Analysis
-
max time kernel
137s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21/09/2024, 21:34
Static task
static1
Behavioral task
behavioral1
Sample
f0a891a0550b2780abdf6d4ea3cb51b7_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0a891a0550b2780abdf6d4ea3cb51b7_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
f0a891a0550b2780abdf6d4ea3cb51b7_JaffaCakes118.html
-
Size
175KB
-
MD5
f0a891a0550b2780abdf6d4ea3cb51b7
-
SHA1
d014ec5e2fa4fb6065fbb9e36921df3b7aa5414e
-
SHA256
9c307ca5dec0ccdb08157a0892855ee236e24127e79956bbe8349a9b4bd19ce3
-
SHA512
12d32387ee9210f1a18b7d704bb321ee4e8fd647d6850dec0a9581ef0eec9e41d36ed885d6e4855cd0209c2317637245b6cd973a55efdc822d8d418bb9d0f549
-
SSDEEP
1536:Sqt58gd8Wu8pI8Cd8hd8dQgbH//WoS3DGNkF9YfBCJiZj+aeTH+WK/Lf1/hpnVSV:SHCT3D/F4BCJiKB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8524" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "2692" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80c42c286e0cdb01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8518" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19416" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18672" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9877" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8518" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{49395671-7861-11EF-91A4-527E38F5B48B} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "2692" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9959" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18672" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18672" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "200" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18590" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "21083" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10703" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "400" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "1866" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "200" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "1948" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "1866" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9959" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433116341" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10703" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18590" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19416" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8518" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "2692" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2764 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2764 iexplore.exe 2764 iexplore.exe 2860 IEXPLORE.EXE 2860 IEXPLORE.EXE 2860 IEXPLORE.EXE 2860 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2764 wrote to memory of 2860 2764 iexplore.exe 30 PID 2764 wrote to memory of 2860 2764 iexplore.exe 30 PID 2764 wrote to memory of 2860 2764 iexplore.exe 30 PID 2764 wrote to memory of 2860 2764 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f0a891a0550b2780abdf6d4ea3cb51b7_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2764 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2764 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2860
