Malware Analysis Report

2025-04-14 03:37

Sample ID 240612-s4qhgazgmg
Target a130ceec8ee8306ec8c65981329d9948_JaffaCakes118
SHA256 24f9737e88626a31317a6449d6b99e25053bac45cc9c37c47282be4eafe1d771
Tags
score
1/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
1/10

SHA256

24f9737e88626a31317a6449d6b99e25053bac45cc9c37c47282be4eafe1d771

Threat Level: No (potentially) malicious behavior was detected

The file a130ceec8ee8306ec8c65981329d9948_JaffaCakes118 was found to be: No (potentially) malicious behavior was detected.

Malicious Activity Summary


Modifies Internet Explorer settings

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-12 15:41

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-12 15:41

Reported

2024-06-12 15:43

Platform

win7-20240220-en

Max time kernel

126s

Max time network

140s

Command Line

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a130ceec8ee8306ec8c65981329d9948_JaffaCakes118.html

Signatures

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "28987" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2C43E911-28D2-11EF-8F92-565622222C98} = "0" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10251" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8593" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19231" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "28899" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "38741" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "20007" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424368730" C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10069" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "28899" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10157" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "28981" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "28899" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8389" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8593" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10069" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19231" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\iexplore.exe N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8501" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19919" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8389" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19919" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "28987" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10157" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10069" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\iexplore.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10151" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "38741" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "29081" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\iexplore.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Internet Explorer\iexplore.exe N/A

Processes

C:\Program Files\Internet Explorer\iexplore.exe

"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a130ceec8ee8306ec8c65981329d9948_JaffaCakes118.html

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2860 CREDAT:275457 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 www.konthaiusa.com udp
GB 216.58.204.74:80 fonts.googleapis.com tcp
GB 216.58.204.74:80 fonts.googleapis.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 142.250.200.14:80 www.youtube.com tcp
GB 142.250.200.14:80 www.youtube.com tcp
GB 163.70.151.35:80 www.facebook.com tcp
GB 163.70.151.35:80 www.facebook.com tcp
GB 142.250.200.14:80 www.youtube.com tcp
GB 142.250.200.14:80 www.youtube.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 142.250.200.14:80 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
GB 216.58.213.14:80 www.google-analytics.com tcp
GB 142.250.200.14:443 www.youtube.com tcp
US 8.8.8.8:53 static.xx.fbcdn.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
GB 163.70.151.21:443 scontent.xx.fbcdn.net tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.187.196:443 www.google.com tcp
GB 172.217.169.86:443 i.ytimg.com tcp
GB 172.217.169.86:443 i.ytimg.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 yt3.ggpht.com udp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 fe0.google.com udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 204.79.197.200:443 ieonline.microsoft.com tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp
GB 216.58.201.98:443 googleads.g.doubleclick.net tcp

Files

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 f00d87371fd5f35628c7e805234af581
SHA1 33cfc239d138352656eb90e284f95ee0f8bc87b2
SHA256 57757850e5e58e6cade5985a3500ffd5665b59ead64386510424d09d72c32788
SHA512 0bd07ee394da69f625d1a32a743ad47a5c6407ebd3c227db26ad8c7cb9b7276e8dad8533faacb1458665f539192aa57891921c11b834691d519118a1f365c1dd

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

MD5 660b6e28b38ebe7e521064e60113fffc
SHA1 f2c25e9f931876bf6834191ec5b409f47f869129
SHA256 3e203426c4aa1403e940966905320c612ce4006cc87e03eb64058eaf6d402433
SHA512 96868e652d5e0c25b4d0f0ada20d345115f0c6fda26d3cab724c0c1867386d2dcedc408c51f776b7e019ce2e22755017d99bf663cdd9fd0d88b26182c6434bcc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

MD5 ac89a852c2aaa3d389b2d2dd312ad367
SHA1 8f421dd6493c61dbda6b839e2debb7b50a20c930
SHA256 0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512 c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

MD5 8c9258087ac9c811bf168b4ce4470ec8
SHA1 e4333536e273e59a63ee6adf33397fd03da85d94
SHA256 f4a1e6af372165c3d257343c07f07050cc4d037b9f069a839ff1ae1179535f77
SHA512 1350fe923a3a36e0e0c16b204d3c1fca759d2552444d86c52a5da604c6e16f63919a4308e4f7259aa27dae474b8361122f85d2e8841c5e3a55564d7bfe6aa686

C:\Users\Admin\AppData\Local\Temp\Tar16E2.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_89FBEB9EEBFF8AABF1EBFA20B87AFE7E

MD5 5e6acf8e189e2601fce1ba9804402e6c
SHA1 80f75f1c41b6ada56fa8b043538229d5bf803a3a
SHA256 61fa8aa815a7801acbdf0663574a044759e4df6847a2b61e822f936341ca1419
SHA512 c8010e463d80c57a92168cb570c2783e84cd48a800be85c63e4a0fb02f13b3c30c26bf90d99b3b0623f14fbf0ce8a3683b8134c1c1015a1dafd2787876eb0e85

