afad4a38731b22356
SHA16fe49bb384399e6f2216a031bb2115805d12c164
SHA256ee9744f1b36a11373d95d66963f5348c4fdff123052611601ac296a6900335f7
SHA51201e7aa00f0ee348e56add06257af7886b0547aeb6e74d289ae6de50d3bb0449d8a9a3cc1baddcd40cd5c3f384376ec6f95651601b71d0979576fbca2b716d47b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5641d7f1e24133a49f9399fe869470a6d
SHA140a6f659228e251866b64f08d97b9dc10b186319
SHA256c4b00c668356b6a0040af8164d2e8e0fe2946980c1281a6e5634d08eaf2935ff
SHA5127b4648527dda52018a9dd39d57688098a5d9c14efff87e4c3bbac8ef3b2fdd194dfee9dc07fb877a0efca49facdbab582ae605a59822ce5ee11202fb9ae75ff9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b994685751df694d4652ec67cb6181c
SHA1dc838e32519960153c9c62ef55ed20279b19e524
SHA25614f0d56bd7558d17c215375b75ebaebb1f6813591b8c47bcc7328715dfa45e29
SHA512521dbd6b6584b697ae7f710191ee73cf83358d811d69069c4f050fe1fec86b88d4c6e6978cf5007c66e75100d38f5cdbb751f9d0fd7ca7d6c324a05862945dc0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52712221c40dd24cfd724bcd91e31960e
SHA13d1b2c5a573f5e68358a9791e59de116a243eea4
SHA256aba7b0ec09a81992cbe01df7ec8d1a749b9c53abd9296757c88b169158fcc53e
SHA5126763d4c6ea5cdb03fa4d6b658a7056c4bacc44d3efeb6d59911db310709db635b8c56e4bf3a65ccf1f6af1599c3f9cd00ea9d5cfd47307c4e0b70bded1c25ee7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59ef557f9b0615fd9a0ac61106406df8e
SHA15279b6dec5d57c902880e67020e137583f3d3890
SHA25670e8ed7b4661087c4374da1b1ca2e8b92497f99daedd9b9bf867b697fdf37fea
SHA512747611ff58949fbd8fa52eb8e6d3526941c37d2f549957ed635bd52b202bdc1eeb3f579014a67506b7682a712755efe3cf4eb92f020b48870508405217c7a331
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD584a280e286c0fa7af3aed6b9dfc1697c
SHA14450feaf3d1698d29445edeec20eb90dd0981e2d
SHA256e103df0d5d928c79acf4319bb57edbd936da09ccb4b0bfee1aaf99f8b6985164
SHA51202bc9881939e0672b22cf5cc9ff7325a056e8aa028ace0875a38e663d80933a9438ac9ee5fe50ef72a24543dc195aa3538ed72e5c53e82b6ef3a81e7cf4c739e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5b88e7f32b590acd9b2fe6e3cbf43202e
SHA1301434c44d696a0ad7de012f544d535e3b685ffe
SHA2563e18fb96a5be491666a4a9f3e035b2e38ffe1022c282465067f4ec25822a21b5
SHA51274f33c0ca7d9c03bcd3df49d95059e023d9e7c152e42176be65966664257b451e5ad80f399d5bc0c2080d77963dbf46c0eb618c81d15eea62a0bf8edca651b4b
-
Filesize
990B
MD5221ef38085ff08d912e53680b740f180
SHA18d84950fd55b9b5569bee008c6efc24a330c0a62
SHA2564c80977d5e9afdab0279731a621dabb550160aed85ac5e91e1b63c7534fd7473
SHA512a81e51922b995fd41a46b5ad258b649a1b4df6103e544f3ae1525ad4cccd764478ecd8ce68fa6018618e7aed89799cd384bb2d658f5328b1e8a876019e1a154a
-
Filesize
990B
MD5954491dddddb7323e11b697363cdf8dc
SHA16577858eb05303654b477de380021b6188100b8a
SHA2565dba25b1b07591eef07b14656f6f97770b0790ac06491a239bd0a1b9e9901ec5