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6DA548C7E5915679F87E910D6581DEF1_058F778FC8346DE378B15A5652BAADD9
Filesize472B
MD5593f7599509a2a8ec6ccfdf2af182799
SHA11b24f702e954b2ae2a884f85c801b1364c8614c6
SHA256cc7b6fc76181e8dcd6e33ba816e63e2a30d817b304ad12a74317a634dcdd81c8
SHA5123e7eb31c13bc87581ca1965e800ee6ec367fbf31161691e22559f190bc06eca8169ac596d3f6263c56dc9080bdaf66e60be15bddffc0d1929164ee2a190418c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD5ffd17d733724b0eb328b6432e8261c33
SHA1bcec26a934c825a194cafc81226e80d32cfa4bb3
SHA25699326c256e33314986cd56ff50c876e26bd655465270b87581d32d558acd28e9
SHA512c3d9402559cc7c6998daab752b0a6da0ec8a91fcc55fda2538ed27d9ed0d9fc7e4ee5cd3bddd91e4059524038593ba3946d621577e362b9d0dad7fba41146046
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6DA548C7E5915679F87E910D6581DEF1_058F778FC8346DE378B15A5652BAADD9
Filesize402B
MD5ffc03f8040399c33b2e9ceed0449f42d
SHA19042d4ad5f03e4c92e5f938f4c42e627315c50fa
SHA256a0c8157b7ce773ea901cbae178fea7ff296efcac38dc06c373849b64936ea7f5
SHA5123ebd75b8aaf97be3e0651a53cae8b289dcf059dd00721286c16fcbac35c4cd584fed842e7d6728331ef050f8539261ea3271dc50dca01f6fb470520c164be184
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e5fd2b338217c7faf2d7829146984a7f
SHA1e237c7061e9147dcd9a981f77b638ba4d4e07ab5
SHA25685c3154cb8f5c7a695807d3e753a91e1d6a4ac3074446a239ff71c8df6972bba
SHA512b951bb9b44f6b201d72f2743e6ace8125cc946c3919f6b90bd82253f5e1b7f2b0bcf2fc85d8f6f1bed1b2718b7feeeaf93b34f56b4e8a5e56afe0caa82207bc8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59af44f2bc87ee686124191413a39173d
SHA1337998e7a77723f48abe9aec8d54242bf966908b
SHA2560955a629dea565a7edf4c2de8dc6e1c8675f184ac1b39005af8a81fa3a532183
SHA51212edaaf0accc920db1b4385d1c8a7dde0bb6891f9c29919c14b118e5a215a14af41020efbbaca149a3fbdf79e1c715c336675f8f78228a8064b9121c5ff322e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bd0cca493b54f2684dd841bec8062e3e
SHA1a0435d748694eb4c80998d996cf6dc3f65b2271f
SHA2565703a44e0d0110f94b6e8f647af9a5842b269bcf667be28e58a4526506696e94
SHA512410290a10bef5a27caab4bc00f12685a6ecbce9d6b9f41eb25ef2b8c66e4d66941ac2852a34623fec6cd66b5a60f99d4f19278e77b7d84fb2240e75ffa7a895e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7b48ed0b1fc7c3c729cb325669e3fb7
SHA186d985a21e2e81b2f2929672f3ab7e43b3484cbe
SHA2566c2d6e94459517dff02936c6b37eccc57f49061ad4e7e1c06343b8416617c0b2
SHA512d86cd7ead7d2d7b1820e868915e68073a681de36c1f63610db243bbb126f92182bbe7cb96214df75c5d87eee478d1936377f74d4cfa4900fed4f0235404d7c09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5675b311ea3f8c76bcadc2b0184269944
SHA1463b17e9ef19ad43e460e155187a5d2405691fe4
SHA2568857f581cdb5f9a8c76a8b457d209f800a01027b39f7da7c0974910e3954db9f
SHA5128a3675d4a25a388011db4e9b1dce39dd81cf0908dc6b6e8ff63d07f4300667d7cf0a4d6a3c765ad794c055ebfb959947112cb025cfb58522c2202a71cd328ff3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52d5d53bdd96ef424a82e64f04790ff76
SHA1f7be7712a2f28a7813bcf3eeb18d0fc57c501431
SHA256cf41e6602a84d4f4d9af46f91acf878bf05c5a6fd2bcfc78ab3aae24a062c481
SHA5120e1a7b5ff50c603e32e1bd434ae9d719a7d22868915a0d97c2922d7ef84d52a501696223cc6d8225658babc919197ede15adf9f11b50525a545cf058d0682940
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d01b88d77acf4eed30b9bbee49c84100
