Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
20/09/2024, 21:57
Static task
static1
Behavioral task
behavioral1
Sample
ee803ddca4c0f8d9f706556b4d592361_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ee803ddca4c0f8d9f706556b4d592361_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
ee803ddca4c0f8d9f706556b4d592361_JaffaCakes118.html
-
Size
175KB
-
MD5
ee803ddca4c0f8d9f706556b4d592361
-
SHA1
9c729c0c738d88f0f7eef464e6d779282373a352
-
SHA256
ab78629a477de8da7d00dbff6ab54c3f4790cda51fdaedf5ac9d8c692453ca4b
-
SHA512
6e5fc1b0963c2418c05242a6ecb754459e6ab28c5463658d6a9d761a1c054a8df9d405e6ff7bab9c7ce70e2e13f0ce4973e8d7156d443eb6df896004831ddf30
-
SSDEEP
1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3wGNkFoYfBCJisd+aeTH+WK/Lf1/hmnVSV:SOoT3w/FNBCJitm
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3817" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9780" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "200" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "200" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007b88b8645d6de74ab21efaf0de98379b000000000200000000001066000000010000200000008f002f33515543c2b192d48988d74365fc96be6ef232a7d616aad03141fd8e6a000000000e80000000020000200000004e6886b28ea79f4cad88d0dd9ffcb681889678d9de6827f1f765b889fc612251200000001623bb290d7217e2137a57a802c0b5f328dd22a2fd8f710d82b8dd9fdbd6542640000000093dffeb3ecef33c233d68b5a25ee53f83d9012f2d32e8b27c6b097cad02f70fda71d985b05982c495fe28d7920c72d2f5cb915428cd4b4d41f0d36b6df4ef29 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{49A597C1-779B-11EF-AF16-EA7747D117E6} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "288" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9747" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9780" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433031301" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "200" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9862" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8287" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9862" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17682" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3817" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8287" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9862" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "17682" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3817" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2752 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2752 iexplore.exe 2752 iexplore.exe 3012 IEXPLORE.EXE 3012 IEXPLORE.EXE 3012 IEXPLORE.EXE 3012 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2752 wrote to memory of 3012 2752 iexplore.exe 30 PID 2752 wrote to memory of 3012 2752 iexplore.exe 30 PID 2752 wrote to memory of 3012 2752 iexplore.exe 30 PID 2752 wrote to memory of 3012 2752 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ee803ddca4c0f8d9f706556b4d592361_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2752 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2752 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3012
