Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2024, 01:41

General

  • Target

    cdf8cfcc388bef3a66152d5bccba15b2_JaffaCakes118.html

  • Size

    175KB

  • MD5

    cdf8cfcc388bef3a66152d5bccba15b2

  • SHA1

    53f3dda04a69b69d2bd87e2cef3bf87e93db064c

  • SHA256

    33e17c678a97aeb6565e4a5b6356ecca696c3180f2debead7b13e36834bea722

  • SHA512

    90cbca786bcbebc602638d4abe8ffbf1f27eaf417ec23d01e059b3ef46ce46d479b342bede88892816b565a64868d1936f704b320a5ee568fcddd86a3ab99822

  • SSDEEP

    1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3lGNkFDYfBCJisk+aeTH+WK/Lf1/hmnVSV:SOoT3l/FaBCJium

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cdf8cfcc388bef3a66152d5bccba15b2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c544089562b35a8e8132cfc9026ac6f

    SHA1

    9b5da1fc97ab2c6da46e859cbf097b0e63916a01

    SHA256

    bc6a232373c9d4205cfcba226e0d2afdad1311413e600e918767450173d5a8b9

    SHA512

    94ba350ce8a656c96eb82f3d2d2cca72867f5f677061bf2d7b9f9cfb59828b108bc892ca3ac8d03287e83ce1a8af2125aa569e832f00248e5ad2cd4c04f32545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24de8dc6c1e0466383e41482aa6d895f

    SHA1

    3c1ad2af7504f7c340ce94299146db635cd48f7d

    SHA256

    e74f5fe0859e7b4629d382ea4c0b42ce0128a7a0368a42396cf3bfeca6296c33

    SHA512

    21b45fd85dc5a6ce676ce81ed6c8785753eacc102309adc3b883f37d7a6746186663f2d8c6209cfafc0b4cb25de5974246faa73562f391893b6fa0ffbf246ae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b821a26d578e70a4df28553366203c4d

    SHA1

    d437ae892ee4a876e4383c24691096b2be4a549a

    SHA256

    ae3c75f2916fd05afd53e03223ad82d056fca06e7d2a98118cd3513fa9140c29

    SHA512

    17ea7cc87382d2ff85c118ff07efdf22756e937e53b68c650c267f7fddcb0631ea35edd7d72d5c98752e4ea7e3bbae5d54306fd3b81d51784bc56c6b58f7fd94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f90118ba95df7bc31e216661b6e0844a

    SHA1

    7492e1969e1c99531cccad4cc22e096ff77f6a26

    SHA256

    ae44e48a978125320382b02239c2b34e71eea0b4256b68a5ab8402fdf1d236dc

    SHA512

    9f81132ad80613ae4eefb0c280b680dd5c13ce60a60bbb31f3ac776e5567ec5f4bc0a480ac97592f0554e9b009bdbb7482d08438ffa840fa4ca878ebc59cf60e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ccccf58833963730f777dba8b5281fc

    SHA1

    3ef44ddc46c5ed2e9eeb893ebd35075f1069cb60

    SHA256

    4bf87f0f8e3c949f96fdc2acf9eb1c579328791bad3bfe33888effe1370de4dd

    SHA512

    a17e3ac2280a9a1cc1f560a4932f235296360cc57b95a654b93c7a8f73e9ff19b936a0264ec816f73e76c2d47e6a7e7f93427192d5adb5947ccebacbfbdf631b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88c3c2ab4b1d828e71abab87fc4209a9

    SHA1

    eb7504d3473c9e19d08990534cab5fcc60114561

    SHA256

    34ade3521abc0c228ae9d9d27fdffca38c99d0f80da6aff18b53ce826e092045

    SHA512

    8e593c946f3ba1a226b36ba0718ea12306188a3cd720aa9ab1eb903a1b04e0eee97f4eda2bc4e5db1a88476fd3d0a7936a48a59e70391f8c1542d099a759245e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a84fe4a08294c1f8bfd123d299a3dd92

