Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 15:08
Static task
static1
Behavioral task
behavioral1
Sample
9237f24691c76647dbdbfba7e0613421_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9237f24691c76647dbdbfba7e0613421_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
9237f24691c76647dbdbfba7e0613421_JaffaCakes118.html
-
Size
476KB
-
MD5
9237f24691c76647dbdbfba7e0613421
-
SHA1
d86c7de069b39d148e111e82d2ff4d8037d0d12a
-
SHA256
94a2ec4e40c824a6f1f4bd41c6a8fe09e6a2cb6bcd2e162bd9d2012388f6c816
-
SHA512
afc1822f8da847539acc1100212f8809eda043830d62bd33b0055ecfe84a102df173a5d5c2fb1ffe4ceb6f454f75fd933be756fb7809a8b21618df3d2fad3064
-
SSDEEP
6144:JvyZtWB0dP6xP9Y9w/kIZKMxuLwerG9XN8/:trZxRsnC+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423589196" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20058d07c8b5da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000eca8c2438c4bb64a809bf77cc66969d0000000000200000000001066000000010000200000006c76554c5d06569248fbe360af0962b75b685927520a46e3a9cee0c97ecb109c000000000e8000000002000020000000dc4a7801ac368319935fe02ca7fdad5639f1872c7a1315fab0cd4844f1b1016f20000000c47d229df85de63d6b51c0a8d148d8e8bf3a89309780192e44594cae8e47fc9240000000a51ac7a74bb82b4b94188fa8ef3ed7bf5f0fda90b74b888a676323e152877609db21ea2837439361482f85418206c6136fbba4b7e9b153787ef2c57fb037d5e8 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2DCE79D1-21BB-11EF-92B8-52226696DE45} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2196 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2196 iexplore.exe 2196 iexplore.exe 2124 IEXPLORE.EXE 2124 IEXPLORE.EXE 2124 IEXPLORE.EXE 2124 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2196 wrote to memory of 2124 2196 iexplore.exe 28 PID 2196 wrote to memory of 2124 2196 iexplore.exe 28 PID 2196 wrote to memory of 2124 2196 iexplore.exe 28 PID 2196 wrote to memory of 2124 2196 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9237f24691c76647dbdbfba7e0613421_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2196 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2196 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2124
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\75CA58072B9926F763A91F0CC2798706_056B48C93C4964C2E64C0A8958238656
Filesize1KB
MD5576767e0a8065a4b4453b2aef1041bb3
SHA18d9ef8c5d3d5d6154d89157d92fbc9660f4a479d
SHA256b2c11bb1c0273c82ea2c022547d224f143fed654da0c55093dfe742e3c8b5f78
SHA512e376ec06516a0f75c81cb0ea284e0afa5d756a618fcf792e1fd53c729351e30427d3036acfe7211ec1cd2326732fc3f417fd80bf6775365821c3ed2697054a3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B66240B0F6C84BD4857ABA60CF5CE4A0_5043E0F5DF723415C9EECC201C838A62
Filesize2KB
MD522d0bcddf87d20ef09293ab586e69db5
SHA1d7b4abb218147bb9437b7a2ba7dea76d561fd8b5
SHA2561bfb2ec7ce4282ca339de1f8ff9e27b3543a840ed077366fb99b25ac9a664774
