Analysis
-
max time kernel
144s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 01:59
Static task
static1
Behavioral task
behavioral1
Sample
659da9e9d198984fa4c1082d49bb32bf_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
659da9e9d198984fa4c1082d49bb32bf_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
659da9e9d198984fa4c1082d49bb32bf_JaffaCakes118.html
-
Size
175KB
-
MD5
659da9e9d198984fa4c1082d49bb32bf
-
SHA1
4e6f6e76ba498da0f2b44eaeb797a659df28a200
-
SHA256
d34bd8041ccc1d52eb5110d7ae36cb22419c3d08c922399982d74f258e925c6f
-
SHA512
8137570898d68085ae8485df4dafae44a61526b11847bd3a8ec65fc9d79ef30ed64e6a7f8644e4c2b0d346c47cef660ec5ebd75dd4e65a050440a4f9d4509986
-
SSDEEP
1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS3CGNkFMYfBCJist+aeTH+WK/Lf1/hmnVSV:S4oT3C/FpBCJiZm
Malware Config
Signatures
-
Processes:
IEXPLORE.EXEiexplore.exedescription ioc process Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10880" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18042" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9232" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "12016" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18036" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c0a012faebabda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000069a51188323f39469028165fb711a96e000000000200000000001066000000010000200000009b5351cf1efd2285d5af0254d93c46fcb4a0d947966f49efd40a4fee3f7a61d5000000000e80000000020000200000006c835e5f459d118cf2671bf1ee00cabb52dc382ee2cfc4c2f0d63bb060d1478d200000009f6e0cbdc89cded3ec84dfad8b3b1f4b432fb09d055630a55e901c4d4fbeb67a40000000f9057bc23ec773683df445bd5485ea675166f1af16794cfc54021639eb30ddbcf6394cc70c6c164d82f1afd88360267ff6466893489e90ea6cb47c0c2bd733e6 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10765" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18246" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18246" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10765" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9232" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10880" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9150" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3275" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10880" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18042" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3275" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10886" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18036" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422505066" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 1808 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 1808 iexplore.exe 1808 iexplore.exe 3016 IEXPLORE.EXE 3016 IEXPLORE.EXE 3016 IEXPLORE.EXE 3016 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 1808 wrote to memory of 3016 1808 iexplore.exe IEXPLORE.EXE PID 1808 wrote to memory of 3016 1808 iexplore.exe IEXPLORE.EXE PID 1808 wrote to memory of 3016 1808 iexplore.exe IEXPLORE.EXE PID 1808 wrote to memory of 3016 1808 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\659da9e9d198984fa4c1082d49bb32bf_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1808 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5042d49564a0a6b5b2f3141092825fb44