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_89FBEB9EEBFF8AABF1EBFA20B87AFE7E

MD5 60c593c796591612a55accb66d6448da
SHA1 816aeadcd13ae6c0829aee7c247b5dde70c7af95
SHA256 0a7ef74ec7fbf8eeee4907e58fe82af1928e84c8585a1684c3257db3ba58f40d
SHA512 fc0b1b8d6d428ecdeb395894b6eda967b75f1835a81fa436abb6fe8b3a0d89b5bbd45292bad2eb5531155b4da048ce579b57b59c94338bce58501d60c8f4b176

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\www-player[2].css

MD5 69958caec43c10f1d36a71ce83ac69e8
SHA1 d363274a0f568e4bfe98e978eae59441fc17a1fa
SHA256 d24493147c49a7b5d1a21c66aa87d11a0c976cd4e9392b89add880139aa2b1ff
SHA512 8a57bb5c5a1f7a91057493bad34133f7a2da0b7322ea84638a82e4df13045a584b11a0bc5beb90c018e9d5fecd323bc73cb35e2c322804ddd74ab0e4967bb84a

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\www-embed-player[1].js

MD5 cda0f0a481eb90a8955774d5e1df7cce
SHA1 3c8dc861e58cbc351db0e37fb4e7358293786442
SHA256 ce00a615b58d37b039c143d5591834274b19791cb2dead45b64da43faef521d8
SHA512 7491386b3f756d046236d2b29d0648c313a38a8f4e9871335d27601a3a2c09fc9f0785e24cea570fc83352a0da45906379b0293e8b58fc7333096f1e3d0de51d

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\base[1].js

MD5 4baef95dea52995a1695037852e4ea66
SHA1 8874e4883644a2e30e626a34becec8587577fc08
SHA256 b42cf83d76c3b2890a5beae078ac33ee3d054a31b9f47dc4f88cdc2086819d84
SHA512 4d26834698ae5e12b5327c903020c4ede8b6395d859fdb6c70a7d9f60c15958510c10a79908a96acda21966de6db8d2fa8f87a0265828e458abc65cff5162ef2

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA1 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256 b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA512 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\KFOmCnqEu92Fr1Mu4mxM[1].woff

MD5 bafb105baeb22d965c70fe52ba6b49d9
SHA1 934014cc9bbe5883542be756b3146c05844b254f
SHA256 1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA512 85a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff

MD5 de8b7431b74642e830af4d4f4b513ec9
SHA1 f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA256 3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA512 57d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 752741e800f7479403e5b1087b3a195d
SHA1 e4af7f6224b2db4a31688df496cd99b91ecb3dcb
SHA256 f0d832826c2debbb5e1106466147423ceb3f847ab68f8fcfa49a9a30a53f267e
SHA512 77d5a75527907e1827d8ac2ddfe46d52a13c2550f31f3c98fb4b0825501cc2a53e568629f44cca945003dacbf469052de9c5e8363013c744910528c1bec453b8

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 c2a37c0045f293a75969d27cad7a3197
SHA1 bced6072fd68c66605a269f97447e4b9aebc1e2f
SHA256 a1b2b4fdb38a457f104272b5ee9674d6f6e12f38e2a3dca7ddca9afe984142f0
SHA512 869199273fe602f81d79a03d58df09dcfec6e2318e9c9ffd9481a8cbfcebbbd113fea096b318b60724d7a6e77a6753836cd991a533ce92bab8dd21261a344a19

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\ad_status[1].js

MD5 1fa71744db23d0f8df9cce6719defcb7
SHA1 e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA512 17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 ffd2551e0337a90266c7af9f1a190ea5
SHA1 f580582f450ab04259cbec2564b30146b06db6c7
SHA256 c6041495665096395cc13acabfb976586596198ed8df8a574b683df00f45d747
SHA512 5eb9b1f48290e4019ba57a63edf5ddc181e0a97140dff08df0383ab198d6126b7da252c33169a199c5cc3db0182cdc32403a3f8b88dccc282d1a35d21acfdcdd

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\j85XBmD3K-auBXRuR4gFy-YbXrRwDWE2e6ZsFqyJZWU[1].js

MD5 c31f785afed7c3bd94e48286a26482ad
SHA1 f66156197cf74e58d6e0a327e8a1e6503fe63374
SHA256 8fce570660f72be6ae05746e478805cbe61b5eb4700d61367ba66c16ac896565
SHA512 8932b515493774d5587a01fe6d3fd08c404fdb694219898ee32a44ef00cd8773ceec0f46af1fb2834211a64a7eb698ed6d1ee7edbf70e80593997ce65113a6a7