SHA51249b0848c8942837b070fea3b9b787a53e3c47491dca76c88e33359d989b50a903fbc466171fb76eedc8c858d294c27d06e36172cf688792a7a704892e9186535
-
Filesize
990B
MD562958c4a9bde60551bf8c40f130bc517
SHA17b247292e91d1e5fba817024a059476cb9c17c56
SHA256a7c99090e3499a61949712ba2102887874ee15481531c9f8d2b4005efd3b7303
SHA512f40d30ffb62cd7aa5496434a3b4eacc03bf7b83c848517363c344d9a93915735f46800e4b137f24a43010863ee8ef57f05768e97383ae66f88b5f333247d22dd
-
Filesize
990B
MD559539ccbdcc88a94d6250351caa8de5b
SHA1774e8d8c8099a59af4c60c93bd0e03fe097b40b2
SHA256815da4816468d4dbc630834d8d4da8c0613c0d77f5c8063fd25fc9d74ab0548d
SHA512e32e26a27d237cff4d210f2f71c506724fc43d6457f46ad5a8513489c8c478fba678d5657c2f418097d0384ce2dd47135ed2be9fe380c048f2f72b92e02b3f7f
-
Filesize
990B
MD52c52fd4e4f0c3af9c32414b385d3d682
SHA171bc1c876106bbbe4241b52c72ea06f3a0ec7ef8
SHA256097b8f625c87c31f20f94ddd7d97455612352b9fc2c8be364f5217b9301ce0bd
SHA512c7739140973b20f37ebb1f011d0c30a04427b9a9473fd1eccd30a23ea0466852cdb1da9bf81a2e7a30a9cdbcbbe9c78840b5163e1211018abd2b0870969ff1fc
-
Filesize
990B
MD57792c87a2d723d1c0a410a184268238c
SHA1554480fa9af194c59377414bbcab53c888587f17
SHA2562bb3ac2146f538ffa917571a4942abc8f2caa67783f90eb0c1f700f95d40db95
SHA512cc40360aeeea70a502aec341afebf470a0f430e99763d98ba9e8d3cde725696f25b2fbd8ee00c5b0d58abf4a841647ad9bca2039e1d8fa3bc97f7259dc9e577c
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
990B
MD5800b8e0152c41416ee09eafc43cc07cc
SHA131fc6c96bd1e5aff66bbaa6d08fe51fdbfbcdc65
SHA256b4c8094414f5774a9f7784eb531a3cd1a1706086ab5a0a4b74cfdad33f6607ea
SHA5121b6d75dbe5f14333e254f14af13ec4439499dd6da5f8895f92a482b51c7221acb1269b09f5f649be535c463496bfbc260a4e42e4bcd50557a05fad53f962cd72
-
Filesize
990B
MD500b18072a465a1e50b7ad9139a2a2040
SHA157a3cea0869a772eec29b5825ba762ef041c6ba8
SHA25634756362dc9a602a2ca62f66da2b22598feebf59f9dcff03675ef443dd4d7d9f
SHA51235631b21f5ad01c44fd877a7901e46d49ddf68ec8ec51edec833657c5a1d88e07db5363bb5bbfb5d34b70fb4c4f77933373e8a860416e22088359c477a3711ce
-
Filesize
990B
MD577e407288f01cd89bd250b4e8374ec5b
SHA13669133fc3b6754a14075372788c677e89941975
SHA256cf48248e75a166ef56c41decdb4b11abbd455107c13602a970d016694c2331be
SHA512b14ec7f78d37c70285fe5e9e84df0a7c52d1a900ac3f5c469f1674c8f30a072a67086014a73216e70bdeacdb72862763794775fa4b15e494222102cc9fcb0728
-
Filesize
229B
MD58dbcd67acc7a990f9e9aa83c92cd79f1
SHA1d7593f9ef80ab48f7064e9653c35f002d99528d5
SHA25626c7a7f381079312a102c0795048a38b4b12f6004f8f9595ea326ace10aaa597
SHA512f965e854866a9ac1d28277ff54f6c5977df8f9e3a804e9b486048c32d48c53c11a460eb3c5b60f8df7effb4aba2f0b27256392541d964bc9fb97c2be2d7ec1f2
-
Filesize
229B
MD50ac98f7c8953df183652766152d7609d
SHA15d6812eb5d0900b8e0c89633a82425d7a0940c43
SHA25693f67bea022b9c2b6092239a93ff1cbc17ae3248bd8e63714d434c6db19f51c5
