Analysis
-
max time kernel
133s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21-09-2024 01:25
Static task
static1
Behavioral task
behavioral1
Sample
eeced93de13adebe9d25e2cee893f9b8_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeced93de13adebe9d25e2cee893f9b8_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
eeced93de13adebe9d25e2cee893f9b8_JaffaCakes118.html
-
Size
175KB
-
MD5
eeced93de13adebe9d25e2cee893f9b8
-
SHA1
64788f96169d3e8ab31f933f63881b3254df0285
-
SHA256
3ad5397a542a38d0d3bae20e9bcd125523c7446b28eaf2ed64ad695030ef52b4
-
SHA512
e58cd564505681dbed2de856afc332aa83261d475b30b0ae41e7e5902c8af50522694138851bd86cf7984d77c7b151a14ab278b61d5d8a5836ec7ee38d247b78
-
SSDEEP
1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS39GNkF5YfBCJiZQ+aeTH+WK/Lf1/hpnVSV:S9CT39/FcBCJi3B
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8080" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10023" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8284" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{54D7CF61-77B8-11EF-8C6C-D686196AC2C0} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10029" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "29077" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433043772" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "19671" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "29077" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8074" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9713" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000078a0cc6b0b830b4fbbc12dd3fac6f54200000000020000000000106600000001000020000000c01edacb1981b6563941bed3ee49c9476fc49425bffe2e40400206292fbe76b0000000000e80000000020000200000005726bd18fdc9dd398328b3d0861148ba44b0dd7dc9b3aaf32b207082da96082420000000803b9ca8f3df42d0b5e92b3210c2faa389f783e165d6dd90e63f45d3552ca749400000007b13a658a85fc39ae22f51796d52a60fd1709509348530e4f193f2ae505f87c4908cdf68d677228406c39df9d465f901431ac3614639349ca79fbfcde2d4a6a5 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10133" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10133" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10023" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9941" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f06add2dc50bdb01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9713" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8080" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19545" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8284" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10023" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8192" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "19583" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9941" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19671" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8284" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10029" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9941" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19545" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2908 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2908 iexplore.exe 2908 iexplore.exe 2964 IEXPLORE.EXE 2964 IEXPLORE.EXE 2964 IEXPLORE.EXE 2964 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2908 wrote to memory of 2964 2908 iexplore.exe 30 PID 2908 wrote to memory of 2964 2908 iexplore.exe 30 PID 2908 wrote to memory of 2964 2908 iexplore.exe 30 PID 2908 wrote to memory of 2964 2908 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eeced93de13adebe9d25e2cee893f9b8_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2908 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2964
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD58bfa8f53e24ea057cdfc7119a8a1e7f4
SHA12f8eed4f0c301bc9b2ca3e0297ac93b2792db57c
SHA25616eb51b53bf814699a1d669d8b63bf7f6dc99ba2c08772c64dc03058c3b08709
SHA512dceba2e0dfc8948da7856090b23d75594584b08210310a877c72dc275ec39a73f81de0cedfa68f8fc963959ec338930fe75a768af8e9dd7c31eb4d292177e0c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6DA548C7E5915679F87E910D6581DEF1_058F778FC8346DE378B15A5652BAADD9
Filesize472B
MD53617c34ac4e7cfa2e31de43585bdfb61
SHA1b2311cc14bd680f50401f88e26bdda81c405c28b
SHA25678eddf1382477f2b443b290cba66590c90cc0fb9bf6ee8f457128924a4d47578
SHA512335b9a71bf6cae0b4dfb7062ad314a3a980ff116908136324599175ff6751a2fafd22b3ed10d66b844b378c0c2e805eefe3a83e7bef781413fbf348fe95dbff5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD57e9e1ecb84342c8854fcc0000bdcfea4