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54af07d6b669981736755d3f6e57cae9b
SHA1f4f0b265e3ec99be712c7670602ebf727d6451c4
SHA2565d2047fa4cc7de1827d37b699cbe055dcaac8c1d58ed41cf9f99efec4b8fdf0d
SHA512efdd38f43a1ead7119d11f342774f5b58128b44e969613a26d3a761f64ffe429456f7b5af5d6f75c62f92a9540f893dc9da995c50a05ca33de56f8d17e76619f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55aa2ea9bd55ddac20e70d192fcffe83f
SHA1013fb4592a80d9c31aed21bd20e7a9d5b31374ab
SHA256dddf1e53af28cd02694dc382e38eba013172189ee55d74fb51cb65f294555ea4
SHA512a5fa8a5aeeadcd79c7ee7d68e2148329b0ecbd9188cdf8e1e9b80b4924e6b6fdb13b80b0de12d65dd2c85968fe9fa567a639b341530ff0f87adf9613877eb381
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54304b49c6f786291ddd1525e6aaf81ff
SHA1b810b5026f4c0c97b1f6d0a38781d1f484b68ae1
SHA25685b72e36cea45f1d3ea1b934765396569bf7078a7ce93a27b66accf73601ced7
SHA512dc94bc9117dfd4cf842cb485dc1cbca7bd41fb4a5b23b4716040b080793b9445e1b2c14db3e403750247207f98e4d5fc4b83d4727e37423a21328ac8b41b7c93
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560c1b2717c7b1f24ab02b9bdb0eb9013
SHA188cb57ff1274f262c9c7e978dfbdaa5949367136
SHA25653e43a387ea8dfd6070ad1473370faa796188190026864f1538f0142a07029b0
SHA51239f04340b049846d5295e2ca9fcedee58fe1ae99e25acbe2104fec75b27555867061f7d6ad0f5b67dcf9c21fb5be8c02ddb5eca846f72e560a87ede3889777ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD543c50f5f6d871fd8a910b65bde82d01f
SHA1a1b70c32f4976bcfa055fdb51b028365be8ea56b
SHA256d5e9b2d49836a5e6ff202eb13b8b2b86e8f652277bdffd8ce45eb3819139e661
SHA51217acb1b5c004a8580a0545ba091ad4bb7bb1b55becea0cb7c8120068f1138d0f4a5e2a449e14cac74bba6ac764e8a1337da1af4dbebad9ccdfdc8b71e6761d2d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53e16dc70194691052e1404007f249649
SHA190d04d63c4c21d29e38a9f2537fe1f36d877d3d8
SHA256fb703dff0d26548a4628bd356487bd85a383ec8b94faaf8a2f5e6b4eba6ed5b5
SHA512e6e094bfc7e6960f5b7e272ae1065bce82c7424bd4f36a459a964af5dbf150bf384f4facdd00826a0dccf46ada161b5c831dcc2cc5bce07f32f921c27e663079
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD575c76e697ffa2c2835091c49b66e89b7
SHA137548f1d81c7e681eb9adace4250a68b944a87b8
SHA256ef817f86095c4d310d9e9b8c02c97b4ac16a799d274b33f35cbbdd6879af3121
SHA5126b3471350d0e8a34374d95b48bbe8bce5ad41f6814712df1cae22431cc8e0a33707667892b93aee7e82785406cc516a8afadd3d1e9ae8d10e1819ca631066022