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\embed[1].js

MD5 4fef9c1e099df4cfd80e218072e66566
SHA1 ae23566c37e802116d2a28d2cbca4989ca12949b
SHA256 af31d58709c4dfa933290cae1293deb05294f142746cf2e6aa74080860b68eea
SHA512 3c889874f7b8c380ec45d1168e3764b83c2ce7b95311b0f1b2e8b1d0977b254d46cb896e501ae0ba72959e7e9284b3b4bfa6448adbd989f9dc63707ce1fe29ba

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 b5af145981ab1fe48bcdbb25fc38e9ae
SHA1 81c46c80848112334e9c8603c973f50132615463
SHA256 3af3992455276d670ef699b5ff342e0f6c5d8a7b2c77e5c87edcd1fc31fae3b8
SHA512 1bd0cf1e72f9d8629f522ae7771e7dbf7736b52b6f88a9a49a4bb0b08077f0e86e3934e58090d52a070203a74135bff8a9bd4dc1d829169dd1998caec71d73cf

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 c12063ec647b195c91e825c179c2fb43
SHA1 87b408e7e7496e94e1731484a8cd1a508fcd4d8d
SHA256 89971d9115a70ab39bd8213971ccc5b248f2e4f208f1671d6de2cf3f4fd6f031
SHA512 0cd1979fced37d3a7f16007cc6b960f2babaa6786e76fd65fddeb6c87785c546bc628105bfe756594c6e022961ec16593854d835be7ee1562eefc9f47ec14c01

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 b8ba706ae92bffb2b2d66a10e0a4a266
SHA1 d5297a144c1a4e15ad10f0cd06654b446b624f96
SHA256 b4073f96797bd0375e33c77e8774a0f8355aea3b736cf6fa4a61730d28ecc6a8
SHA512 2e17586755e472235d02d29b8334dedb26c3be1e2c57cf77243c71717773dab66c1806d49155824b8dc9383592416277cbb06e4f5c4a37e053fb7426f854d055

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\remote[1].js

MD5 a06822cee12b4c9e516d0725f8af8858
SHA1 b7f87f66d1fab21fb1091e00e23d4af5442dc66c
SHA256 07f6df6c6575d5c49957093ed7c3986e7036f6763dda0982972b6120bfe60142
SHA512 d15bcf19ebe7d980473a2254a5c2eba9c5c74cc77d8f721fd9efcb56b14dce255fed649a81a40892bc65e7794170384d0dae5cca13927a9b2a75761ff671c25d

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 0f59026462fcd44277c4eff1199c9226
SHA1 f281d375f47d33df3afb9433f2c6277150543abb
SHA256 f389aaf197610c69d72e004d8048e5fe72f04d5a7537a086a954c4008ae4de4a
SHA512 7b74c7ea2a51ff1ac052c73e8cfcda29d14defd3ae3a09324a3107174ec3ff74553690e789bfeef2d1bdad0c669d67626c5af1bd36d649a43c33cd457796b99c

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 adf0ddf9864180b3efeda33167fbf435
SHA1 b01ed04e696eeedd81efb3d2c443c7d5aeb22161
SHA256 3f4df3a73f16f3a66fe8279ef03ecf25c197551d1472f847748eba712eb380d8
SHA512 6888d640fdcac16728105b4fa181f5b7e974ed062ca16e68b4eaf89d12ffa2045a1f4e83e624cea84dcf29d2f312b0e4d897fde8529c94aca6952e3eaccdd388

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 6776e3cf9f22165ad25ba32ebc981780
SHA1 43c70036111ea1a8036262ca78ed272a7e834209
SHA256 d9f0d9d3446d46bdad49acbf4a1f35e0da297ef42b39427826a7d9c1b01c6bcc
SHA512 f231273a89d9c8fd95bde148b7127945fb3038c3699cdbfb0bca58dc153d827057dffcf3e5d5d19f6d573b68bddfe99a248b84108a5341c070a3c0cbd0314a4a

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 caae105bc6915e6610fab231fc7c4e49
SHA1 15c7180cedf6cc5e46b179f1978c8b39ca097406
SHA256 4f12317e843870f34cbffb5c7c647266bdc566f4a74905c2a0f31586b2988e1d
SHA512 b55c875e0a7ed8cac80dbcb20deba835a385a3eeb36d21b28a65f5b2e3308b693d67953e5236274d2b280311067ff8a03e6ed5402cb4ab5ef3eb5a18e939cf6e

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 be9a9509015759c13e32a9ae799d6b09
SHA1 f63c9aea7b472094020ec368b9e7b8f71f3e0d49
SHA256 0cec5b1b51b88936e917cff19537e92bac32b8bc1246ce0a71231e4f7d7be338
SHA512 fdd78e4eb02642a7b82404d5cc7bf2d4d20948dcd23caa92c0c09d090a0ba136f9200eaaecb3734f24a46f60a5b58eb6d51af3b4b23e1f13d9c9017ac500d072