SHA512451e7be9c8c0dd36f1e8d53ca3c0c9b70e2f94f6c60e668211f7d6204286bb7faa4c6ccceef4316542dc9df0c72cde5458c1e68c1e55b86f99ad1e4b0a0a87d7
-
Filesize
229B
MD53c544dfe8a274df10db60fb97f2767ba
SHA1187be47923612e092ca79cb45c5a1f334d8828c1
SHA256133a006b202d32b36d725473574af5a0db6d155856fc4b60c525cf5dc70cf2b3
SHA512e58ffc75f849e3557d286f83ebabcc19265a6a9df834343800885a5ca40e4032a4e4ff8dbb6eaf47a4aa8722200058afb5664f828384d9153bdad1d40a9d9253
-
Filesize
10KB
MD574a1d0c3e7fc29ab24d5b1a5cb2ae642
SHA10e6985df082083c010272a3bbfbe59adc36a0ae0
SHA25643a5df5d35ffdff5ad128a34e8c58193d38a5eb9337ee68e3f80c65dda5839a5
SHA512195f3d7a95e5b45159b505c50dc937631b3e12aeda0e2a112269a761fdb82a27e1f62e37d2da7cd82955ba8fd560d7974f1dddd64c5be55610ec97f2f662785a
-
Filesize
21KB
MD589be82ef0ac6d1a75c97f39440a49bc8
SHA1c31d38f2236cb4e0918a4f1fcd7ab931e57927c1
SHA2569619384a3b1e6664dc396aa8f764be78666b82c1c7365d9880a552048ffa04c5
SHA512c8bc2013974a402f0f653798a181e967432ddc9274181be24cff74c6ce182e26d740653399d0a7a11dcd5fc6b04841d6b22ef49e02d44ea48b950dfdd843e606
-
Filesize
21KB
MD5ea5401950c17a82e700c4926e5b89c08
SHA18de1fd05ed623b6073c19f9ad0b839c1b9cc8f3f
SHA25673710e7f01fff4ebf48729cd3289103ed40571e66471116aadd882c6be4e21b1
SHA512655fa599d97ede930c2fe83d5a6aaf6d17b39cfbf477f4a5b096df2fe2b38f8cffd9c7c961383d379dda796721357a9d824ed3b94e938ce626e0f93bb7c6b44f
-
Filesize
402B
MD5c66fee53a8df9fd04fec7e18d6452ba3
SHA1e3d5aed8b605a9d03895c02d16b212830448a9e2
SHA2569b5d1bfda965c656cc1d09a81f4888335a44584441da4ac78dac210a932051c9
SHA512b4d793906a3b0e173ed858f640fc6e6bf626b3600f8b80aba5fdc5c008e131ed8ae22bfdd4b1e45c43ad812fdbfc777616e8cd41cc58de1a7e03e70d192a3bc7
-
Filesize
21KB
MD5f7ef0716684fead378d66fcedc778492
SHA1c04df5decb76fd05c4106643ff3c58c26d97f5bf
SHA2561ea27b86246ce503b739734097b36ebf2920f38c32126976763299e9681a4ace
SHA51227f708f375a271e91e8dd9b218bc27d7691b5d15638566cf24f81850d237ab13f36d469a17e80086286096911d940e44cb9d12ae56491c54c20b187a95a34649
-
Filesize
578B
MD5831680d4cf05e15e54fd9a4125082459
SHA1e4dffa23eb76dbcf477084a078a8c5d012f0c009
SHA256e01e90507965b94879bf21bfb7f96e1607a1e66cbd4a326418f27a4ea9cb9f63
SHA512ea7aed4471d1f7ba7c5810939b074dbe4de3a98b33ee1f410cf333e5139ca0e6a3925386083f5069991e2519a767d2b93f0cc25beece2b5729634b2669b75b75
-
Filesize
990B
MD5a9e9ef676c4574f60080c18200017521
SHA14a32b3c937385abd68f79ee25fa18350e7194167
SHA2564bce74ab7fe2a3880246be64dc9c9eec3b17c5bf7dd215b33b8863033416f0ad
SHA512ee6a2ac1a54d0ad7adf335a66e0971a8a4fe2560825017d739c04f2fd9a72a84c837d3860347e145ede1c8911f8fc00b8965e36f62628be01a16e993eee2de00
-
Filesize
990B
MD528e51ce0c6f03ad729da367692676a84
SHA13382ee1ae464e0ab00ae52284970ed197d065df3
SHA256fc18a9239dc3f1f44191825fd90328bc4b684043c51fe479ae952242fec13ed5