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52a6ef545fa3c8a27d92cf9322a01dfd4
SHA1366cc3583e5fd0d34145274f02346fc736abd1c8
SHA256ed1fdd0906381f0a06a34ba9e493f68c645f98418eafa50c010fdc1f743df3d6
SHA512aaa73277f9ce601b5b9ca849730db1557776b43852acd89325858b3753c57c33c5e333603493c1055da7e5e5058edcf030f926ceee9c04ea4be9dadbf8abd6ea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD546f905610f21303b5ef0f4747ecaa1bd
SHA138d17a6571bec2651d86168977761ac69ab276b3
SHA256ca69cc38cf30e679edcb0993f62e6e80b7a64f255afb2b4fbde9f455c95f9621
SHA5121ae81f10289305f5c00e26c382010bcc99a7548ee2874db1e98be49a7fc04f17ea83fb54c5046ae0e70b63862e48a4df70b710f5fd987604aeae849d6e0f06c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f67fb1d1334b677cd0f312bdb76824e0
SHA14073f9db3cf6a57a27f65562b58ab83c0450fa26
SHA256a02f9e4c9ae08d86ea235b3cf4f56bf9d9c8780840dfbbea9b5570d03c8f6718
SHA512cf24cd68f0e7a312fa80d247238a2391428cc399d458dbe3d9aab497d7d91b021c05380f4a068c058888c8d8da6c0ebe6f04a5a406226d0244a53e04274e1c53
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52fd6cb1d27bbb36f3be555366e0f9918
SHA113c848982b55d4df0d2559063d432b22de84b63b
SHA2563dc84ca920aea06e19ddce7510516b71c573741ad0ff4286ea0191e59d732c0c
SHA512f97f426cd5e839273710eb366d898b819c568279866e16bcc2db90e0b11229dc15b01cc460712ebe82d9a62938f832b959db4dc88fb35c532c1e32acc22aa42c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b4466f7b1c1b9182f5cf9af63f132c1b
SHA1ac43613282b350099f9899529e54953b1c83b5e0
SHA256239cf3b2a01f3a0ee16985e5ddd5c77851c88f518df41fe51ad54c2f281a59d1
SHA51216af6f10b7e0f8b9df7ebedeab5be9c8acf96aa2b8fa0e2849a7a088d00e8da6fc81e99654d89cdda214452d10c7c5c909c07bbed474a5ec2301da6a68581469
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54de4126a53efb52250b533ecf920b0d9
SHA1c4299a3ad11c5aff056a4a448faceb9c92fdb7bb
SHA256db2fc5a0e0aa47299250eff1299591b13b01a330f6764dce34efd4a6b8b26c04
SHA5127e0ad42623dc75c3701f7715ca1208d1f69755433be84d7be4dfd7a09a2c1ea25f214d0fb798f4f2217d433b422aba8f654433b37f4e9918c53e46321369dbea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52311f11ed51093983581703a3dad3f31
SHA1c8f4a960b75621959a3719a7576e073fcedd3fc4
SHA2566379f9e293155378a773bd6e4309a6e138be3f5ae45d97c74150616be2243094
SHA5129e5873e15e3f80ad05841b5bad3c08b5d3148b357f0adf658f4ffd9f011850458ed1b9e596ed0ffe2a7dc9a6a93a0328fa9079f1cb3f592ed9b2371fab3a4777
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5059b42897345251c525e2d9970a0bb74
SHA15f865c32d0bca78ab7d18f34d89d5e7fe2e805b1
SHA2567ae48bbb6f7204840076db416290ccb6ab3f55d8c5a0a04d067315d60409a553
SHA5127b0af4016243616a2d2ceb87f717c28ab27a21a6755789ffbb5b915584011ec505172837e538ef00479ff7ba89fbe4a3f505cbaa1dae9fdcb0a07863f6751c7b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5edd57574062b1108cd6a9c336aa80ce3
SHA142ebdf5dfd5dd9521d98efc8b82d747a8473b406