    SHA1

    af8cfe5f63c9f524c459eec86735b7a1463a51f3

    SHA256

    bf77b5fb3ba1af802f76cf707e8c29c5cc793a8230fa07c635a946bce4686986

    SHA512

    2c856e4dbdb85e947645b1c9cd53d9c0934f68ca5bc8888f1b8f2886a065782e448e7e804781103b696c98c856977ffbdc92281c69f07eef454dc556c224aedb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a49773cedb93ff874610df544bb7368e

    SHA1

    91fea079eecafd3256eb19b9a950e0ac9c5d0f9d

    SHA256

    c2623f854f2074d87cb1a87263274e676dc50de8ab32a047567074f757f46fce

    SHA512

    a387baa3d2dca4118dd05032428c896d3dd9c80f6e80692a2bb35fcf154bc629e130b0e40b32d5677bfa24a18b70ff341e4ca300016f58ba91f053b7cd8e417d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdb21169047536c247b83470ac95ea5b

    SHA1

    afd78106d901cd6ee61735e90ea58905420b49aa

    SHA256

    a2f5330789b312ddea52dc14d9fd00b8221d766844a1839ec984e9ef11b5c4c5

    SHA512

    a21a8ab789d26f424376e22d4dbecf7e60886b61e76f515a3307386500f60e26c445dea9e60467afec6f13529121b62bd364493c8f7f5df4ba0bfbf61ebf8f54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    367d56b4ce2bf2507e98b9157e6aaadd

    SHA1

    b48236362eecdc0dbd059053e56f0a718a94509d

    SHA256

    29c251705c7c6b288ec193ec3fc4f1e8bcd1f3d28fe5c3c527cfa1278e44a1f8

    SHA512

    71efff0703d6fc61fd8decad8ab75fe643b742ab5aeba73f6da61c60c402a3bba843d4aaebb1fbb3e7f708ea771faedc87a59c6a098f04a1e841355660ff65f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d68cdf7c098229fda97e76b448a7cb92

    SHA1

    0f754895350cfb5dcca009cd6698ac1f9e2627ba

    SHA256

    5ad4791a77ce668f3168cc82c39fd2e9f60c929725f0c61c9f2b9bda1b71bcf6

    SHA512

    5a7816c0446d05a53353a5c89e560b5a077d2a670840ebac84b2faa90d89d96660bf86acc9b652963eb84f618d7f4c7883138598c7eb7a92fb679eaf1696523c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6544230de95561d642e9d4f75a28874

    SHA1

    7aa78a43793f530064862e08d2dbef17bd98efc1

    SHA256

    18751e30de28e73b57315a0e27570c077eac684ad9eacc562bb020964851b6fe

    SHA512

    df91d5a6db270f21528cb57e786cd110f45bd2c047af074cdbdebe61fc0e02e9c3db8e49d602ac9c29fbbd78525ed202ad0a13bd74a5ba4b28d144664a2cf7c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dacb74cae6032f4e03c2890182caf800

    SHA1

    9d76f7bd258d81120101181ed867699155036076

    SHA256

    6a652de61ea9a92836278ee2c0226bd6c3b2dc33e9e80f9aa468ec78f1ac4077

    SHA512

    24c4541a6ea9cc7e3867aef0be9b8aebc12cb117dd761be097729cab69c67f68d5a2b838f21892fc5bf291be3839528236eeec3f3d3aede54a5678ad18b58a8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d7ecdeb7a6141cc8c223c48f0165e9e

    SHA1

    856c3529bfd4d64b5329cd6d6e3f0317dbb939bb

    SHA256

    016c37204cea706faedd3da432941f4a2251db0c93e205ee3c823a3a477b2efd

    SHA512

    a0bac95f09dee441669e1944fefb0fc7a68b2695f7ef31fb408519358618cb75a4bd5a584e0a7f1de20ddf01f454447ac021b8674111869509c38b0a6586480a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79757e54d79e2b25dca8580f62875175