SHA51256daae54a08abd5879df9d6df669e04c4ab9a25728c8fa93ded632e64c91a01ab2016bdf46e07111be97214468b8eb55106f781496c367f0cacfec527f0be929
-
Filesize
990B
MD5bd8172236f04f718792522537bd62583
SHA11cb9e51aaa451b90d50a814aa981fcbbb88040c6
SHA256d2713061d10bb0ee4998f356bc07f438fe78decefb441b3c242192f251211e38
SHA51200f39b38121c05102fb258802f0d47ac55774b6b413c317ea2d01aae741a8130d10cfafb237c779a8e1288c2119e69282ad6b78038fc272f1c84cebec8f67ed0
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\base[1].js
Filesize2.4MB
MD52021c7e085a0cbf73fec8b2bbb7f1a37
SHA1776b77c0f71ec2ba95eeeed344b764b5ebdd8da2
SHA25654aa5cea9b05c57847ef3af72b0477a310a43d6c7f4a7107d3a04d2345306fec
SHA512c7e500715727601213e227a73e718749dfa0dc5e8e3e08834dc2ce81f7c5c49ee22fc355fe7e093a31783baee292fe2a21d4cdf542b0ce411be431a1ea760b0b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\www-embed-player[1].js
Filesize319KB
MD5d1a18b4ccb5212f80db46d11507c01f9
SHA131d2da1ad41d60db99a66ed77dcae4c409ffe1e1
SHA256440b5828e6da52aca039bf5e5d9c892738c36199c468462a236c701b175ee307
SHA512c1add632ffde2dd17cdfc58af5986f5419ae8408e0272633685abd79e6b0b4908c006d1424002c44436fb1aafe7fde1338558010cd1f55e0f9e55a62415d5129
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\embed[1].js
Filesize62KB
MD5dd25d286f53db96934172e2c61a3a25c
SHA15b2668fe5be44cdf94907fa489f04503f8131d24
SHA256c3030c3c9f6c84d03f7a72713660fe82c4b4655a1459456f6753f6d8ab86b54a
SHA512fe5538b210edca4f167b20eb6d9d4fc5ca67c6806213811d0c7e5da3d868d1974f2cdff01c63c4d6e1f1fad0a6ae860ac4f738b8a36e115b0e58abbfc7da057d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\--9dH29IQ9CksBulhkJupx8P-yH9Jquge0_97VfE0Pw[1].js
Filesize52KB
MD55ee99861cceae8e6c26ffbb96ad11a6f
SHA158e3ef362205d6cf11e60cf2b031695ad07ffc71
SHA256fbef5d1f6f4843d0a4b01ba586426ea71f0ffb21fd26aba07b4ffded57c4d0fc
SHA512f3c140b611a6d5ee08b910257f85814db868804334810e7d93844417694a3fdda4e6a4e9dab083ab254bcb824c186b50499885168c96ae087e62bcc60dd85ac8
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\remote[2].js
Filesize117KB
MD57404c67caa5afee3df1b28913ffc0aab
SHA1fdc80b9ba1f48855a04606c1f32d14abc00a3e4b
SHA256971c20183184026a4f13284613531ea4a5504f4c03ec6acaac1d7e0e8f705fef
SHA5123f11345544c5c0886c55157a0dae2728acc562f633a24ce5fd57005f9484e53d2ebdde927d88523ff95433cfd59851a2654ad32147adef550cd01dab5fd8082c
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\www-player[1].css
Filesize367KB
MD5a9911a47a877d2736a20d97ea9030fda
SHA147f796faf3af4f64953cc6db639d16630a783fff
SHA256a23b23fdcfb6b7aa426716b112dae01903b1224310b7b68ad118e507ca1d9dcf
SHA512bc045bec918bb0bcc585afcb9af7913276d5c5e10ede5cb1a38f2d86b020c9dca23b8f134414d6a4652c76fd5c6172f3c88dcf8360ee1a2114b3261b62b01a25
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a