SHA256409487e946b21667ff6bf69d90ba01c11a5290220efb54cc0012da8e5492adf3
SHA512aef034a63aa1685f564cf2b80582c419efddfc3da6278c897d38ee00731ee50c7c13c53bc27f46b9481f10f37c4215bb16cb6bc82a73a4e5adc6fd81a6178c25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD515802e3e18a63f590235849c46d9ca81
SHA1857b1589c812fa2429b67c005348e5cc51446fab
SHA2569f2bd93ca1cd48ffd77d3caac01ff8bcaa38327fad0e4a25941d02459098629b
SHA51278aced5779020145752c39862d4f75454b5ec6db1809f6169dc80187671e2a7007eebb3547a43a11cb7d337c7845a3ff3e78b5e40e2e6596d83263c67114ea75
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528d4447d606a82d95ccd22387fc5d14f
SHA1491bbc11758f4fade7ae98d89fcc3ecf550758d6
SHA256c7a6454a8a635c3deba64d4f53e40fad5dc118b228b168b0271aed653cbcc78e
SHA5124ada830722b02777c27a93f0eca5350f7139b82d84e6ab824818baf9ee2f2bf597623e49b770ee559d4bac2d2f309a69a93de02a048ec53a9ee652a349cad0c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD526fe5bc792a9b83f061e2c7526c79999
SHA16b3d35b71e04e6b5719e84962fb2e9c9d73df60b
SHA2565ad8a09862fc1ae336dca53317cc6fc75c6a03307d0e78990ab0c10b38e4c98d
SHA51202b752e6a950be74d1d2813881e3f43ba18aef3a4415e05d595c0eb35fa4046d3df793cae587732cfc317c2b9a98c51e712b331b72ce153182d95253f228f5c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cf16637046e8d81762b94fe9303fac76
SHA19e0b9af2f1d571b12c533f990da22badec4deea2
SHA2564a6c468520c6ff47bdc7628fe4f9deece22b1e9c2c4bd6752e43ad186f286d1c
SHA512099d813d985feaf739b37081d00df5f67f644802519cabab680972c67f3d5b983d598a4f235b3f52d67519603fedd164c9b35dc5589e066307b487412bd31a9a
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
15KB
MD54b87fc56708f69b5097fd836f5f6c30e
SHA16816a3e1f7d80950e777610c30909ab2a753517d
SHA2562011dea2e3a21e9f19917e367153b306bd1be371382dd49e2fc822e98633424c
SHA5121273b63869261a83034deb7ce2b411aa16bfbcc8a95571b7a36dcc72d3740a9f4752a6e1b89a2c6570882907cb50cc318e24c4f82ac5361032f2a13e762d9dca
-
Filesize
400B
MD5b7c71be5af676ac60b90f5cb95235f20
SHA13c3add37985f9beb183e030f0223d7e8dfbc7223
SHA256163fb9cac10be97992c514c9e9cce23c5751a345f23a4c64ad7ac43c8a238889
SHA51289cb5a51fc4e1864be6110dca8ec4418bd0c4fca28c8d29b073c56fd63505e7425a4d36f143a9ade773b0181473d08621462c637dfb8ef89337a9779c0781338
-
Filesize
228B
MD53ebdb672a40cec08652599aa3bf0a590
SHA1fa2f78741053371a4d8577d5bf803439ce785688
SHA256440dc7a1de674ae73d080d20bdeab27d69b411ed9dfff571ade47cdec14d08ca
SHA512aa8990c94545185409f1fa33b9e036b39745a11f0fb98c70bfc0106c40e9e9e539dff4848ab7ae33cdc23ef3ae9f6892201a784accad30c7a1e0059270ad6fe1
-
Filesize
27KB
MD58249adc028fac101015992a723bcaa87
SHA11062c7a46f5a65acb4ca3e366bc850e967abfede
SHA25612cde91017315f5d7a77718c0fc2806f509fe084bafc57030a9a5c8d45dcf87b
SHA5125ce52b136f607aa65b69252d81d4f56db9a82a0f9f614a6d24842a913d52a6387b851d35660fa2d0571e6060ee292c1fed71c2540d69661aa2251285afb17065