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 62d0025c6c8b2393ec438b904b04300e
SHA1 79e3ae7a38660e0428cb7965d8222f1fac55ee17
SHA256 83e2877bd8d3ba6fb256506431e221a3c35737c37607422952eee8cee6746d82
SHA512 7df2daf46df4f8216c8d0c2f71b9462cdcdbbd5dff3a99542c4d3efbbd886f498e957ddfba2965e4fc2d604e759e57ac2c00e5d3ee1acd4fbae854cc23461ec1

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 f35c194fa4ce533f21c175012554d45f
SHA1 20acdaceaa7bc80f360033a3203f67933ea51009
SHA256 178b7706612fd579e9158b2f29d4b5da097c27ad46c107a23817f6630dd462cc
SHA512 520de739f3d8ef716f175907b3bec006b4effa42b9391e4e4a506b2549bbe69b05ceca67aa2266fa8e411997ed4005568e70f623cdd211b4d59df75d7cdb2399

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 3413023a0ed7efa83e5dbd46a4485359
SHA1 e498914549970cc2788b6a3e2bc36822b8cd91f9
SHA256 b09ba563efb3c6dea4f9b5cb953e42daaaff4d3c8d97829417c3ee74e6ec65e5
SHA512 35408b21c8475de8414fd5414c408e57d938303c42baf317b22fab4c102a97227910b1fc9e999b9e1ae437c9e372c9aa1e4757ac0dcf36a31f2c19bb22f0de2c

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 2328774e33f052462c4c5355afcbd2e8
SHA1 4adf36b3cedae36f0f48211ff7062eac886554b9
SHA256 ee21411fed0693f09642761299fee832b313392afbf1f36ccc22b1547b240356
SHA512 e98a85ef419ae2743726995dc7c378eafe0cbae28397d7c0ed921fc1e0f52fada67234ef88c35cbc5752dd368c21e7e0b54df093c0de20b1097b53fcac678f57

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 892c7cfeb6c0535de85027afd1ade7d4
SHA1 72bc4c42bdfb5f8359bef2dfc914fbed77d785a9
SHA256 b5935c0d7335be108871434f7b6b28897141c90abc96288ceb0853997cc8e33a
SHA512 cdb0f40bb4f7fe0a1f525ace3b1a2c87ea321416923a2e49035c7bbe6124b28675059dc5952770d01051fa487c4a90d8758a68a2177d098f1f25a7e43f3c061d

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 bff47359334b8cd5f7bafe64559562aa
SHA1 23072c427efd407bbaa9abb12c1694cc82eeb2b2
SHA256 7af35d0e2ee2318b0604130287f5d8df57cda3fd5c5a26179caced28ebc4cb48
SHA512 70f7e924563728457e7dea3b1f3c272782860c51d8fc32fa7f9b3c7a27965ebe93a58735452c71a459a87b0f4fea440730110e9854a811c6322481fcbaaca271

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 dc1740d3771e46ee2ae28d7130dbb718
SHA1 962b914b465b8a9648debe98c0d453d7f4daaedc
SHA256 3aca4b429ba3a85644fa020dda1fddae3493a2ffad3bd149d080112f517ffe71
SHA512 5d2e12f45aeba7fdf6785128187e79165c91698a790596482215694dae36a95a9c3b11aa2de4dc031620f84e11315f55851e8bd63e71db00c08a44619badf8d8

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 6f7a3b86d08b9a82bdb0ac7d9690dcbc
SHA1 af52d4c30f069783ce2acedabb0d1d715061d830
SHA256 6ae373360a76dba9b1e8b52408929102a84b837dd502f6280bbe4f5d6c9ac9d0
SHA512 b9247a4cb59e0cf5107c72ac4bc20c3ff9bf59f844449f95a46589e58ec16fc629b5af03a167d41da024ff970a4cd62597b18d0c12608897ca70b98a7b5966b5

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 fc55ea2f29d2c794e03a6d11d489fe66
SHA1 44a48b661c0a1607e810cc39e5d102e71663d936
SHA256 abb4eafd94249bb622eca4898ada462e69e98370888916f9f3b3ae6e8003bcb4
SHA512 caf0ad197dd9d78024c018bb9b437640515462ad632dad1a07804475c759cca34ddf9cd645053a55902361f8e0cd5ab592c67934e65a6d645ecd0ab6de7e7f78

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 e067af505aede4a543fdc427b5855430
SHA1 5477ec7b4c006159e70033c1d4c3597e248ff09f
SHA256 b12a965f380aa50fda90ef273a2c065d4871982df5dd3d17c4fb804b97b80cc1
SHA512 f52cc1674cd5310b390719e3b6cdca9c8a2a2c0e497134157d620b742d84d0e95e2d603abdf00b20dada41982ead660a810ec04fbbd421b3e67f1d0f08487d31

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 b5ea91233d83c13d2775d35d64fe1e5f
SHA1 0a199a25c3f9b1b8eb5ac67cf3b88a995e373b6a
SHA256 f7193a68052ebddedfb68129683a40bbff4995abfaaf869be6d128ffbd69d05d
SHA512 c7cc8ddaf6359c74e1a70190f1017463eafafb20e19050960872f36a0693f13e174a977e1f6d9ef5b57ae637d90357507b9ef44cee49c0f24cea481784340a1b