    SHA1

    bb670c03135a16e1508083998932106c0221c7b1

    SHA256

    cb90160b895879a654600dcac357b0b57ae969b682e7acd00fed1747032cf8fe

    SHA512

    f1f1d74516d7f9308530d88c71f10601091b2a72bfcf62e8e0bd2cb2f710e5f0a412734359ed58af092d594a1b82ebece1a7924f758b97b0a3c7881842e619ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    963cb13626f6f92d3e6690f0fdb8431a

    SHA1

    36c226f31140d694773ef618daf0355b967ba0f1

    SHA256

    b301111bb97f0229562cbcb20c51b52ddba9ec7a6389cac54c1bd25ef1f5528a

    SHA512

    2ca53f9044781c35018c9c39e6c014f6df7ccccf640018fde2afa28383aacd2f5c25801d4608174aec14ee74f75f1de379d2128dd1162436e2eeb70da3bd003e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcb000962eed772b05d45cc1db95ff47

    SHA1

    b10578e88d203f497a368598aa06c4a65260b12c

    SHA256

    179ef69d8dc5f76721885244b7a92b86b4c7e465421b58544f74ce6d82ca0cea

    SHA512

    2a83a7a67e37e37f2d513561723cc8066ad06c54b87e9d2e0fbcaf4cdf52b2990523e3dd36c6a056ca1ead8dc0c28e1506d92bdb9345d1a8d24e80a30f025d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7bc6d3edd917fd8d83e7c05bf34650c

    SHA1

    4195b1fcc49276d345db3e2d4c7b4551d0ca00cb

    SHA256

    186c213a7135518eb11aa9b793ddad25ced714d5a9c472f180318f0867f125f3

    SHA512

    b23b34e1f64e8377f0e382848802af4eb1a302793d5470848d09644eeff8465c6a6bc2c5b0d81a466d711a2384b2886cfe3cbc422cb9b80622383542b2ec04b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d682a6770f12457f29d949c083b3f7b0

    SHA1

    90b6a78d393b2e07c0cf9aabb047e8ab1a819fbc

    SHA256

    b712e449d282c749e757f50cf1a62e4f8823d2744951fcd806e96e451dfad361

    SHA512

    9e340f72c7e5dad97bf5152f475ab8e91ef68af1d43b2d54620144ecb691d4524d65719df18c59450aebd523864e7dfc0b714fa17fc4a61ba6ca6279863d2675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9618a32cf8a3ebed0d3887231bee08b7

    SHA1

    1c45e8955385ee239dcdf1a65a74137712901356

    SHA256

    3c208845e17aa5dccd2425671d931ab7072fd7c829a66f15985de7f09717d134

    SHA512

    1f7c117b51132150ba9a223ddcf3e3783592ec058e615cd62f7e5ba556298e3760a576f30d4fbc9d1a3bcafa1276dc196a134491840c03de63bbf3361d2f83c3

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    578B

    MD5

    9ddf33bdbf55bf35b8fa6bf9a9bc9b1a

    SHA1

    a7c781d49d1537e44c5f918f9563d6897406f3cc

    SHA256

    7787e151ed3494fd580df7a57088f275cfa053cf30d0929b24327afe5dcf8fc7

    SHA512

    2cf598c19f6471a9a4f6d2a7be7e1618488bbafe0f0dce4f561b7dcecd9c68c78618d80070a9102075325988a453fa3d8b11c9d703972a4df4b5f4807133b7c0

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    990B

    MD5

    5f265af9e449416d380788c607069e98

    SHA1

    95748cc8e2a43ed14b2898f8e39c1ece8213ce60

    SHA256

    8f03784cf759608953f1352a368739a298e114c83bb25161bb5a43fdd3986aff

    SHA512

    849ff246bf5a0184611637a60c0c20fd4954e4e71a22e4da0b859b7f4c4cddc59db0e0b19f2b3d74cab7bc9d3d7336b0eace9e18cb06320928798e9bcc1a88c8