SHA193fa79fe7604f7929c2bdd8f1b4517bb6ab41d37
SHA256a93a083f365342397171ec0d263105a8f93d8ad215698acf7ce46b865aca8c32
SHA512dc98331b518012502ac2d8871a534fb095cfc6ca51aa3107735cfee885b1923aa1572b2c0af172ad58b1ed530a7e5183591fcf1df43f19da14c0fb31323eb3da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5971dc307129640ee9101d59f5f1ea676
SHA1ece6aacf292ca5ce0080ecd7db81de0ac57ae064
SHA256b9a750bd8e06bf7b2d924299a8ef13b27dedff7b2989444eb3520cbc3c2521b4
SHA51275466ba9832098c264b2c70f029b0433201431474dabc651d133b3c4871e916b1154b3d55438bb31fdfb6e29c5587442bb7eea1cdcf1e12e8ec49fd6fd810848
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5f35b3db91d6a9d068a8138c2112a3c4f
SHA158e03390b043931ab4d5372929e89ce3385ce88a
SHA256e2b42623cae574f3b6cbf0daa6ec6b789b4248251625bbf24191135a7cb098e4
SHA5127988639b9b57fbf64f1d57ec14594e9089f7ffaf9b4f5184d4b667f82bd51c442068382e75101784190a9d68541fa72b0cc6da0cf4439e814c78705ac9ac93c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD53c3d04bd1aa4bea0e75eb5a6a08b00a6
SHA1a80d20e432bb5ae41ae5877fd3d3d7c12eb4c4d2
SHA256c75b37c07a6f9abaecd0ef1f842d50ed9a527b9503680a6771412cd3967129eb
SHA51285f5cc06af8a4cbf04eec7ee0c3128755126a99763700d4a90a67e456e75ae6cfbd9506978416b6f0689459ec9ba2734e252ddc1c7fb1ce34bdf3b3c65d161b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5b53cec65e4a4ed12faddadb7b8ccf852
SHA17471b5ed4ffd1954468de264febd5debb2605699
SHA256d0e1d88c21d34e20a1d50d8c392a9b89bdb869a691147d081dfc46d2f43ca3b2
SHA512726fd6e63163eb3c4fc288b88648870b05ec957e7c581e8cba6cfdd4fddfea682141dbdea28d19f56f1d6d94baa0a36571a60b1c5a100e78e87b61e42b34a3d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5b2e0b6e19bae93eb01be67203d141341
SHA1fbd0a05387458cef0903400606e68b16b2aff23f
SHA256b512b531561d632040c041c6730dc296e76373bc4c078697e880254bd38954b8
SHA5129c86a9dbb6510c1198528a19d8a07d9e26cfe4e90b0adce299f123522615636684c75aee2704d43a63f5765898cc827a5ddddfe885183d1c8cafbdccfcf52377
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD51b90823705c66ac2f508d6b3b0dcdef9
SHA11ea5f0986fbd70221badae61eaf6d7ab1750f00b
SHA256717018baebf91bff2b14885288cc4ec83828f49670ac59f590fb39056434b81f
SHA51247e5d236d6a3b7f4caea41e78656d7baf52e2aef59b88f4d40643a6b2ab1c11c03d523d020cddf071adf3a9b64027fe802dc9222d1cdf1ffad3e686cea765a37
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD55670d20218dcc6c1797f844ed922990d
SHA1f9757e3f9791c001153da5c69a8bba636bc28af5
SHA2566b0bada28b0aac597ae86ca3f9ef93da784445c74888aed72741b3053cf67763
SHA5126f70306379631625f7979b27022b71fb930d474f3b3acbf7a6f137a6f63527bc2b66c54b92aeddedea0687dce04a96c115b1f3012e33c6cb23985a1844978d61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD54869e5166ee892a26267c6d3be20ffb8
SHA1fda9a8e888dd2a13dd90e9e1c1febfb8454e68f5
SHA2568824ab03b0b0c32da73676cbd169879b8d08cf51b88698be34b2dca58a143875
SHA512f68f7e7ecce7f434190eea8a363b8b79ab5096b90c223f6447bac82600cf4c00b17e7b019f07ed0246547dfa239844f3b865a5e54475e1bf3f0263fa63976b02
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5388dd951890407971b89d9be672bf61b