SHA1dd3bede7376cb781e963709e30ffc69dbc76c963
SHA256992598d4a7f86d9f77779682671c5bc8945738d60046e26c9180a94346edd0aa
SHA512bc4ff2f36794e68717aa64325ca44f5b2fa0e9c7ea161f67adc9ae9acd8f03b7af6c56268a2a6c5d92e4849d887a8ec8e2f1f4bf959422e59297cbae93690bd3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57c0310b94b41b798a3d2419335e8667d
SHA1586b07e92c220670b7dcff04e1cdacf6554ba150
SHA256e091c346e710fa8ef67bb54da7c9c7a03029eca9eafaa82fb4630e9f1b148a69
SHA512a7a673000cfd64378d4ab515a1abb241b2f9509ebf54f66a8fd8d704e8c2f1580f026e3a35e99ca0637194a4b110a5e548eed3332798aac4db321a8652ad404f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5919f653cf40e2ee060aab3725d2368ee
SHA14a524eeb7f9d6c43fee9c4afa081005465262b42
SHA256c54db511afbc471e26d52a34970835031c0e92dc31e9df7917c9d1629a957d61
SHA512959b0130009c27d94aa1f4ba9e9dbb02649fa16e872d9860edd497be6f38434bf7eae33ec3ae883854f2c7acc8b29c1ced3cf2a7de1126ab100face0aecb679b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7f94fe36b5e138f278bc83e39ae821d
SHA1b76e7a33c9d75c35f16c68f2a305948218f7acf4
SHA25601eee11be0e2d04578641e0bdd4f7a0ee68e6c106d6bbb63975c5975397e5adc
SHA512f9f2742c745612538780607949e294d88bf959b8a8976d87fa757232cfc67ccf50b381d9bcc9bae4f6a3f55a1c59ccdeb76e4003a09e3e7b9bc6bfa5529c6230
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e917cbc6b3169742022185fc95883677
SHA1d7bf06c2c313035b413c293cea6425ed554d0041
SHA25613f66dd8ede2bdbe423c460fef4b4efd708d87a96d5458ec9b2b038d9725386d
SHA512f11befd135061210d20816fda1b952db73239011e2236ccf991621120ac264118b7acc5e21adcd828f125700c53f946a09a8e90b735b21982bed3bb63d488e97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f88986508f0b01a3c3b89402d4c69a26
SHA11a321c17ba2d97b38e79e732b85f611c04cb3a92
SHA25624cca44d44d787f34af59c030d1db1ce8f653fb8a3a2a75dbe576ee6ea362380
SHA512d253d3bb98092089041d0d339ae4ab83807cdd35f862e784d642fb19baa3d261b718c7ab2f6210928c8c3c1bbdebe42bd69ee4441744b5824386b962076ea9d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c880164c088a320617b1cf2e895bda44
SHA149986776faa754d94fdbe2294c272b9c52916ebf
SHA2562ee5f7cf8d9897b75ea83a6938741b9cbc92a530f560c915eeebdae4c504d8e6
SHA512845d40984e407bfc01a2bfd6bcc00bf5e202c621fdea318a2811a5516a2eae0604a821673b50907e00f702147599e5abda3fddb4fc9ad7ea338a95d8c45d02b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5999fcd567337c23377e91775f27adeae
SHA14d96f0ba676efdba71d4b02eb0f3591b0a836d9c
SHA2565e39ee1e7ff73e4d8ec0109c8ecbf15571507dc43f3ead0b231e7f7079c80c2e
SHA512f3931450d48208520dd5b9c6e2cf7557c6fc21a852741dd7b266f0b28ea4003a3936814800fb145b9d46a04dc3672ea3e9deea4633fbfa7e499c29adf39a6c33
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f31cb714c3c7e85f18eae162ab509742
SHA11b899c1b0f9dfb0b4f761334606275d149c8ec37
SHA2560092433b54d6661826269a72271f59b9bc210cb74b2680f6862f66dd8b888437
SHA512e348106e2fe4fa6d85d078f5bc299f99f46cfdc9467aea1b22c851422614469cac29d71d043d0d4db8319da4d22c637ae754b26e848accb6b8dddc0caef397e8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5116e755ccaecb3b53655eb38076dac36
SHA129815088aad9fb25316f4fd86ca386f80850ca12
SHA2560fbb83507985688e59e0bcc5bdff4cad63b77af23a16c7acfbaf473e35d69246