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 0c774af377ca83f7595c06e82fcc2fa9
SHA1 f277371ad44aac955da2c0a64f11e4eb291c7938
SHA256 2d68ef60d90ad5894a79ddb68fbfa50fb017985a7cb15faf36214eacb1453500
SHA512 73361ebd1bcb15b76e2cd39709cc19deb6dbcfcda542292c05d3ed977bfec715245ba146e46c6084c497d03acfe471497ad16af7932d0f4765787f2e08f0d91f

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 fcff704ed0de924bd056c4ea5567e9b2
SHA1 b3f2503fdcb070f768550027c82a7aef948eee79
SHA256 681bc0938e28bca2454b4203b33a91982eb38f93485990d9610a9a91ab902662
SHA512 d412bf2549805439ce36c4120397f13566ae74df6a3952da96431b12db53c81f482d95e0c4741ff9f5d8ee9089a8ae687586659b936be2ee96b4f2e082cfd799

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 60e47745bc4c83b95817f481b8464e20
SHA1 bebd6fcec82230cc82c60077b74300dccf085921
SHA256 0c11b4a426871c9077d16dd05004d47ce5a7008be7f1a23d1faada692f120259
SHA512 0e556e77bbbb833d34e3ff112ed290cd00c45a07b4cffb0415bf00ce1593e713116ec7744f6932f268e7b5ce9c688c1babe97fa12e6469dce16aa620aeb9d0b6

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 6f3c663b05f57e72429297bb1c44728d
SHA1 497ac21dafd065fd9e1ece5003fdb36c020ddf82
SHA256 98bec2a6e8b506641af1406fbc8699c1e7646b3dc251764a0c361d5d5857e4a2
SHA512 51c0a464cd8a56b883cc361b8e5ffa114f3f5cae551c354ab57d1ec665bcc3829bca0741e2a3fa20d00cf649363a63c3e28008999d253ab5c0f31072fa75e791

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 e8580bde0b913819b153ec7e980cda65
SHA1 56f4996c017fb3629d7ce0a8ceffb7b3eacf79dc
SHA256 7b9c28a621461d33bfec86b8cda7b8d369784cd098c237519a285df8ad479fb2
SHA512 623ec8db94fa0c64618e50bb333b0412ad64ad2f3a0dd01a4481eb0c6cebae5dbf4fae33304a8402d18f12aad685b74f47801659d0b1e880b5b2199884dc2349

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 2b9390035eb2060fc05fcdbcc3926993
SHA1 ccb32f313ddfe7230b29f0cc708f195b7ba0b8ac
SHA256 8d51236ae072fd5ffe16c81ce2ea0a71c509ee20035763eaf702017509235615
SHA512 36fcf74d48608ac9938f51a78d1f2d457dcd039af7c07bb11aa7f132a827cb57ecbcf0bdbb7a614ed5afe4a7259fb824f572c415a72cd0e10dfcd742761fcd5f

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 2c38a023277469d613203739eee2ee8e
SHA1 ac14f833cb87af50e4c479123c94dd34662b4f43
SHA256 eaf48b12e61341e627933fc7e84d90005fb384fd48985a3943319b177aa7547d
SHA512 bdac7d7fdae441bce98fd5660c58772acd80773b7db08694347a0ec8248cec597773017e21b9f5ccd1b2864efb8d8fecaaf8fa52fa3f75dc143e33704878033e

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 5878668b0c7f9691452b0dadd7994133
SHA1 dc4f87e7c4ab86943521087c558debdeb15f2cbd
SHA256 6ed260799c1c8a250237b62f3aece0959ca8428c905f4106a567ad54216a6c3c
SHA512 a5eedcdf5d366ef4de22792b9d5bfe7b2cd8fe4664441e8796eae04160bb08bb5ffbb6dc712121ee34a9cc1fc2e35c42fb0807fe8709da0255b0638bab6de214

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 607af3896f6b51478463e34f4c5d9cb1
SHA1 4a72f603fef4f7ee429a64e06de3de688661afd8
SHA256 c8574e6394a9d79c8c8bb98f208a8658e30bc1f349d050e6e35922f06a5dc0d5
SHA512 1602f3a775fc216a9705fe3382b348b4e7d38f5a9d8efad2101fb99d27329b15afacd947f87290268fb1ee88f9210362a480cf237c9ec43a90af9f91db9ae33a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 f4dc6047a48fe1a119b7d8399b0ddd8c
SHA1 4427be4a0a86560e3c7d61be1e4bed509d5dafe4
SHA256 884c4f75f916cecf2a0dd7b168d44712a835821e9abab889d70fde07b1037211
SHA512 b2a4cdf98a84b3f13aa63f0acb7e694d5eefd8e2d8b26906e428981684c0ac7950fdc80b525dc358779dd932db56576932e3e405565ba4114a33d2f0e9200efa