SHA1c724239d65faf4645e6b4f1b19c0159b40be6aab
SHA2562a3e3e2b14469ccaa968d8bcd7f0e27b1fbaf3e50d558f1f5068e784daa7a8f3
SHA512130b71b6eb95020d0e67f51b08849c9d20f487164f88ffc2dd435503f7bea41176b8413f4011c70d4a1eda7fc098c92740bfab2ce596d227431cc835f7383a38
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5a533eb1cd04a2cbcf717523143381679
SHA1be8af8113fcb36f5154423e717ca16d382103cc5
SHA2563d6409f319aefd133ff22a52d098c6777b9cf500f1e15e62502c2d7d4514fa4b
SHA51288008abafae668f7d7e110b14cd5af04c67d9166f44ec55b895e28993cfd6206ffd2f39e2f69df8f41e247f21a703ef2f0265e20dc767ad5a1ec4f0c686bacdd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5eb303c25018bb9933da00144907b97cb
SHA14418be0892b36b9b8a16c6abcd133e679b80b838
SHA256afb54200cb8eaa6671196dc8a66e40885ecdcd9765852548e23689b1d203b2b1
SHA512282551db37c18e29c67e1593b06fdf568dc85beb40caf95db83295bbb6cc83b8a247eeb9be6b40fc6bc14bc8110f8b7b8dcfb2c56d0e18b0b0dce6033d3ca415
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5fa6aa472fe3472857eb23167b9942f16
SHA1266fe8fde9786200cbffa1b6a4239fe1ff7d5ee8
SHA256d694e5976b1d41bad01cf8a4bc66fe0ad7a28d5b2da5a6d13257b499d39c9df9
SHA5122937056bb14b4786a764f7ea57ec989e31f98372fc9a0a2654de073dd1f4a98d6021a4bf700941c75c3e6751e274235e5f276417ddb24d699d0b2965e1fcd630
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD53be741c607c1ae90fbc21cdc60bcb8ce
SHA10e946e16d1bb57ac97511fee2c07b322812e70a0
SHA256604ec2b862307e8a5bf8415ad4d21f67356942603fa9b63eef1e5ecf2fbd4444
SHA512e1a4153ad5347340cb52278bd78a60aa499f4c283d899cd5d0ef1f062007a294cf86b5406ad8a1435bdc11647abfe75d861ac8947ab2c214f598655251a9ce41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD574037ba0e992fea86aa611df257ba610
SHA1c0c6aa708199a05150066428706b3410e8a687a1
SHA25659f3c677c640d47b0cffd67bff03ea93009599d9dab4e6cea533d11621d8c1f5
SHA51205421ae82be63fb717302e65939234615ae10bb5f2361064e8df2fd5e643323166e2dd91497e9acb5ad5afbd2e33279f99f8fe803cf0fd74b6a35177409d28e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5f84b7e818f93a081e3201949897562a2
SHA1024250120336dcfbb330a0fa55afcd3a6a9ea35b
SHA256a8b494960ba6dcfc8c7538442ae95c65cea692baf64608c1a4f01d51c7c7a0d6
SHA512e8d7fab3810033106534ade0dfc602cb5e3c3a1df97269ef96b84262d6e1c0f53bd1474e899348df3f3831e21bfeb77fdbcdecb4c7b78acd98f952ce65a29093
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD52a785497ed5094694b6b6b1c232b3734
SHA1a1e3d815e00adc52a2328c585619cfeb8c9b8ead
SHA256e531057c615d651ca082aaee57ae5b09928363b5576c6ab6ff16e1116a42d454
SHA512c95c19ae26edfdec4a1c82341470784faf8337ca1a5bc029b9e92f586323d0c1be26b37de133bf99db88fe59ee38dd8acd20bb1a64c483a630af406172fa4721
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5972f551feb29821bb02b7d0332aba466
SHA11536d2554ab3c9e315e4cd3eb9322caf65abcdad
SHA256a969a02d3cf357f6bb80e2e05d72d91d681732f09a8bfbfc85387f174ff76c7a
SHA51293f61f8a99aac50ec0fd753eabcfc5617b72f107c392af4bee135630f44e406b88dd3aba0f6c19f5189940a8e7bbc9ed4fa52d7da63e67a5c6f5a7177cabb2e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD51e1a7ab416e12fef1bfcc1fe25d9f925
SHA1e9a58b436473cb4c7f06ea46a3b14be03d3eb4cb
SHA256cf6afb2143f48457e11cefad2172f6a1459da5a0e7e409b7274e019307767b00