SHA5122daa4843fd455a37f49aa0d9e90ed98237034be3a868467f9a88728992bbb1b24f871a9d233261e4e64fe4fe14e2e32c39b7cba3b09322687fb8f9cb902097b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894
Filesize1KB
MD5d9ad1fae5efa97a0a421117909a56c51
SHA11ce767b03483ff38545e52e8b3629e7ca9b71e0d
SHA256dcbf234d97a278942e73418632802fc912335838ff2d51c16e2820232654b74e
SHA512f303cd7f133d8c7cff6de0afff4216c977ef6c6327b1771af4d50bc620c0d731a7f8222df33962997cd298d8268d97b99e39b28f638e218ce093eeddfee99208
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F53EB4E574DE32C870452087D92DBEBB_2E32901FCA60669E5D4DA5F2A3E715AB
Filesize471B
MD5906f35f085fc5d5aecfdfee3d81876a9
SHA1dd5ba2cc8808794d397bc771b1d736f44954baca
SHA256dae8b760084bb27192434f2b6a346bb70022e032ba790ef748c29f5c785266e5
SHA512aa14ac57525aeff17636b963a0fa2a41d18e480f8241a653b063e0c73c5e92a3a4b94be5c980d561425c1512476605ae65a15477126e8f1ea34f0e5e0ab7061f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Filesize230B
MD5e03c4f83b0ddfa880786771041bac3f1
SHA1e6cf8973bea4f3bb2d33c001431bf2926e92a576
SHA256000aa0d777790edc3102f23a1db2a67c15c4fa3a7119fb68612adfd555a12ed6
SHA5126de145268c093336aa186a28113064e647a6cbed52b8fddc7a7697ac61c1ad3505e61d1f993b5e62df2a81ac3c03ea200dbd3c909b86be20aa8e5e8559946cf3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD54f31ba9184460e27ad0aab9e4fedffad
SHA1a5c78f5bbaccc4593715ed1d5fe04a5063e0c507
SHA25688e55d2bc51c1ee7a74ed53b8761a8d3de915c3bd9b3504cc010ba39af769e5b
SHA51281b327496adb0a225b00bbc59b570b6240679a8703a9eb41a10b0d57e8aabce3ff7af0823592fb373eeaa472ed18106fba2f63047cb44cb001fd8245034b7c8f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528c6ab478cb1772b8e189dfb5f54eeb9
SHA1bdb45e26844d03b06cdfa8a42c02100c15fd7a5b
SHA256e918752bbb2725399c43a19a0cc4bd8357ed6a00d90de5291fd24cf0d3d0c508
SHA512dbcc8053057bd70c2188333fc2375a5092a2a8c9d9f5403a0ea7acff78ac24642c82b276f2dd3d13509f1fce4a1b302386d534175ed3158a2653cf43c3fe1e19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c56b428600834d7d47a1f873e4a77f47
SHA19f96f3db6bab0275fb3459b734ba746ecdd76254
SHA2560c301f52e0b1741e12986b56e4cd63d4e88ffe2e4c075703054551b22b049f21
SHA51239852a935330633dfca84011964877b21011c965392c5972484cefbd8248b71deae73fb3c1719bc56561e9bfdd59673d496c1780066fc75b2ab9682f03fb9ae8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b85ec6698efe9885e5977710099f4af4
SHA14821f8c5271d70c9c74f1fd33b972491cac888a8
SHA256db6ed235606c2b9e138bcbdd4146f774466fe963b89e7d2a1106135f507d640a
SHA5129d33e14171bcfea75a926d7cda1a002e11933be7c881e332ac805ba121abad4cd9d1ceac73e22cc6405099b328980d5709cca91b7695d406020703a707c470be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f5fc28f69994c77f34dc3dc18125aa5c
SHA135f96e044f1c86ab07fb048fbb960b101e9594d8
SHA256beb2e5781ee6002d450378f4ede10d1efd8dc0ff2f9083ac848e3f2a9f964905
SHA512ba2d01564f1e58e289474069a366d278b3ee842636e4ada10630ea75f910992b1f007cd95e900eaf17de56bd16fde1485696bc6b5cf416c387c7b66abbb6b15b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a532833f5ea2db75afb34599b3cbc071