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    990B

    MD5

    c2291c96b0e9a7ae1c8b3a1c817a9345

    SHA1

    761d6814ab26ea166da8db23d35a9cd9911b5031

    SHA256

    43b40e297820feecca7e5337a3911456353a4b84058dff3a195cc5b7b0bcf08f

    SHA512

    5dee376f3553539a7af0c063911607bd910831b02279c1252b20460689932a9f04c940e34d374dbd844d1ced44f1ae8ce71141bd4a56b7609e1916b1eccd0f0f

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    990B

    MD5

    32e98ef7da43366f0fadcc01ae9a43e5

    SHA1

    de5d33d173af4c1f69bc602101740bedf7e8c82a

    SHA256

    cc2c4c7048d8716a54ba86606f03c04c217757334becfa13f928902e91f23a30

    SHA512

    4274e80c2af2c06bf3774a29bce650474735003b2f68d840b58ad6e5f3e1e491674448c3c15341646cc64ee39fb6834dff9c90b63e44384c543f23b8130c1949

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    990B

    MD5

    5208ba8ef4c2b6fdddce74b3cfe39659

    SHA1

    a9f262a980ccdfcff246433bed146cd8fbbfb261

    SHA256

    5d76a03c2c7e694bd8f68683ef0d058eb24b6342c2476f075c1db8872e97688b

    SHA512

    538b3a46ac9869d09a3b198162b614b5ad95e2fa63762c7c4bf4f923c0e3a55be4740b3b1eb37a0ed3669f98e681111c61e28844fa53d7fc44d9d43cf13c6935

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    229B

    MD5

    f8bb325379f5b125b384df475fe23f22

    SHA1

    93ea336251b67daab3679fdde577fc2e1bba34a5

    SHA256

    897ec48a40786facc85d037286f3f0909c326d39ff5c4b712894f4a413b880ea

    SHA512

    fe309e8027041b0e42cbc97e778be6308471df0921abd14260de2cd2ce68b1a84340f30165bd14629c74539b6f2bb88f53359db5a7bcba19c8e2bfc0132b4c4a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    990B

    MD5

    c6493ee50031207def4c2bd852b678f7

    SHA1

    ac6e23a26a68a3d92b6c2f60ae55b28b7f50c538

    SHA256

    d5d2a964034d5d832f4e2a7b4ab3a52df35fb2453ca9775d3101924e5ceb4b97

    SHA512

    9ed64e4974a7491e925d8e6501d73c1535732d87db47ee000a4a0a2fa0b24e605d2c8d03f6cca96625a387d3dcff488514c467a29b65e31686be4b625a8e0e21

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    229B

    MD5

    857ed7017e20fe53ac3094f75a7c786c

    SHA1

    21773fe8390a937700eda252a25e9e72f3770d43

    SHA256

    a8fd80db0728ba74187639e065cf05795b4272eb2cf9ea7edee1b09b4b47134a

    SHA512

    06dfabb49f8161ec3ab1787590d555c8c410afc9a722e41964c5994359004e69f07b0a8b800729fd4f7fb6d28001bcffaf5a49d5d1a25476414bc969a13ea11b

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    229B

    MD5

    31276f43302a3ac5a474d486a997ef25

    SHA1

    a2134e9f246a5fc07595c0ead0016b830871fd9b

    SHA256

    1ba8df844bee48e7691b3946934e569e915220db22cd8443d8e55570cd560627

    SHA512

    c40c3be1a062e5fdd41f9c0dfe01e07e1e8fea0c5f50e972c173621509d5b89492ddb69a1745afd6a5bf8ee77a5735aa3b9b984c756919da6c34fd47c0d7fdc9