SHA512ba4fa5d544e7a9d940a97dc25eabb219e666edb03356c523a480754aee31bed096fa6daceacc317f0e01ff49f4347f480d9285f610b837b33c35b0f95f037f8d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5b0f69270558e7dcb3a0bb125425402d9
SHA168654dfff5c9dc2bf602983790db4f6d0c9f3040
SHA25629f771c8e1bee0fa64cb074db9d587c7caebabe44a57ed4ba99723749c859d60
SHA5125214310446c2e4d1d5d54519eab79440fa702feadc2d571e1208b8467382e598843683ab07d63c838c875884dd5ec8d4e24102339af37fd7dee544ccb1959505
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
27KB
MD52979f77b806da6a9b5ea74d8dcd94498
SHA121828d3b5266bed29fbe706f6a0a33cde034ebc6
SHA2565022dd30b9fc21e2948b1808bde9482831d6806e6164e29a188d74e78e474d68
SHA512f9c02783949987a84c1795cb97be1e978040c867ae1aff10ed984a3403c4ee7425c79872808bfab23ac2b2a369ceac5ec28657315f48e5211de2f2b99a8726ef
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
27KB
MD5cf2e9b91ec899fccdfc6bbae73e64aa6
SHA13e47fbd01e0c72820e1fd7e2ce9c5971565ee097
SHA2562642e2afb0c606d26e1cc208370f40165487d533b4f642fca9eddd3fc6d1c179
SHA512afe073d520e4dfd2fd24d2cf193f8343ddaf7c603ee1d011867d3e793286244d90d08f68b70b9c29ee917bec4c30ffcbcc412e5f7855912dea98ff5f96ee764e
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
27KB
MD5e1bea0e0365ac798e4074eb830be9a0b
SHA1e222f09de9b5e1af56a4df91ab8dcfd02d6ab7d8
SHA256db90f191546de02c38675e2da39b84e7a2694c8a1769f0cb48dc2e5fe20ce19f
SHA51203483a3bc42dc5016d3ae9879d374bb1938dc83c306d2b8f80e9b09b99abf65c258a813ccea0a45b7cd97338808a46c1170a5a69958ded1b94f62f55e4108170
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
28KB
MD537c45233227b19c81ecc53a951f7a8a8
SHA1b0934fff08688e39dd78409652e8faba853426d4
SHA256ef364eab4d1a1406cf32c48af6ca694ede090fd3a3c296c381588119c4e5f149
SHA512c60e26de189819765855491e9f767dfdfb0f1c694e23d37cde8b9c5d0876c9f1371390a1e930cb92dc720a9df1e8a4a27979404970f2f61d05630c986001a3e4
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD512b12813783845b0aa506449a6a67c0b
SHA14893efd5f3e880c773b04788e756cf2d28acc552
SHA256d8c4398f20f3fef0c4423b220d538687bb9c6bd51f8ed6f5bd8d65e2b9bc1a99
SHA5120318b70d7a37b5901a7bf8acfe405882c734775daa4abf137a6147e3fab6cf99a3e15c400a345ea68ceeadd91fe09eab21510a1071a3ae48d8f8a840f2450754
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
18KB
MD5201639dddda841fac811f4a3e7e798c9
SHA1a2e34e51b4ecb070235ba487871074c2eec90bda
SHA2568fadb82699087e7e0c445558e47cfe78a01c4fca11a68188be66dee4e3c3c917
SHA512a0f0bab487fb15e4a4243af986fe9029b8e53d4b8421c30954d7f90773466f0bc9d9d2150749140b46e128740f6f070e2c90ee6a96d13ee0a1baa99309a6deb8
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD5542afbd99bb22b106af6273aab1d1416
SHA1d4c7e6f701e0cc2482c99359d0c7b39dc1b88e72
SHA25693179a37118112e16df7e9168a0f58597d75b5fb396193aa4cf53e9b53e821fe
SHA51265b5fa27efeee2acf5e65aff768b867d81dfbd0b5e50ca3b636970f0b7b36f54bc5939ca6b22478534e094dc23b7e35865a0eeacf86bbaadd3fd3fd90d046136
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD5f5d2f35504b01d1e58c7dd97b1fd3cdb
SHA183f6d19015fd8bfa684152b8e3a1d11fb108c41f
SHA25680faa03c922eb3ef4fb49a050e855e73e6f7869e4d3f11910dd40bbea44b1302