SHA1223017e36d56e9f298ad0a8c9f4230fada1af6da
SHA2563dc72c3ce104ac7e2b9b901f6207e9ea678e2b99706c3323db7c071574387574
SHA5120d6c899513d80a800061437e6d4f3272bff2efcb6299ccc5013ff2b053ef2c0e6e14b1b1445b131e99e5c36aba4bd7d1a30b9aecd06ebc2c2385b1392ce06f69
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59363c80a8c3f5b3c1fc230bb2ddd6d11
SHA16a77d4480dc7c349efcebd3a317ba23511fd2d2b
SHA256b11adc0beb16a871f222f5380f2dd899b12a5afa64308e589c0b56553375b322
SHA5126d1ec5d4520a620bd3cf670b9a77c012a641de097754d4dcc6fa344d376bc93288ebb537b7074f7d176be4b5d4b1aab04b45d759aa24acad8bb9ba8693d45279
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598600eec9610c1d3a21097bf5bfd88c9
SHA11b2ba33bcbea041dbb31282f1ce969c7473948d4
SHA25631805f664020c2fb4438af23490b85bec82be8c9d16c07db84255fd1883cd48d
SHA5125b1678d90a49db18b97f6e68e8a0d25a9204ef366b8337289748379a07e3551dc02f11c6853c4e8e94a9a90ca43d7a0c3b667a9b9ffe47ead688929afefd9ec0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c97e029a3c2ad910d8fbe3acd9a901a
SHA187664c24c512d9af555db199346989bd960f0caa
SHA2565db7f21ff66a5568e1e48c7c73785a2b5662ddfd86ef8776ee77636e3ed73684
SHA512b5110fd04e9ed75f1d388ce523d98157dbcd33fa27dd8252d45fb69cd20b2bd5af932779ad25f076c0c2762f9243a59deff0377797bca259100047b5cdf9c76c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5288337130b0a722f0798e065594cfa93
SHA1714438fb38496c714692369fbce658cb03529a3e
SHA256feca9d3165394f7e3a0d484dee3a43ffb484be621290bb6f4b5904f98f4b62e9
SHA512813775c80cdb60331416715f816bb3c874bb6c2f6b5dea3edcc5817acd5b1b9111cd617ffd29f6082a6a984a4e400a94ea05faaa8bce313e934a657f91e3ee53
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bf2f1a55f60e8a12540b02045ecf5f4a
SHA132de5c2c289a080a5c988295a89615e119fb06f2
SHA2566fc3f7fe9f83cf63de47bd523df5425911df15d9fb12deaec756cf5ef3d0019a
SHA512f41892a90fc06728345679afb733b9b7656d2eee706d9b0f08dfdb69ccaf32453c6d5e87595d2bb45039b0bb8f7b01ee04615b2366e7677d6ab61819430abe97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5031224b3bab3ab483a25cf80668cf0b5
SHA1a0ce58f67e4eaf2d4c1a23725a579bc27c1d5f4a
SHA256b0df082a2aafe1f12895fe4acdef464fc692e5751d62cee33dba4385a9aa5171
SHA51207e72c3aad9e9a913ea02b5fc7759e032edad78d23277e8c4a294ee49daca136599a396ee8d09ba16ccf735ba0643742bb8d0e8097e616654da119e13c13b5b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b361539f9ee96dfa51b46bfe08acc09f
SHA1df9a33b4ef90ddbe56fb0f28f79874fc1996f986
SHA256f00644367639f86e77a29db5d6000ab8bc59370656187b0d387ec90308a3a37b
SHA5121875c97ca8a502c6a299885fc5e48bc5ab531c976d207bf7f78e0d3b8954b0a562221ca3cfe26fede8908c0140a4781516dc72e5e17c052caea1767982f9e47f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d948ca9cde19dc516befa68a15284fae
SHA1a40001508460f9594962650a756e23a876e46549
SHA256adde26b5bbd4f1183f7401a3ecd1951eb19ad6424afc04ebc6827ba5ccf0daf3