SHA512a6a37c5d77af2678036267415813aab6b4e989c4be60739f7d652c0a333e7480e9b0273f0522e49d5a99d04ab304fd55f19154c44480f68b882d9cb589af9c60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53239e6df314eaabae5005e75d992ce6f
SHA1fdfded29fe0603c3933b2b63ad8a9b6113e1bbb4
SHA256726ba7363eb86e7d3b847fdb912f3e938f25096feaf937a006dd84ca4e6b9358
SHA5128c57d52ba0ee8a2081b16e02268aa2689d65be38d0eafeef785cdbb1ce339428a20794c4a585f926acba7dff5269920a7c67a86eaa4ba992a3ebc0982ee2a351
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD550f4069f30a6d32a8443164cc6e47852
SHA17994eb4928c0edc272a38cb6bee4f87afbfbc6dd
SHA2568f9a102f973a98ad0d10629d6e930248e34c069f44181476cf9f995d02920a2f
SHA5124a1775615c0e3d2fdfdc5b563a1e66a04d98750497c2e6d88926867da4423706fb94208c305df3ec07f7df006bfb27ba5bef0b5dbdb09a9b021da1963d011f06
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54ea98269a4c768d75fe172e8935a0079
SHA1f0be4f05a8d7d9ddf8bebcfc11b3105154a3c9b3
SHA256ec59db6691a9cf52177896dd66e751cc0e070d17c116ef6f933b11749886c893
SHA51280de83c19318128bb211e4186f858c47b6820c78793027c212f8b932adc53364fd1585fa5d0e7a82e84ee00c73c5488695cd3f7bae537217c09b211f4c35d7b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5365866aeeea381091fa420e7832ab564
SHA17fd937863cb20b8085451969469c439049706a98
SHA25676f9e7bbc58897653654b1f286592158ceb451cf3d3b9e4536492d10e9c51362
SHA512dcb07347137d46c1c753037ba5c3be2ce65b53fc6ac612e553f7932b387bedf90a7221d3b2880b89987e72889d75b00d19d4e95786ac2dd631ab6f0b6ea2d8d0
-
Filesize
985B
MD5fa7f2e97840242e6a8ecf86ee8ae58f7
SHA1abd99c2aa54fb40c61d36cb3c4f30de1b03ad331
SHA2568c7658eb7495521889e7e9427ffb5365981c7a485dc33456e1e6e498a8159528
SHA5127354078f624f6cc25c9ecb82a13201b28df9d98b1befd12f835e9b55c5717fe3d192db54fa38de7156215007ee5642dbd0470eab3cd16b036214ad3fde5d36d0
-
Filesize
1KB
MD510dbeb38ede67ce9de2ca5ea53c51ab4
SHA13be30ab80068674a12ee462e449122116eb58cc0
SHA256d2a4344f8c4ad3bb653eb253aece1627d879980c3b7cb34bddcb4e66656ee45b
SHA512a8e0325414d3aaa4d4271ea74f7efa181264b68e092d588952462bbc6015294a2c9f87145f78ccdecd46e5741ea8c5a961eb6cea05cfc0ce50f1bce6c484c86a
-
Filesize
985B
MD5bc595b02b5d2578e15a60e5a1982c503
SHA1b6e217d0e75da824dbeb0f2611f088bf5614c9d8
SHA256f1039db66666187a5809377e85f04913c1717b8d46b40e0af0eed173160c0e31
SHA5127aabc3064662e5dc01a8414f9e721f5334122b47ae3c82161104105c278659c5cca21a1b734ab74949ced29eaf800ae4f667122e12a32e7656666ec10a75c641
-
Filesize
985B
MD5d0eb98d544e30def9092e0a22c468550
SHA1c9ff69142e35c213ec6f5767ab51611c580c4744
SHA256ee29a8ba66331b6716395d9c35646fceec98f5517f14a6c1d3a87d38cf3522d3
SHA5122ee9cf7fe92d7968954fa62f614217649642af626beb4f881f721f39fb5fc3926d330343d2819c928640064202959f74e58561a77e8c4170a01de539744789a5
-
Filesize
985B
MD5b2f6ab9d5bd1ab4491ef46c6e32f537b
SHA1d478760226da95ff09187b3011d7f5201f9c2377
SHA256ba7211dfc8790c3e70a1476c19f8eae363efcfcb04e7aa79000a31030c7099a5
SHA51242e3b309f575f82939569a6a2ff4c993ad2b29180665efa31ed07bf0bd31cb8500562dea6e556a2208aef8717cd1083b8294988cc1f670eabbc055fd65da6e6a
-
Filesize
985B
MD5fe56bb9d28aea289a1e8e4e01a35017c
SHA1ceec836651d99dd9ac02e359c6eecbc1afaa5974
SHA2563b0e0fc4e7f737c5284383b60c294946d4c5556c4a03b39e6b709f8d006c8b92
SHA512df20d2f32fed179ae7ebbe6767a35b4873067e94a1e465417298da69392bd24752e6667a543371591cbeda9ab1645c6647f51e9269dfb56666fe42325c82cd9a
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
228B