SHA512e24a841c6b21ecfb86e469cee0b59ecc13b15afc6a6c0726cb9c71014de85fa675662c26bee2011cd73a4bcc984b068b441ae550f31729dde087fe5a88c91a96
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
402B
MD5fa1baa75105384678f37a329d2ace4cb
SHA1fff2bb689c4748043202533a2a01f2042c41785c
SHA256173a8755dd548a0ffc39f26878529d9813e3aaba5f39481fdf7d00e16ffd42aa
SHA51206148b2e67fddccd29adcccce40dc0e8d1a16e84aae4c453af867ccaf4e2a330e2b71f12b9203945e7d362b0b5f9556dd572b184bfdf58e5b691521004ffe24e
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD5a495da42cf6e9db258319c21447fe6c3
SHA13691fb3d5652e4ec723b4fe7b83a8bf80043e7fb
SHA256aabd4437ba189fb7950a3003d55ad2575f377bd0d615f18bb9f58ab01dc2d891
SHA5125a01797438bb14135ad746a924da0a4de36a6205aab9e0c02146b894482643d373508ce697c248853109acff83492fdef30e7bd587fedf229dc6be1578d6db05
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD5c1267627a5d87b6014dc328e3444c4af
SHA144a2a4a202a02ded2edcb8513cb4127a9a5cc680
SHA2564ba54184d0643ba2693b8c16e26ec472e465ae68870d62a04ae72a9b72a6d135
SHA5128b27c4c0b7003d706b899e37afbb337c55d05ff31608f501b282066d31e3c6183d5dd085a42dddd862fc7402bf418dcf53e000fa2bfebdc83db7a5e9fa3d0c8a
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD5a6e65c8b913d6d6c42a2d8f30896c5bb
SHA153ce787bd038d763bf240604bdd3601d709922c1
SHA256879bc31afd8f597e2090b32f71abd3b9ac29886f62343b9ac54466ba7812e934
SHA512be8dbd38b3fb736b537010890ce42bad0258e6a5227ff14a84d52564a6b94256bdedf01894bb4b1939e75e8105dc496139412af1475300be1961c3070a850b27
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD532f2f88f6295c637c8f1aea46e8eabc4
SHA13eda4bad0b2f520553a28d84d863aa7d85f71eff
SHA256bf2067dd0e59669b5990a10ca12ef067750ce77235b91d67fc7e8795c6415dcf
SHA512fae7657d99446ca4a39c04c4e797bde3212066fede2c0375c8dda2206032d8804a4cc48af25c369b0e4f2b326551d0569c983d18f27d393bc68160695da492c7
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD59d01f9a19d1b5a7b9c1d7e7e9ab92e85
SHA1607b3e55136d09abce8a553c1cc80ef1941606ba
SHA25640d5947888c17adda17534cf3173ecbd00721178bcc97bc9c8fc6ec83fb54342
SHA5128082c86d3e64db2770d19c84aa684b4e91ca22ea07207010385f114fdeb521e76b67b20cfa789aaa172cfa0c78edad18f32f3504b69d8838a4aa962ec324d1f9
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
990B
MD5b2c70c38868879e6f69ca8740bc97b25
SHA10ea80cdda8fcd0e0ebcb172deb09cdd74fbfcd3e
SHA256447ccc901cf5bebacd9a0668a4274c6449717cd929ae16730ca125a986ec8799
SHA5121dd44d92512e2d1055c958ecbb6b07b69891f3d9683207e45d6307e2adacb25bcc8e500fd433f20d026fba9f3aa27e2c20cea4b6571e107a49d56567e0bb9c48
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
16KB
MD586583ccbab0f24b6f38aab4ebb8f3005
SHA1ee069e2dc0091c6b9b649061f864a65de9f76a5e
SHA256de654b3988311d2dc769f0ee4030a108559272bffdb87508a51a4074b0953e7a
SHA51244866254d6bc67468e7ec300bb84dad36cfec2b0134e1b725a0aa02a084241b347a7fb3a091664efc08f24acb0214f4ebfbb95bbf4f2710a21e5f75f12353af1
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
16KB
MD53cabe2eb3593bb795a3890b0a101246b
SHA165add9744e8d4c735f03067011a2a225302031c3
SHA256ee0b3768a1cb3242c78be7ed4ddb611f3a74f909f3702952ba964010e6a3a244
SHA512b1aeb45c1a8432ad7677282be13cd187771640938dccf921d1e1babdca1808981dabce39039e05c3764c859760bf35863c44ddc5031b9cf7fac7e073dda0ae35