-
Filesize
12KB
MD5a31e7221f982d022dbb7a9fede425630
SHA19a3da4d71daabfc94975354de0a264f959d95375
SHA25641d5a426b24014758a3bfbdd1fff5a564d610482ee8c69b84627789e3f1e14b8
SHA512afe154c00282115efed049206a6a73742943d241a8f741ba983b77920e7537fad8eb6a2d02aca945bc7dc9672438ad76d1821be8c0c20bbc79d7546e97cbe807
-
Filesize
575B
MD563e7fa71af0c363bdbd417a280e43122
SHA15184da54641ac36d31f8b070fefcfb6857c7b4de
SHA2562a66d3168a7594b9615e8cd53e618f63c529f316d0bb0089b92ac26f7012ddf4
SHA512e9679414645250b086ebd047a264e0f3f4e1688d4e77b6c1b854c4f83d44f68f4205c2d0a60f1f9061dbfa05bc4ba53487296a5e94502a6aeb8a1c580f4265b5
-
Filesize
575B
MD5c11a0981aee94af5980c0e351193a88d
SHA197d4da9d3adfc3a348add2e6b5d2ddf884c65444
SHA256e153a6cffbebce4ce42c01d77f2914bbe49b056b5c0f1fb9c8c62380a9a05059
SHA512dc681dc399af43150378dddb93c082ef9079f69e6dcea2a4163fbee8ea4c23d4acf0df6b3abeda197a32e9ccfa4d8376399c97656aac12205c9825e730c2ea0f
-
Filesize
12KB
MD58e98bda06b8a7670b884ce25df663e07
SHA118acdb480fd9a281ee415b1ac9fa07f60107c05f
SHA256a5c85b38fe238df9991830dffc19408f5d227e2affc92743178a97f0fbf885bd
SHA512557c92766c5f55f655ed932677265f8d5e93a7bdc18bcec87ff06e5fa23bcda99c266e730147175ab85a090791097a2854946969cab875173e765dd510b34acb
-
Filesize
400B
MD5f3432f86a338bdceab4911ca163130a3
SHA111de1b21a0b846261fefba3880e76adc0a1a0707
SHA2564e67a76e01d5b771300624a27814f0b284c80409ec16fcadd34cb06e1df49f69
SHA512d1495b56852f7eb9b1df65b52eca13e56bbd275035f16b19a2c222f3beaedc3e93630b5c64e37f6351e49bb01704a319971ca78c10f14f2a5fd17779a763cbd8
-
Filesize
575B
MD579409367056b2342e6288cb83496d761
SHA18d24dc1cc134a018b38b0690d937605ffc37e323
SHA256c9aaf2bd49c3acd5c3f64262560a7a39339371c4b5b5607e3655b3830b0fe1e4
SHA5121efff803ca291e489c90b1ed98ca060ac74816ee12ccfed152c9d64f9b0390f29b1ae8857d4e7d74b2a0f7fb414ff1fb0526bd2361794f225aff4d5d790d8d92
-
Filesize
985B
MD5d9a76316fdc7d74362df2dcaaea9bbc5
SHA132478f297d789e62f92ce1565cfe9caae75693d7
SHA256f40a2f365566abb9332499cbea398f934729d763b7ce50dd975bb18677a47da4
SHA51238bc904be13d31062e7c97bccd1ab1dd25e4c721880691aed0ca2f7c8b886beb2dbc12ebed893ba1311d939fb06067e8144cebe5fc053d11eabde3bdbaa6d6de
-
Filesize
985B
MD53e733bfff3ddc28df8e1a8d25b869164
SHA134bf606af1d0bb51f3d8304a64b666fc9f5e142e
SHA25687f8bec37e70a9e391b23e487500f3b7c88475a7d906e5f6b950708bfc95168f
SHA5120a8f7cb1c9d8b7f8a6d96b42927160bc72d0cfadcf60c909c3e89354bd44f1bc25e683087b9732f4c75c60275387150610909a19f9f34c43f99cf5784952ca6e
-
Filesize
5KB
MD54bbb8f41238c9b23a493d5bce8088d3f
SHA19ae3cc4fdb720592a7adc99440750ea76806091a
SHA256e1586ac977a00d068e2e2548ca77aaf95deaafdce7a8ea3122ba468a1c04c552
SHA512b8e9dc06147240e48e4e43222189a0222330a2a7342bd697f4a561286587fc430674bbdd962de458e5ef274932b7c44cb5d6141c80e6ca67abc094cce31a76c2