SHA5124a799911ac6748df512958db989b3971ef140861dc9ef76798c806d9d6c4ebe50ba6b325d1aedc739284c1f33f66cebe86a7dfe6eb02cb75f1e378c28e9a2997
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5accd4d2176274c649782b2c7a3901bd9
SHA1d9a22b3ae5b5021260e81f42484ea17597320334
SHA256831a789194d0419f3b6168313d08f226404cc68440821d4a6310b11e42db71f3
SHA5128fab81dcac3eaec79689fb3d66ce835ec1edaaecc453a6bf5797e4af240a89619221326e5b12984d7a270b1b2b7239f5a3158eb72102c170eeeb8e3f4571551b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5adf4b5ecb59a138b900150abcc75ed0e
SHA1d83103b44e535c098c2f8c9050932fb4da345cf6
SHA256b9dc2fa437be98c775793fc9b0097d54509a69b7e213e5416d012cb0ab1a2c8a
SHA512d1042245574785423b61a6f792c94fe5d77e5f6b86abf1f7a625cea5bb2ea6cc864258bbda5925c8a84a937564993c79f599becd463496d5123d8eedf61294e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e82640e729776019243d50403486f39d
SHA1aba2aee5b859822dec37bcf3c540e0310d35b6da
SHA2564606ebfc7136182e9b2563f9d4cba72376dcac757c11b52e14d9f44fbf3f12bd
SHA512a65fe98c71d5b452ff5274d0bcaa36856c6584b7211598eb0495e9733e246239844e220a2d4f44e619546ec6d79c8cd623d28d2aa018c5bc2fff450017a8fa29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f9d881834c120510f3fa29e3a49e74ed
SHA1d08b86e5c072d956d850ec9027226d16ba6b1136
SHA2564946efb96c440850c9cda7fe6be3dec9368493601838156d4eae5ae5a20cff68
SHA512f0fc5f099a08f00c4262791180a38a9a9225027eccefde99f970311b989d2c9a2bdc1dec46cf382f113fd37c712fbf392686dc9314fa4323a8e09920177b7528
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e305cb75a1c9a380e7fcb51e5b6fd3f2
SHA1e29d9326b6903e6125900ab240feacc30c186976
SHA2566f881872147e20851ab386a108971f31edf23f93b94c6892e65811bf945f9220
SHA512a2b4cb5e74b974ac2dd47b72907801417b919aae3656348432f6b6ad946406b300608a1b28cb74e9592c989b72c0acc85ab689f7a392a1ab9a148f44f0c38a32
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56f726b5e7046e062a37a15082821a081
SHA1d1454f3a03693c36383440c21207b740e76df0f6
SHA2565e4b1511609c6718cf25cae21137aadb398a80a6ce9af97ac6c67d8d85c4396c
SHA51276428b0c93a57de120ac42ee7086cfcbf3e299ca1be4169000e84027f30bbc5127fcb1cecd5fc6aca3c206efe34c211eef38198e2cfe7e58e018c997d342342d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5172b67d1029d109986b7b19ec3f8934c
SHA15a38c67dc5c6b6c3f79a5a23d7e85be66b8183c4
SHA256966e0e13e130cb8a0c5baf03fbca4d4152d96f9d094543cedecb15526b8001b5
SHA512b62db2be3398a5f98b0fd4d2510c8c98cb8dc8b4d22a3bbf676a41fa9f28d9a9409c3c955228d6a8b7a1a77a0cb4b3723da8721a6fd3441b8d7e69c988662d09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD564e5df9252f0526e86058d5483324ac5
SHA14073b5cbaf9edca2a3c49f151498e2c091abc248
SHA25611f88911a2890e89f300c76d371e6bad7c1fdebfa3fc0a3ba17fc5b342c49a3e
SHA5122a8fe93312b28010b206967d599a2c0c9ee84444a415f4ba6cd2b531751f23e5d4d0ed2af42f1f8864c75c0eb0bed405e06bdcbfbd7bdb4efff3955e887c877d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD559ab092876a5c498a65a1f4c10a8e74a