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 15df908f0a8c78ab2f1cd39bd78f79c5
SHA1 32e595f9e81c104f5eb6b1db8bf0d6506b6ff64f
SHA256 c9c9754d78e168412431fc6ca8a7ac6183b3ad816dd61fadf78ce142ceaa8506
SHA512 97e3682f33b0353449a2b81f0228f94de696351aedad310fda71d70c136723fce4be2d7ca58303ab5c8638a485957e69142fd422bb32c37a58c718e87355395d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 21574dd2976d0b517cafc964094f8b10
SHA1 e833ad2ed1457a3f0ed7c7f7d394a8211f81370a
SHA256 e4080bf732866491f8a180b83e92cd68e8137dd045716ab840d43e179e532887
SHA512 4da5f9a775e88f673f08de3a9c72c8b32ce4723a6d2c43e1d9ab6dd05a6142548527b0ad0d2e1e0336939790c115deeb85aedbe923b6b2ed10a19a99af130e90

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 984f25be1c99bee793b45c0b90eefb6c
SHA1 6ec6d62a61e0165ab9368ab545d50c5d85302a8a
SHA256 9ab392363e1c1f931502e080f7c78d22af03dba36c6b45845eed6214f3787d1e
SHA512 a16985af2461c5dba659b02d9ccbf5f07e3d2fffed0ca5d0fb4e8a046e21716ab6c8305a933ab6632984c5144876f86f0a09328a27c9c5fad5fdd5b3f58dd06a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 5a649e0451f131ce60f09d9f282f5a30
SHA1 f89af1b94442fc526dd1cd5dfa8f7f4db8fda2d6
SHA256 48de27b8dfe3e2be21c7ffdca62af35cbf9fc11ab99ca810d4d425c88d026401
SHA512 8559ffa70dea29a87a3c4f35dd659ea4a066b82a6a1054903b28eecda2b26665cef397f665733a10ab6f882ecf8271dcafb727518da39879cb38f2eb9a2639de

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 30863bfed640d37f392c70c478f2f8d7
SHA1 cad07de68f9a517595ef9336d68aa6c8fca3f779
SHA256 ce428a0bf67838219b3dcc2da865a10fc3f0fe7ce82caa6b0626cf1b81f9edb5
SHA512 859b763f48bb52389bc34941dc68eca26589737ce87391de66dac66eb42db3a44441559967652416c8f4c31f0f864477b7cc622e2abaf2fcff41cfd0471bbbcf

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 f24f8855f087c0ff2192cd7c5791b814
SHA1 1db969e8ee57261558fdc2bdd4615d5ddcb152ba
SHA256 fce07a46a60c82e4b7a3ef8db18a665f8015c2d82a143ce280d667ff607bbac5
SHA512 12eaece1c41af54307817e1e6a1a1446e1410edeca7d02e5935ea9f0ccfdb075e520ef39f83db5f9e95c50f474f02c42aa3b87f5876dd3cd490e146b55d6e605

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 28f91f8ba69339b3d7f7a314d0448d8e
SHA1 0c04c220651125b785553309e8ad6fecc1435b6f
SHA256 de38555a80d6039fa6ba73c01b49d2afad9b46152e855bdd88c3f94d8bfb4471
SHA512 04529c2e46cb560b684e90bb75046dbb2ab9d7862bc93f3c24972360306e008fbca5f1be9d6d1a196f247101fa8f32215ec502d41c7d169f43bfe41a6e614418

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 1645c3fa5b2d38228d71f0d20ca31757
SHA1 70bc07c756bea02cbb1b523b7c38695324fff450
SHA256 ec542e7a399001e5392d3dbfd1a493975a3ab94c8b932f34ddc518820b951f34
SHA512 5d5a7a519da2946e08d3f8a237882d8f2234163c32024fd507ab150629809b1a5693a03a6cdc891ab1275c64463e06e8861a71e866bf29e7761cd1bd1fec5614

C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\QTF3A531\www.youtube[1].xml

MD5 b04dac5a54675dae4fe1c98cd09df3ae
SHA1 55f8f95875e88f461887dfdddf644a7465519db2
SHA256 6acd2cfbd07cb245b5bf7156494c7051df424367c9b0c15231408c72da1ab843
SHA512 4074ffa055239358b8c0fecf4aa0710038d7abf00dab9bee6a953c98c6eed70c7b9fe33ffe03fa5dd5e482cee73118da5acca38e204b0bfd5a62e0762bf83c92

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 0628b6cea5be0a36dc9e24a08d6d2847
SHA1 18149556b824c825527bfe66b96a7194cccc0f8f
SHA256 f99e691fb3e387f9d84429f8388c282cc72ab0ebfbb9b1344d209fc534760dd8
SHA512 bbcafaf791f2d2c1785814fb4a19d4f9f869c7711f1c77fde230e1c99dc8fdce49770296a3d46de421effe4bd9db88a38f226f9854657d37604640c04b4b61e4