MD57bb796641bd99a57c0a526c08a953c17
SHA1e38c968f323dfcf26335cc63884a5afbad49661f
SHA256fdd528161881dddfea574d43c0390df4cc6f9311c6009d43e05ef690a42d42b0
SHA5129dcdc706eb1695bbc245ae3f57380a5f50ec419e37557b3e23dd8421dfa545de9cf4e9500eaa0383c0f89c2f5f675ed839fb38661b3dfa3f9abe384776e7bc10
-
Filesize
228B
MD511d014a763ea5cd2224a73351e3dbb1f
SHA178daa680f18b90cef9ee76fbe14c5b6aaa0e438f
SHA25674a78f06b6f7de95fb9ff7552655585e6e7ddec1278bbc42e01ef7eff7f80d3e
SHA512c3bb73c071964ec4867dab98f3b38e0dd496d941b4d2b43b3588a92c93279ff2c86e8c8faa71341ec3062fe2640b83edf60e6fa85ebc07864c5a337eb088e85d
-
Filesize
228B
MD5ced2ed31262d1023e9551e602377b8f8
SHA154724d1672d0000662a10ff9c7cd48563ef9de39
SHA25686535e1ded108a116ee5841c83c29f3fee94171d6df2b926cffb093943ccb9ee
SHA512c299403ff4b5e9479d603e97ec9b274375c2eeae135aa6fbca2f9fbca03ea40b59d6798c3f3b423e90f1889ede14bfc3ddec6ea641e94167cf80e43f3ea4ef86
-
Filesize
228B
MD5c997bb89c4c7802a2d8dce9c95d783a6
SHA174a72a7c7e4781b11f7da270cb15fdd8feabab73
SHA25623d6e45fc91cc3efa8fe68a93ca1f75323128638db072f19c1f80a572ca2de62
SHA512f6e186c47570cdadcfc58d9309a0f70ccf6017f237f62d15546cb139f306a788982da04f17c2d02fcc0d11313b3348f2fc2824b795ba4268db26616579fc88ba
-
Filesize
13KB
MD5efaad0e6b3a69be2950a4986a8a640cf
SHA1bc9bd98465b7aee0c1edd5b62368f5aa13e39e99
SHA256e6e1f5bec9b7084d95db34ed1536292f9392288a73194a84492f518e9dd97635
SHA512723cbc77bd97946a4bbe8aa655219f27700a1231203e5261ed3dfd9023f680918f26cdda015583845a7717bb7c5f8c77b66aed36cb020a0a46bd08821e46af95
-
Filesize
575B
MD52d45155b490698b1145707c140d8d814
SHA1d8773a4dba626222aaa68bae8600adae50dde67f
SHA256c7a3ee9d693e3e5b26b1320bd8b55051683258effe321273c3faab7baa598c4b
SHA5123ceb4f7f3e475119fa2e671ac56a339ad48f2934224313469441ea3dbfbb86f59f43067dc09c49243e5b93b3e2a790ab13342e1ce3b330ccd77cac5fd0dde26f
-
Filesize
2KB
MD533be6e343ac7fa6db27d9a277363e57f
SHA1c149d5727666b14254b94587ee389f4079612525
SHA256fd0f5fdd4bc50bc383a82257ef401fcc2a722e85cd841594daf198513c29f4af
SHA5123af15bae50f514c216cdba330ff20f3433a59e6045f1307dd103f1364ce2c40dead8399d1458a20b4712f4d75c8a31afe41dcdd2555e562c13867f9b21a2cc4a
-
Filesize
29KB
MD5fe24ede467bb89aa8673b0412b9f855f
SHA1296945a878e9e21c54b9209e4fb6c063e6cee733
SHA25691611429434d974e7872e0c2e37e4edd1dc5c25b989dc13d678912edf7e2383f
SHA512eb80951463cc150def8e1227a0535cf2ee6b61e8e4e8cb10fc4a43e2540f87400a62a5ef2856d549b76286b29f50ddd991a21e4e4f0a7fecb9bf1db088806df2
-
Filesize
575B
MD53c461814dfb98606386f3dc98c77f4d4
SHA100cc194321d779a2d5a7bedc723ae4501060a4f2
SHA2565dd37d04aec3c17a84100f72c69cb5dd148f35a159bb53a0532212e2e16b6ff7
SHA5129fa5571f8134a62f587055c74bbf5acf58b57672d037a20ca7998e1e9543a94f4509d2f10ce3fe61ac44910634b88b9b3a1f2fe58edeb587f483eac9456c0237
-
Filesize
985B
MD54daf31aa84bd6c8f5d1bd0463b32da02
SHA14036211d4b22a5a537c56acf6198dd858262715c
SHA256dfd8c6e10970267f62e6c8dcacdde8b4c2fe136427732651d2434cb92a4e3215
SHA5128eb9ac7169314668bdb8d02c81d6e4cea347bcd8b630c2cf47b012a2129f412246ca4ecf97256c21bc34d5dd8fbc8f3111b9c6752e0ea6d9b5242390d587d587
-
Filesize
985B
MD5f4c7a6680308efdb6d28e301ffcacb2c
SHA1a88c0c6f5f036c99e34f6d261faff67a18649152
SHA256719b954c2bb201add9ae9063e09cbf772ba4f08187046ddb1d2d6767ebb87f86
SHA512dfec931320dd7610d8735d84656779ef8a1657caa9de9bdda2f9815d53ebb92dc07c4205bf71086048464442ebdefbe0bc287723e922f7a8acf830163edc069c