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\YUFO6ZCG\www.youtube[1].xmlFilesize
229B
MD519d7f61dd729c4c2a9cc25847bc454a4
SHA113dd72e8e0c66640307ec92679a189cecf16cf8a
SHA256da72b09008fc30f872ba9c839060977c541d0d18654bd1b2a3a0f1b688165e6f
SHA512bc19e378f700da34072f2770f90898637bacfff483c74a6c89bdd512cf4e4c9e39a116e2d137804420db51227c040fd76f4f1575b8b9d4e94fd8a5b71a899428
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\KFOmCnqEu92Fr1Mu4mxM[1].woffFilesize
19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\base[1].jsFilesize
2.5MB
MD58fa70f0be15ba0cbd76ce2c9f49ced01
SHA1f9d5ee48aa7c7127e3538df6a4e0a7bbf88f9ae2
SHA2564f8231a249a20a9a65316fa143b1a0efa81c1472495007498f87a6a9e2a60092
SHA512ee1bf7156d15d41735bea11287f66142a498e78d35d3d7fc89872ba19a1e2ec8b7703359b75c3e118e7bc14436ed06a6f77cd08ae8f5cda112701d54d848dd78
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\embed[1].jsFilesize
62KB
MD5d9d30b67f06b6f4ff90f21a60d3dbddc
SHA12bba48d9bac41cc309bc32021cc36e7e57ab57bb
SHA2569c138b29b664ca88028cea49d01d2d015819491d0c991d6494f3dbfffc80e3f3
SHA5129c6728c20b8db333d72e2c0b9fbb1b9fee56d721392aaea92fc0f355fbb889a3bc6465e68758cca18dcf80c2d2ebd5d607595a2bb4da374bceac91f4341f7e55
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\remote[2].jsFilesize
117KB
MD51880687569f43efed4bdb1f35cecd3c8
SHA195d16de5b8879cea48c80fc78b0a22af88ec5e79
SHA256301c7fcfc794c5299e0c44f7544c196d4d5a0a51f78294bf7389561d45111560
SHA512f6db7e8008d7f59488b2c2d6dd36db7d9fbcf225bb8fe0a5a6caf6394153a41413bfd4e5ab0aba89f613149e29f7db348714dffc1d674eebe3e148f1a87df83d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\www-embed-player[1].jsFilesize
323KB
MD5e50cadd855ce97b5ccd6e41e6f998862
SHA173508dafb0dfeed8c65e5c85ff7cf0fbe4d3294c
SHA2562042af5e6b0c1dacb99215e5420e0fddda09c0d99e216f559ab5ada8c7c059fb
SHA51202a6b02596cc3b324d5cca405d6dff287848a8c26bdcd7ffa25976fa39307e623709e5af88922da0a019c04fe41268f85b6f11e4d7792edad35e6f847f6bafe8
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\www-player[1].cssFilesize
367KB
MD5ce8337cd788d4da38a78fb43ab2d6937
SHA1c62d6acee1b5535037714090b69afac66d8500b4
SHA256f774ddb7aa7993ea7d6829f81b4d52d02d1f6bebe7606d9f491dc261453f9bd1
SHA512a7e6b7d862584381a501dd4fecfac73a4060f68958c5d6e6fae19bf6893b3f505c3e59d1deba350f711f6d49fb5d0a56605892541b82394c3d40afca62307283
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\yV2iCa5PT2B2oWfP6PUIKpFTSawA576CFnzCrmIVLE8[1].jsFilesize
52KB
MD569bd7159b63674b070f11164c138e611
SHA178b6716bc5ec12b4a7c7bd3871cff4efb0281b89
SHA256c95da209ae4f4f6076a167cfe8f5082a915349ac00e7be82167cc2ae62152c4f
SHA51265c9fa90b27df4dc8ab949e48f04bf45b53a2d1d89cb56fead3f95c9abd210b5aa88aa1de718de555445bb0570fcf9aadd06e2d226a31ef10675a73df93c48d1
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\KFOlCnqEu92Fr1MmEU9fBBc-[1].woffFilesize
19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\ad_status[1].jsFilesize
29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Temp\Cab6D94.tmpFilesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
C:\Users\Admin\AppData\Local\Temp\Tar6F30.tmpFilesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a