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    229B

    MD5

    24149ae76deebc483598b5846aabafdb

    SHA1

    502fb4812ea27de743663b404863372d1d6ecf52

    SHA256

    9006cf4a6780593ca00acc373edfa87e2dcc00d0f358c2c564945d1ebb22ab5d

    SHA512

    b188d7f407a4431078fc4fbd0800fd2e6ed2be980e0b48ef3c0c1af710423b0f7d40c170fecc9ad20b95180a1b1f51161fce332e4c15909eb481561b50309c48

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    229B

    MD5

    e8459a4177c341fb8ed9bdd950e7420d

    SHA1

    3a6a7f93638dbdb6364a166c3a1ae0a240b73375

    SHA256

    ca6b4d0c4766058f674558c6cc5ec4f9ec1aa4fcfa02623a1097c03cf2104e7d

    SHA512

    e15ed0ebb9cf38f7d4b2bc65b437b387a944bb18e9fed55428ffa6c3dbce9e6fd18eda9d86b17bd2888708ff24510c38349199171e848d9c706f5f8ecd107884

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    12KB

    MD5

    ec2bc7771a22cfc2147cef029cb7342a

    SHA1

    3bee792c0979840f6bbc20b207361a46da149e48

    SHA256

    78ba099f81f7d4b62bd76d044cb8ae92dcbbdef81f4393df8ed76e377fdcbb7c

    SHA512

    7cf9d6fe19ef2ff3deb1cf361e9689d751207658c1662ed08db8680e1b8803f44bc86ed4d9f4cdb709ba429f8c496dcc532295818d5d71c20f934d2e7f1aad42

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    402B

    MD5

    942b9b108458288caf84dc1495c83d30

    SHA1

    55b8d04e8d7c76d10b2615aaa439408424b8768e

    SHA256

    b8243bbffc37a2cfcee25fd6de89c9488b017021dd546b32e6f1999f3fd3ca46

    SHA512

    cb1c9beec787dae017df9b669b10244159909ce665ee84c208b55b64a069b45dccd38d151aca939fcf21ace6c5b522c399272fe9621b8da0d02e0fbdd8b0559d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    25KB

    MD5

    90abb497c70597be225896d7e591ea6d

    SHA1

    a2d291d09298b467456f52f4a0a8a6330434b8f0

    SHA256

    72091d963c791f198aadc2e5e28cf40b6cfff0918adf48baec7700b733c485a2

    SHA512

    ad9ce07c48a9b5378b4f74ab513a322336f2886f80fb6749f498f0546f57cb30e3c5cef66be7177622a9b6f533955ddd21dd77e825ec54c15705d0c20ddf4048

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\2CJDY686\www.youtube[1].xml

    Filesize

    29KB

    MD5

    9b5a9bb581bb1f3f0c2e2adcea00bcf5

    SHA1

    c6947e7991fd4520c605860b4e3fa4878bd2aef9

    SHA256

    2d80e9ed7d19701178ff908c1b489a949022ed95c7c97bfa79f3f465cea8b0be

    SHA512

    cda30ef44f550e02409719e7e91aaa3d07a97f3c70149e6805d0b4426cc4515ad878ee18fe94d99d48d2251429304c8629408d62381b834585f399c7a25b9a66

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\remote[1].js

    Filesize

    118KB

    MD5

    7b2eb4c7a3d269ecfaa324bc87082bce

    SHA1

    0bfadc7dcbbe79842c7406a2dae482ae297e3d53

    SHA256

    bcc0085f28c0b771cbb8ea181f1a36269596bace4170eb55394d6ac32ac5631f

    SHA512

    7eff9fff6a1abe207844fb0be1cf25a48e463b9cd007e1a73eefa5609a8faca8e16dec9ea400ca563b7db50e96eb09459e13d30634b59e27857b4a9ff08c0b4a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VOGNAB2O\KFOmCnqEu92Fr1Mu4mxM[1].woff