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d68584535a8574c63e3455c6b33996a6
SHA1 72c128804dcc53b92087c8831a024a5a53fc378e
SHA256 499762077048aa0f60ba4b023e05563224ecdb82486a30299d70cd492a1cec12
SHA512 13626cbe835a2ebf11ad2961d945afdbfbe04ef455e76b40021b38786db1202032d26dd8b28b4b9449e5a17b5bd8f685f5587c303b4a19f8152835dc6f1ac735

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 a266bb7dcc38a562631361bbf61dd11b
SHA1 3b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA512 0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

MD5 8ec7b10ee2f6e2e7ba927a1e90a1a49d
SHA1 6fdb79329ed5b5cb7edafb208c12b02eea02d4f8
SHA256 c1741825a677d9579fce68bb83438737efcd86a192feb9ee26d1382868455335
SHA512 973dad02a8d2df0200e1590c874cd016dc865471fe8762e68de6261c27b03a7f474accf7a0adc7718c186b8693470b0b5f5dfe2cab66e66b8d3fdc8aea8d855a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 b9fabca1b3f1548d27b63d086f2fbed9
SHA1 250be5985e99704ec758463846430c2760b3b220
SHA256 ae3dca99670a5f7fe2eafbc2216bd1f05e01bafc4e21d93953b6b4f965806bdc
SHA512 b104ae840bd902f2c0d48a9cbc91c889f7f31f32611fe37cc749b83674c1fc815b6523065e73dbb2ada78087861902e0954fb1f44c8c99c540f2c42a4c6acf57

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 37ef74f50f02a2fee7daea3a451ba7f3
SHA1 60d6288b4751508d5b3a0ceae3b9e16997925505
SHA256 d60c1ec0268140016fb19e62d356085273c3495da368086a0cc47047185ec8c2
SHA512 b2ecd8e4908160b4a5d355d298660b2501c98a8142ebc19542b1881f0b99f8e688e344cd59bb32d857db16db2cd45e1c5bcd3e73d9a8f18dd2b05732aeef5524

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ef80fb34553392bdd4f58d387fe98b49
SHA1 e718809809ab5d0ab6dabe9b54b84fdca1dea527
SHA256 c2b81de1b5cfdc2ae14f84c639cb07359eb8bda782ad2c0aa3174e91992c69c8
SHA512 899a36254357b2484d2748c2b16edb262c6015c5ddf6461643cecad9f9d0952d1766d4a9eea5ad5243f9b9a9323ed8bb90a0a0ba22c18f58b2b97e96b934a551

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 4190b548d38020e594a08bb351829c86
SHA1 71fce8b2b94a12662ac2491756faab51784e9719
SHA256 a73968987db12516d899aaca6a06fdd922c5e5a199c326e4c1079853dc20a26d
SHA512 1b2b6b998182b3d4a747ea0225a0486f15789a5253b45af740a44e943071a9418f9100808c6df64b8b3f0e86c10c9310d20cfc1e7b42cf84948fa23a6bc29374

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1cc8eac7e262818c7c6e60a1f490c82d
SHA1 22144076193d229e8f29468e83bac3b9bc4bffbe
SHA256 83ec56b837735da401db5a558d664e698da7dbb0b3687cc5070936bf78ee750f
SHA512 a2c190a4b68e6a571b85d99ffba0b88b7d3237b091379b9f2591a08e82c1070593afe2655ac5a5d0bf1a854121b1aa498099d62711eb14de09ba05b59d454d41

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5 e4a68ac854ac5242460afd72481b2a44
SHA1 df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256 cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA512 5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

MD5 5160083a52efca6db799d0c12d8e6c35
SHA1 fe13fe37ce1baf91562ce97ea116410463cebef6
SHA256 e9e822afecb6447d1989e154f6f632a87fb23d98966e39ab95d09d8e5c27bf5a
SHA512 2c8afd9c979384e24d7f92276a3030735d0a62bb4c45583dc78e5e54f1f892e8359064168bcdfa5cc9b111246731a57065100b66d93e61f3705469acd58a4bdf

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 5e21a4b326dd3c387c0c6e7a0a9f2a36
SHA1 da890f697d2b049e174f8b5e19eebb57f9021a16
SHA256 13df27b19a65f0f8228b8bf6fd96c4f58a7f7ad58aa3745b37cdc6169195c4b3
SHA512 aab79795ec97a6baa5a5d75d05ffcc7c445867f903f4dc2de576ef4715489ccfd49cd0514a54908d667c459a84cdef07c6d32dc505c02fd13290934cc0cce2db

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 8b2b15b8277b41842060e41c644486c6
SHA1 57f0300185311cf509cadcafaa6b5fc3bdd4fe51
SHA256 b2e47983fb24d0886107484d110df20acaeceaeb64f13ba2e0cedc03d1830b5e
SHA512 5d6770b385334ecce6ba288d14bd97a997b86e2187c759e76c926fbc4bda3bdf8dae5a88c313547971e0833fce049834998880004fd2bda8021af19190548b89