SHA15555eb8dcbb2da716248df81cc812162439d1273
SHA256bdd3afc5385065b35b86654bc338938e651f83a229eddb16bafc33d078be058a
SHA51236c81a95287914e37cbd6dece9f6c2b2cd9a0d5d8f6cbbcbe2ccdd8aaaaa7ea01c9619cf1d49f8157457232868243170bc618cd6e0643c90cba590994355ce8a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5da21698793ead2dbe51861f8d8d1e697
SHA12404e1053e612235096682e6d52f96d4960fe96c
SHA256cad59caa16e48f2b6a9d33c89efc35a543c6df9e305f3745c2131f5786375c37
SHA5125e3bc5b4562957902f1466c5171370e3294f63c532b916b1958fc4e7fdd831aafbf1729fe7d467f6fbf9405cb3c60062e34ae08e87e524ce59c6f747c13aee27
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51625242eece87f0cc41be5fb491647e1
SHA1330fc8979e45d75852fa2d4d61e511724bb8c781
SHA2560b94f4029359b8d49b1f3ecc05f0672e8179fbe963da7c916bc273e2830bd2b7
SHA512901513e71502e929c11e4a1e11399ca6ca755bbc7673c810fe6710feb9e9b4b14a3fa98ef72e5f5030ebbf49cef833d87322cbe425d52559cd66212903a8857f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5914b98f1231aaae6691310d1b1abdf9f
SHA1ba88a3785715ca83801e993ed16b71174fb85a0f
SHA2561260d2d190923e82b710fb460710065a2249e4411f659bc1e356994dcbc0db7f
SHA51279763adf3bcec917dc7ffcf02881f870747af1477a08dd9d7241956248c1da362e5034a7d042051a140d5ab5f4e3119739bf89fe6d5d7191ec77a39e5e68bdda
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd342e861d4b18bbfdc384b23d129fa4
SHA118c35045d9f0bb4145083a667f8afef7d89c72cc
SHA256e32ac9a99d32ae5dbee954bf2ad699ecd134061307a9862c4ca8d1d4300af03c
SHA51276ba7c09d672a00cd62ed568cf215ab77d4fa2759c44d4ff9c76fe79bb228742bf1a6f0d53b217de5b7e3de5be9a8126f1357fa93f8da3a9d28ec748c241a056
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59810bc377989871100bd56a038c40ad8
SHA1cf24123546a13ffc188f209d04d8a07d2563c1e0
SHA256d6f16312a5ed6d2e0cf453565a8ae1cdbcbba77dca458f743618bb4ee8648c63
SHA5125b435e1dbe5723a989623d3d84ba5f38da972e8b432a10bc24d2d8f8195c26d100c75bb931ce49fc796e2096d3e65936218eef0c9bd6cae410c89b8e273d3210
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD592b65201b0a5b564cb61dea6337567fe
SHA1e0de0d14546f574628ca2432db79234fa417739e
SHA2569bb01a5727272116506b38d37bf374bec9b74b9d2a403d86ccec9562de987180
SHA512b563b0d51a5f02a977fb7c510ab32b44c8a0e09fa709bd9dc5c742ef153b94188a67bb6b17b1196697875bca2dd89272dfb9e92fbc61c431289a241762b1d218
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c486fc2a99bb0b1b18d23a44224c1832
SHA11b156b88305d6deedfbcd870b1f71a88e31cc6ea
SHA256ae1233737aae030813b4c9bcb541d66bb9dbdc405515caff40091b089da79fc2
SHA5120cd6330f466cc665e5808b80816e821fec7fc8773fc92ca1ce3d948ffddf9bc8d54d17f90742e06a7e13f67f3f87c90467624486b102c482037a384bfbd8b96e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ca6c8302a06133121e871b3fa5525863
SHA1a116f64e9069fa7ffed3c5dda3408a72b23866c7
SHA2568728ba50d88b78390c13a48eea07624d94f6b15073cde72a72a7b9b5fc3c1393