-
Filesize
985B
MD53742a6546fc0bbd9a11031ea948c82e2
SHA159de52408846b4897c71912cba888898f43c192b
SHA2568eb85d5747b9479c4a79f44b7dc8fce4e8f9908daa098b3600c8ae869a5bfe42
SHA5123bda088fc8b13afd2b8251e9dc792c8c2b648c175179364c3ee3cbf95ec36fb061e83fe7a53029ea31b2026f9a035193d42e823e440f4029c3dc01e3a40b80e7
-
Filesize
985B
MD54b54a348222f7cad9d2c31e310454d88
SHA15d50e5c6541a77f1c264a65fd1785dc16d06952b
SHA256b7a4c92d854f020e4489fd287150b6312e5f4dd5a1939ccecfd8c10f2ce8ef26
SHA51298a2b28105619f1442a8cac0975c7a73773cd306f5dddf86e7ed8a70d40da85e13d7e2034f69b3b3eadd34ff2facf22841fe4fb0c208c89f9fe8b06de98d8136
-
Filesize
985B
MD52d7c750101308fc9a8cf6ed5cab2d31d
SHA19c6ec86a1445827fd8b51e9a3f145ae784098c21
SHA256af6a543597033768539fd21f1943b7f27fd102031666b4411d5769dadcd8574a
SHA5123973301c853b056ffb742965158fe754a74fbc9a9ba28563e98d8c057d41fa6b6fa24bbfa55549f20ccdc3fa33b4fb41b1e115c7d3b4a062b77feb1dc40d8b80
-
Filesize
985B
MD553505f892f31214d21c227322764ad6c
SHA1e6e7b0ebb5b9d9ee0afbb297164c03de7060ce29
SHA256670a058fa48acee7dff82cc845b245f36da6c5c0addd826c7e3f0138ac095225
SHA512bfadfaa5c6d8b39b3d2485f410e07aa264287948b2c9359e869f8669bd6a5af175a19498d5ea908ab1e25c0bbd13653b821fe225dba3bd2686e7a23fa3acd3b6
-
Filesize
15KB
MD55715765cc2e354e3bace27b1e924bcc9
SHA1de92b3c0bc53df6cbff9c25f8cf5e6bc430bddb7
SHA25603d4c9b5b930e7a2ca4f358588d94063ba154c22d6d1ac2d5dc77546739482d5
SHA51293416cc1d05b04cf8223d4ebcc60769e23861c4f2c15126250d16ea8788b170e31d8d62c0666a4d1cf71d2ace97fed6b2a85c39c1ded458d31944c6f119fb05b
-
Filesize
985B
MD5d36fe43075d5493f20e0936db7764fc9
SHA15bc8de92e7049030d7beb0dbe7f1826d6c4760c4
SHA256c0eae8475c86fb356bca9e56ee7ee75c68ce2713abf9210f082f77ab4e2d3838
SHA512d90f11552edc84737926d0e7050749b338f36f8ef07503c89934a43d61013f63cb1caada05bae67b824965f32e0e5ca979b706be69db3d27d2734514b124c9b1
-
Filesize
985B
MD5854f8a342029af49d702146a8d3b77d6
SHA10363ff3bceaa551bc30f5fae568da9afee47bedd
SHA2561d95a0f2155e0949bc142c8cd7d003f7dcd4494b1457df295ee5d7e6a284550e
SHA5124bc1b459982ee267be59ee3bd81d20df187ed3de692b755564b835fdede475281f8052d1fb5a1a8e237bdccbfdff8a05c6a1f4c7414233a74073ef4a44fa869b
-
Filesize
400B
MD5f4f2d198ea7bb234060d4dd0e9d8f6dd
SHA1387f20ffa649a6eeda63184e4f0f06a8e0000629
SHA256920b7aa3541d1c0bfe0380bcfa11524b4cf6fe0447864716d9670ac3a8ffefda
SHA5129a2c14ac3938404c469e257401fb0ddf35983117156fc9c3e95db98869b09382707aa6540f88b3fd453efb0ca1805f786cc8bbdbbf07d56c350a49390cd1ca2b
-
Filesize
985B
MD510d2ad0dff9d4202fa0daa34e73a71bf
SHA1789071e62f2b954fe28ba345c815940f3b408808
SHA2565404e0fc83880d81842f5b42ecc41ba44ddf0a3500e9e95d6e5188c13d1fad7c
SHA5129c7a0259fa15bf09c5c91180e4d28ef05b35d41af7bcdbba305d3c7c245e23b2e6c03b4d7dcbe4e14d43f06815d9a83292f01f0a517b685e7984321bc7b7b93e
-
Filesize
15KB
MD5cfe11ebc40075f850ed2b69ca360fb6e