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e1f9b69b7f77fa5543e47da0f210d2ac
SHA1 77310b72ca292a2cc01e861313eb82c4c5982e1b
SHA256 3eb1f2e3c8adac2e83154611d700f253b093a18a54dcf37996e8fa9312122098
SHA512 81954397bbe73f7e05bdb84ca99b000a4b9cc8c81c56c3b96138ae2a48ab0d0d1996b78f9c5a83b6eb09f7800d6ab699b1ee911f4ed964049547a79cc770c392

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-12 15:41

Reported

2024-06-12 15:43

Platform

win10v2004-20240226-en

Max time kernel

150s

Max time network

154s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a130ceec8ee8306ec8c65981329d9948_JaffaCakes118.html

Signatures

N/A

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a130ceec8ee8306ec8c65981329d9948_JaffaCakes118.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4676 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4680 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5788 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=3972 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=5716 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=5904 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --mojo-platform-channel-handle=5908 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --mojo-platform-channel-handle=6172 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=25 --mojo-platform-channel-handle=6300 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5524 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=6096 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2188 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 business.bing.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 8.8.8.8:53 nav-edge.smartscreen.microsoft.com udp
US 13.107.6.158:443 business.bing.com tcp
GB 13.87.96.169:443 nav-edge.smartscreen.microsoft.com tcp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 www.microsoft.com udp
BE 104.90.25.175:443 www.microsoft.com tcp
US 8.8.8.8:53 239.45.30.184.in-addr.arpa udp
US 8.8.8.8:53 169.96.87.13.in-addr.arpa udp
US 8.8.8.8:53 158.6.107.13.in-addr.arpa udp
US 8.8.8.8:53 www.microsoft.com udp
US 8.8.8.8:53 bzib.nelreports.net udp
US 8.8.8.8:53 bzib.nelreports.net udp
NL 96.16.53.162:443 bzib.nelreports.net tcp
US 8.8.8.8:53 175.25.90.104.in-addr.arpa udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
GB 216.58.204.74:80 fonts.googleapis.com tcp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 edgestatic.azureedge.net udp
US 8.8.8.8:53 162.53.16.96.in-addr.arpa udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 8.8.8.8:53 c.s-microsoft.com udp
US 13.107.253.64:443 edgestatic.azureedge.net tcp
US 13.107.253.64:443 edgestatic.azureedge.net tcp
US 13.107.253.64:443 edgestatic.azureedge.net tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
US 8.8.8.8:53 www.facebook.com udp
GB 142.250.200.14:443 www.youtube.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
GB 142.250.200.14:443 www.youtube.com tcp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 8.8.8.8:53 14.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 183.142.211.20.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
GB 142.250.200.14:443 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 static.xx.fbcdn.net udp
US 8.8.8.8:53 static.xx.fbcdn.net udp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 163.70.151.21:443 static.xx.fbcdn.net tcp
GB 142.250.200.14:443 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 i.ytimg.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 172.217.169.86:443 i.ytimg.com tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 14.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 86.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 99.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 scontent.xx.fbcdn.net udp
GB 163.70.151.21:443 scontent.xx.fbcdn.net udp
US 8.8.8.8:53 2.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 104.219.191.52.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 nw-umwatson.events.data.microsoft.com udp
US 13.89.179.12:443 nw-umwatson.events.data.microsoft.com tcp
US 8.8.8.8:53 12.179.89.13.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 216.58.201.98:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 216.58.204.74:443 jnn-pa.googleapis.com tcp
GB 216.58.204.74:443 jnn-pa.googleapis.com tcp
US 8.8.8.8:53 98.201.58.216.in-addr.arpa udp
GB 216.58.204.74:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
US 8.8.8.8:53 play.google.com udp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 yt3.ggpht.com udp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.180.1:443 yt3.ggpht.com tcp
GB 172.217.169.46:443 play.google.com udp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 www.konthaiusa.com udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 8.8.8.8:53 wcpstatic.microsoft.com udp
US 13.107.253.64:443 wcpstatic.microsoft.com tcp
US 13.107.253.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 13.107.253.64:443 wcpstatic.microsoft.com tcp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
BE 88.221.83.195:443 www.bing.com tcp
US 8.8.8.8:53 195.83.221.88.in-addr.arpa udp
GB 172.217.169.46:443 play.google.com tcp
GB 172.217.169.46:443 play.google.com udp
NL 52.142.223.178:80 tcp
US 8.8.8.8:53 160.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 14.227.111.52.in-addr.arpa udp
BE 88.221.83.235:443 www.bing.com tcp
US 8.8.8.8:53 235.83.221.88.in-addr.arpa udp
US 8.8.8.8:53 10.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.200.34:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp

Files

N/A