-
Filesize
985B
MD50a62ae4a0fe2c4c9577cce267476b35e
SHA1d17ad96c0f984a79595c9015e76612d16ca914c5
SHA2567b49b21290a0c5128d00de1e9c9e3a5a6353d87f090ab2affebf7551cc31096d
SHA512cf8de5612adea109672f898dfe4d8696fb8698797fedfc30ccd951183881da0a08386674ae44660dcd2ba5ff75a4f80126fb8f4bef4e2e85c059a7bb9cbecde0
-
Filesize
985B
MD5dbb046dde927d75cb8d2adff2cf6b527
SHA14ad6ee74834f4db9a236c43e1b03167f9c02c3f2
SHA2560ae0a76393c06f3ea2ed5267a9048dc3cada9066ef394fc1c8a72da10e21c311
SHA512c502f461a72a4e4c1230b6476fc0272aa61642c4e647feedbc8587763f3923a7feed6a52ce826011fe52da367286d8bff2daf6ce3a1cd8c51bf7d5377bcc0935
-
Filesize
985B
MD5b011a980e3b4a3cf1a95aa978d8781cf
SHA13ebac516de76a484c38f21f279482101591f8f26
SHA256d1aa7d896cff6fec27ac4c234eb899fd6d2ff4fb7976b9650da1681a3ff76caf
SHA512ac00336f10deca15ccc37fd74171b6aad9c2aad96dd23cbdb226eceacea793acc4f00eb00e05fc4c4db68397cb51b377155e9f7128e34145f2e72101f23f4656
-
Filesize
985B
MD54bec7c21ff976ce02a4aeae06408db65
SHA139a9d030a8ac13c0d33b2022ee59c21fd8640768
SHA256c422c759cfc74b6a051a714b13413502ab512e4251da118ac58020e496463693
SHA51268f3b014eb07cb8b67e385ada90029a991cf42ead623b4db336f9f2298de116b19216c980470455dda0fa42cefdb88a21bbc0173a5d46a3312b50a11dbde188b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\5K73jAf8oQ6GjjpunjQ-2yaMV7a9lsT51eAA_Q43THI[1].js
Filesize55KB
MD5323dcf3c433a0464152daaf53d3720da
SHA110f1e90b5aa3041589fea0b5ff658f6fcdefb7bc
SHA256e4aef78c07fca10e868e3a6e9e343edb268c57b6bd96c4f9d5e000fd0e374c72
SHA5126c4cdd28ca28974df26e1272d4c68bde318eae4fa082714f975332860df91d1e8d53f6d9940dd6158150cb13c36471485ccf1dc89572a8380c3501700c7a8df3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\remote[2].js
Filesize118KB
MD5bd24e895b4340f7fa4d8ee7e5d9c143a
SHA145aa69a80b17487f15a05f2b2b71993cd6b0a96c
SHA256d19c33f7c67935c89977505aa9bb5aaab498ae265ac93bf4694edaaf939abe7a
SHA512d12c23e51b1bdb384cd5928f034b5b542bc18147c36d09b8c82abcdcc869e0530d5bdb204506a7b8cebb7f245b8db6ddf6c2f4ed3aa43377da9a1ed5c19382f5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H7UVK5L\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\base[1].js
Filesize2.3MB
MD59f5bf11cd4068cab63057ed99069fed9
SHA17a6329b5dde6cc10a6b6753a18d1178f46ea4d3c
SHA25689e1ad6ead4278ad4bba8ea5501ca5c79b066c61cfe38b70169181520fb5b0f7
SHA512768fa98c09d02d0b72cbcb9701ad0547c72c401854f251445fbb5d446da2d7b24a66059cd1e55ecff318a064bf9fe69356b4ae18f4273c13d4c14a7f9dae0d47
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\www-embed-player[1].js
Filesize331KB
MD5e05ae65e7290835392021a7595916b92
SHA1f1a340473bc52f98f2e73ee422b5b10d246b2fa4
SHA2567a0c22ec1c43c774664255605c026a3025992bee2a2e1441d391e58b30cabbc9
SHA512c40fe5dba0e7209ede7845892a3a5c92085d88263efdb3b6b9929d1bc269aaa517d1dd218a449ffc0aa3b82903ee5a840e021d6ceddefd57aff6d0419a0e3d9f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\embed[1].js
Filesize66KB
MD5266940708e18b768536a35ff3018fe34
SHA1bdc725b2d6f8442260d996146e0aac75275af468
SHA2563c27b6e9d3d30224a589131e2aae5370d19b32038e292e2d92198a73a8e5147a
SHA512f22e4c43013a4024b5bf2289d69d24f8089d56562dd6987c9cf8474a8b352f0af359c2b5ff6aa9a9370835a46411dc3523144e6043d393eb17cbf339c157ab17
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b