SHA15f3830c5e9f3c65d1dde330073ea12c433a020dd
SHA256adf04e9211ae08ac386d6b48de39e2652ebf402f06d0488e5534463d6966965e
SHA5125867ab20d2dd4817e2f0c92a1acbd851360827e7148824b0581aac6408a68ae8d94aa4c7a7280d3cd377604bb5cdc6e6a925ad9a539b3cf780f07682fe8bd139
-
Filesize
12KB
MD5bff52e56bbcc841aafe92fa78f8ff266
SHA18e035ba17d0e04686b9d32e08cc8de073a2faa9d
SHA256c56a36fd2c42934ca3268d619b5c682769f91ce0e375fcdc7db0b795eef3ae31
SHA51253275b036f012e2d6c46fd98f49675d0c92850b8de8978331fce6263afb5447d1c104f3d269cb1b151d2942b4650f00252fa1ae7c9e77f5c2b970f28bd883ef4
-
Filesize
15KB
MD55d96dbae0b9bdd6db4f598b7355217f8
SHA16c4770fb4c695664c54141ca9a480ac3a940137e
SHA2565be7272d80bf07132872b277bf13310e945d6016e7dc4f6cc715c2f436345dc9
SHA512c3a562bd0c17d9859181dcf9c393ef7b913806a434c84eac01db6d6897bbe31e97d5c3f605780e17be63a5fd708b2c912a06ecedd7c8fcb53c3aa166d8cabb78
-
Filesize
400B
MD564a21dc394014f42eeca3108f8ed7300
SHA13d20e7285f8a3824b506b6eaae4a89478e83b78d
SHA2560feb09204a33bf2b48f5e9b348f4f96dca53104f3c233d0121e90c2d2c7340b5
SHA5126518a2e5f62745bc2793b91a594d73f82f7c32deaabbb9614f6fb2c319c744d7526e854b8235793322f854e48efececd8a1a786601ac876267bcc8892cc52a9d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\base[1].js
Filesize2.3MB
MD59f5bf11cd4068cab63057ed99069fed9
SHA17a6329b5dde6cc10a6b6753a18d1178f46ea4d3c
SHA25689e1ad6ead4278ad4bba8ea5501ca5c79b066c61cfe38b70169181520fb5b0f7
SHA512768fa98c09d02d0b72cbcb9701ad0547c72c401854f251445fbb5d446da2d7b24a66059cd1e55ecff318a064bf9fe69356b4ae18f4273c13d4c14a7f9dae0d47
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\embed[1].js
Filesize66KB
MD5266940708e18b768536a35ff3018fe34
SHA1bdc725b2d6f8442260d996146e0aac75275af468
SHA2563c27b6e9d3d30224a589131e2aae5370d19b32038e292e2d92198a73a8e5147a
SHA512f22e4c43013a4024b5bf2289d69d24f8089d56562dd6987c9cf8474a8b352f0af359c2b5ff6aa9a9370835a46411dc3523144e6043d393eb17cbf339c157ab17
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\www-embed-player[1].js
Filesize331KB
MD5e05ae65e7290835392021a7595916b92
SHA1f1a340473bc52f98f2e73ee422b5b10d246b2fa4
SHA2567a0c22ec1c43c774664255605c026a3025992bee2a2e1441d391e58b30cabbc9
SHA512c40fe5dba0e7209ede7845892a3a5c92085d88263efdb3b6b9929d1bc269aaa517d1dd218a449ffc0aa3b82903ee5a840e021d6ceddefd57aff6d0419a0e3d9f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\www-player[1].css
Filesize378KB
MD52e4117c51e897b0cbaeed1dd321eff5d
SHA1d6010be53e4e0f1cc5b951663c14619e00b9d519
SHA256462d837d5eb151ebc17aefb77ded3dc9bf3edf7a43e0183800a54a1de3a58caf
SHA5125684c70d9a7e1e6bdaafe80cc35fdbfe9024a3f3bb8899116c301b3023b3818f93ca64f6f42aecb99fca6c8c45aeed946bbf5a8db8fcdb16ea0f58373179c58d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H7UVK5L\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b