    Filesize

    19KB

    MD5

    bafb105baeb22d965c70fe52ba6b49d9

    SHA1

    934014cc9bbe5883542be756b3146c05844b254f

    SHA256

    1570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed

    SHA512

    85a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\6G8W4755DcKllowajy4Hir2nUkhKuKJIeeFduDotaQ8[1].js

    Filesize

    54KB

    MD5

    3b50d7fec8234a29bd69c2165878b5a2

    SHA1

    ffceb50a05c99143ee63b534d85fb77a5eb9b807

    SHA256

    e86f16e3be790dc2a5968c1a8f2e078abda752484ab8a24879e15db83a2d690f

    SHA512

    29b5ddc41d04fd2d4d1e0eabc49868b5533f67ebe2c74f4c0bb42f96ba22900b273755b8138a86e8b2905dfef77e99ef1f45f1dd614fde5f048e707f9f6af4b9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\ad_status[1].js

    Filesize

    29B

    MD5

    1fa71744db23d0f8df9cce6719defcb7

    SHA1

    e4be9b7136697942a036f97cf26ebaf703ad2067

    SHA256

    eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9

    SHA512

    17fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\base[1].js

    Filesize

    2.3MB

    MD5

    566e055089daeede8ca5bf4abca1e215

    SHA1

    24bc691fa16c6c91dcc8027b38bedf0f7ed76c40

    SHA256

    a03f98bb7203114e888a61a8f3a85f3ca7e76c426a18ac5350806fbfd6414364

    SHA512

    6c6ba9c2227e7d4edcac4ade95f2cd39d32cbcda4a062765acbf57a70dec7179fe9929dc2e86909b589a23ff300c74bad2161cbb75e424a96dc95710e6a0aa5a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\embed[1].js

    Filesize

    66KB

    MD5

    c9d372ee5a18bf13e7044cccc423c04d

    SHA1

    5602305070994f39320e6bec14a29007b1f199ab

    SHA256

    d29abbaa974fe8e54a264aaf59d26e0ca5996019a5a9ca8a16d845d7d839dba9

    SHA512

    6d2a41ae45585d0db6e39e669bec35a2222845dcfc5406a3cb57d0e705f92fcefdaf01935eea2dc5e8935d944599a2fcb2a152b7b5a78558e8650486b0bfa641

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\www-embed-player[1].js

    Filesize

    328KB

    MD5

    49d7c04519fa784bc16129e83f0bcf18

    SHA1

    5f108a8f1326ccdca660fbec28e1284fa47e8914

    SHA256

    0852366b4598bf10a346a2a84b70ec4bb62b9c17eb09fdc0045027eb3741f747

    SHA512

    8f258967e79592295563adc0cca564485d6283ee91ad8d0ba864777d88da61aeb59a397c18df32eddb0143972c9bc03858321e57c516d852323e4e0016bd451a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\www-player[1].css

    Filesize

    376KB

    MD5

    d58aaf00126d8ffa2bfccd3a5590f108

    SHA1

    41bd8d50cff07e63e7fa711fa93879d4491d9456

    SHA256

    83c68d5a6ff88a64557ba476bd210484038e3ece1561ac724cc73e85554a0880

    SHA512

    bceabbf3d6eb32b3574bddfbe7ab559a0d9805a01360651637dcecf857a92606840092f845ae4e8e278807e566f5b28cd1aa3ba8444d90ea06470d10ef1825eb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z7V06J7Q\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff

    Filesize

    19KB

    MD5

    de8b7431b74642e830af4d4f4b513ec9

    SHA1

    f549f1fe8a0b86ef3fbdcb8d508440aff84c385c

    SHA256

    3bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a

    SHA512

    57d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac

  • C:\Users\Admin\AppData\Local\Temp\CabDF98.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarDFD9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b