SHA51255235ea5840b7d9d06bd10aa268df06204c6bc45f6d77b664a475bea6f5212649f2f404e059f8789802e47d803cd27d7a681e4d83d8b5aa7cd388ed6bf2ab6e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ba54d11fe47685ed21e2b0081d7f76d2
SHA17dd65f678b066fbc497bec3bc8ffaa1dcaa21df0
SHA25684bb4d3ff04e4de314ca88707a077a16704ef1e7a41e977a0f5dc46018313e38
SHA5121b9862456647f56213011e6247d8806e32aaadf15f36003765d8b6137916849cc5c2bef1eb458484f5169a9afca2a6653c53596b66b8015a55c12f264e5719a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c2ac4614b9aebee1be3bec39171354bb
SHA1c90c604eb0457db68e529d5d3f8219cd3febba38
SHA25694d9c134abe398ae79545e3c743367fa717359068c5d5fd76ed8a4eed09cf915
SHA512010d9e76b87e685885352a47f2c3bbbc33ed8dea455967973ebe75d253bcd06f1ef14242a2588eaa56e141574184188b3b2a0b1c4390da49017b9ff95ac62037
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54198a36e031bd192a99c6a00863aa382
SHA1cb1714651bc8ba891554278625ff2afc30573a6f
SHA256045ad0c0d278e44ce480fe729ee8de7dc6834c9f8fa5a2a561ebfbdc56c4c6fe
SHA512b9c4e75c70a26c5c1c6a93253ecfdd7d115056cbdf03b241bba8ec125176c9e4f8b1f263ecdde1e4991168eba9a74628bb3861b6c70ff5f813ffe22c89933060
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD575c4d12dacaa11ca544a8af4f14de1e5
SHA11ceb5d63036e170b58e69819178a4a02dbb13383
SHA2565bccd552fb5e0ac78e3332ec84ba2235016e24f64f34e81ac1a7e15b635df8c7
SHA512ce53f09ac0d4446d62636225eff5b53ac5df337e474e4fc6c90c292e1d94ccb3b18235cb9203c157596025b2c0a208635d8272e17f58dbf3e90afe274b299614
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55acaf5e8d1bd593235eb3f5b656afedb
SHA19a6a89079751e5d61c2684bc5509b045113e748e
SHA25663ddb2a9295a9cec0b4b8eaf63a13780ac3d5c4389f474a38ba4963c93139b63
SHA512f21f582a448d2d5541db91d2d0bd32caf0c168e1e15e29496d5e5da144f4531aaf613a7e77e813aa47d50a3fe18fe2fe0137cd3428b8e8dea31ff69aaf055418
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53ad4c67bfe7b84f08b8d54852be5e95b
SHA1cb294ea9c85b7dd4697203b81ff033119bd32345
SHA2560fd203566cb7f8748d487835874f7931876fa1798832ee309b9625cec5172b5d
SHA5125d60b77f9fd282f0a499baac766379934d485132bffc038079bf514f481979be2fb84c6ec738d549f53b9a0f9a3f666e3eea3cee337010aa09d51ad085090623
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD501857b725a7d392d3e832515b84c350c
SHA16111dbf424abf8278b6a4d876c8d84ea2dd2edfa
SHA256d472350a9e0ca3d30f0effea8bd290c5067422c3bbf64c03cd540a417b4352c0
SHA51212c0038ce9448975078a38b56653f603343aeccd6539ff53efd0f60953a4b5f7858f365192fec5514da8bd84cbe295fe1d7852bad84972cd8e56e4f63ceed810
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5487d6496b53064309703b58d56e65584
SHA17fbaf291d688478c7cd9d561d3cc0678d167301a
SHA256ef28837fc3b20051c447e934df4d91cd689cc4829df2a92fce4bfb8d07dde36d
SHA512cc2aea7b6d9212555d500278cef60f331a6bbe96ed41c682536e0d54c256924d252cadb0a0549bf52ffd6a4f84d4d0252617db8e3aa6af9ebe0ac8a693ebc81b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD51b5169d75532ab67c8cb3457d30248a8
SHA187ff5fe2367b44f2881519582c307066e62cf0f0
SHA256da80528457e57522f018d3764ef7f9e699cc907c6d60d504231db8edb3b50423
SHA512db8f2ec56a93f387e047e988416934216a1cc10a2f2a3519e3b069ea966554323f57b764aded03f80d18a6501a0446c636048a260ae05fe796a88c3190b7ee62
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\00001[1].gif
Filesize116B
MD588dd66fce0fc3f0cde1a542f9fd7e597
SHA1e02cf025379bfbf5218f9bf9d9c884258a35abdb
SHA2565aaa06aa0bab819b01c71ea806a54c9c00f01668de382c9e014e93c75863a460
SHA512700c05899ceb10a18ee9d7ddab96cf2c0bfb3666a4d5c734665d8899f135c94101f8625cd9c7fe1f31c7897ccc3be25acda0a251808f4520274b16bb63c520aa
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\00004[2].gif
Filesize129B
MD548bd3b2dcaa011c76307a50520417999
SHA163a83a8546c0fa1c94e9b6f3105fec218cd3192a
SHA2566b0434b3e961809b604490a668f5c6920a070ab765e4548921bad21b1bc5e360
SHA51225f061bce118dcf90aafd441035264b5e688d6d7e09fc6b1c5b508f30edb38bf10e4114c6bf16937ae5cee4a24f743aceca2ff51d530949503f9c691eb86cbd7
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\c2[1].htm
Filesize162B
MD54f8e702cc244ec5d4de32740c0ecbd97
SHA13adb1f02d5b6054de0046e367c1d687b6cdf7aff
SHA2569e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
SHA51221047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\pcad[1].htm
Filesize167B
MD5f5d40b7259645010f9a248858ad14178
SHA1b3051d17a6ec8c9e166bf09a62b48261ab86957b
SHA2567f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
SHA5121e82bc2d067f726670b3e6054d73e57868f6e7c50eb979696bf927daeef699f2d8f8de201e8252b86b0e9f86dc69e5037fc9fa08ef6c271b033f29d4f0f4c1aa
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\00000[1].gif
Filesize43B
MD507fff40b5dd495aca2ac4e1c3fbc60aa
SHA1e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
SHA256a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
SHA51249b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\00002[2].gif
Filesize132B
MD5ad5b4233d0a7259008c66fc473e839a5
SHA1d432d29401f04513b3a8a10c5d9131b8eeed0601
SHA256f1d48cd61d0f23131103ea78059d2a57003005565f0efc5d7bd3364f0909af33
SHA51284dba6ccaacb9c979fe162f3c92fe402f5654bdf97393ba31b0b96f6205990678449aae91d54308b18f8df869f7021f0b390d03d3237328e6e8053db5b53f4f4
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\00003[1].gif
Filesize133B
MD5cd2219b5f25ae63c0c501facfe00c48a
SHA13e683f75eca762ec33810ec9116950b869ab684b
SHA25645504ace30d95de7ef1688f9f66388a93e81f32a435b6ac916df058e39771e97
SHA51247715914da92fc63db20a603ea5a5d89821c47129e0c03cf1b29521ba70f4f4b64ea3513c1367f5fbdb9aea30a823ac696419838bc6ae8d637ea1217f0626248
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\pcad[2].js
Filesize8B
MD5a4d0e885917d92d6eb566c032e3d0b93
SHA161d373488003b9b73390200c7fb4fd9d2b3d55d8
SHA256006cb79851b09d3173317fe98c86ed792ab127e6dd753d5c0aa9cffb50bba1e5
SHA512daa57771a4b5663045f1b2c09906f749e3e2f0c2ebd943ec3dc609d27cedb9607ca02606556b2d64ab60389e28864a1ef6f95867cae477a5a9b8ac0820b54ac1
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b