SHA18f4faba8d4619a596e7b6b3aaa6b230c60ae7dd3
SHA256d19a7e39860179f6f405746a72d27a9556b0d3c9e161e3e9406a466a145d9c71
SHA512bf0e33ceadb8c26f117888903c3a69ad98b79065151108d0e78c1390b33a521255db169489e96052a5376235859757c4c1cf021fa6c76973461417471d4ec378
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c31d46facfee9fb31d8ba75fd0239eee
SHA14445757c108d9dcae7ac86467f3b1ba6bb7d859a
SHA256f75d928bf79d563cb9d855f5cf1bad849b651e6fa5ff81d6a4c1c1113f2ba605
SHA51268072dabe7388c8e5666498f0d1cb8ddcca98f3a74ab1361a5aebeafb9059879df49f088f2e70c70c0939b47d13a974a93685b7690340b12ddf99dce0632b6ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52b083e50699dd72bd3ff06cadd5c539f
SHA1f58af5831053b5c2a97e6b23d7de9d2a10650cd0
SHA25657afdb83a309da37aa0dc39197d5787e92d09998d315aa99d27a0e1d3a6a261d
SHA512b0fe5eda17869f6c8f2b0a2f6109e864dd8681039d0c35640bd196934dc8c1a821bf9ad7b81305390ad5d088b2a0d52d813b1c974708f52d718cf2cbef111af8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5196ab6f6e8c4c903c64f036775c5752b
SHA1874fe4df67e9034e832ddfc9c3310bb6c7ef0a1e
SHA256f651b79a07640b5a27ce4a7680503dd61a4023c45b660ea9580393a13d361c7c
SHA512ae08ab8f6fabf986083957b75e338b51f93f715bdb401435991ca7d8b6a94fc144b6c9d6cccd364d204feb1a09489933df7eb7d4e5df3caa46f0f606d3e730ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD564a946484fbbe727a09bafa9500588c7
SHA1906f5d6953b4b08f9798c0b82834bd1449d37e43
SHA2565476a98540a87d87d9bd35c05ae37d18892d6de51e26068ab83c7a808c367d02
SHA5122358dd71f9061379d7e63f5d1c998f3327ef7e76e7a891552cb8fca11c81ccf9c5085e24ee6164c0907d1e9161c41ebc52774a0fef9afe3c96f0093f9d39c06e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd0c2fdf78187f09a14eab8578a09623
SHA13df5db66631d306b00198540a3dc3c6ea4f54f7b
SHA2568bde59066351f7c18ce4f5c3b0270768b4eff5792a9615a68ce00d09f2b832a3
SHA512b1413c6380d683d17359f2b286aaea2ae3d16d785145a6da4e7d4fc2d205292bdae4a28ef5344210cc890a0fb67e7393384ce41bf551c697f6fa3fb021df5868
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD527513a16de79081edaebd7c2c1bf40fb
SHA1425c5bc384f71f1955f71e54a980f64f138b1e0b
SHA256fdde125eecb032decc431e5359ba32a944c10ca3e53ef1afe9f20ae081c8ad25
SHA512c7abc9ae2e127b38e4df0267f9ea43db4f1941279b7fda9eb56e896107d862c6a9eb849d136936a08852b3d64992d6223552e1c5f9dba51a3fe15b43dab6b44f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fd73d3e55f1154fcad2ed78ddba4b675
SHA1ba9c339781d2d9c0eae90274c37e66fc47b90aef
SHA256af2aa09468197419de7a532f27fae3e7dad475c144c0bc7e0b0511aede5de7b3
SHA512f37a01987e037a60a3cea10b8d8df2cb39e36197bc8f93cf7e1c10bf2d8ac028e4fb3e41b7804e99ff7e3ca5701bb25386314ce237144a8b39e2954c79ea4690
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56c37e2c0e25c6bcf0fcf1fc01a0158c9
SHA1932c50b00895c20598c1ce41d9e2a16f8c55665d
SHA2563843485962b92650bd6bd4803dd8bcc60d8717867e2db956b33e15fc6ef5b508
SHA5122b69b4612cb95ae94ec030538323686d73b4004945485b63c776a5d8ca08e23ecb3ea29a914c37950bc46b8468b40079938541edd6c53ef218e5175bb821e06d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9274ef11c9a22106d5ca35ad014a411
SHA10d88be8df6347962c113b09184bd1de25dee3b4a
SHA2561e231ccbe274ebe8c5ea7561736a20b565464237c67418bfb08624221e1022e8
SHA512aa6325053944138cafd4ee26b94a6a2f45c141ee8a8b014d51a74f3fc32b8caf59d4bf0ed964e473f3b872c7e0ab9a798e4467abe69614c89c82f531a71f4b1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54d7350223faf5dd04f1099ad92537f88
SHA1375d95f13bb1c41ad20a5bf52d52620b38fa38fa
SHA2561856e822f67e1519d302c0ab56a4e167a070dede3f7825424ba14a123022bb19
SHA512fe44b47f4926fc6f90b415c6e35bc9e562e9640e37224228cde5a5b11060fb2c1f80f705aa50f6f43b173de55b0c0abf2bf4f4488dc79c7970c7125a6ede6ac5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e88d5a5bac2f2a1b97cb33f2b18496ea
SHA1a7e4756b3a5ff26da556ff199ef95df5ee9a5fe9
SHA256a42a6eccbcca159e10fbbaa2c85b6942051f6eda78b92dba383e81b2bcfa4ff0
SHA512790badc98034791c4a6564e5782e962e544941a18e4ccfb750a891b49a7641f693d83e0eee142c0b72b5726d939aa58b6f1d7386eddcdeffc59ebef06b50d241
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7e36fee3168188a9da3bd5eade55b43
SHA16dd30d782443db9d9f088950add8649ce2f6a073
SHA25690c3403a690ff448c746ff540b87a0b053437e8c4471ec6ce62f226ada8c2a4f
SHA512911042b6fac11ded8850a309a60100a6a3ef319fd747c52feb111f5b95012a6dfaaf25f91e3924f487d4463089c30c40ea16bd266b041244d9cf3c99389bfcc9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ada4738c1baf9616889253f0742d2434
SHA19c5a65dc02189285d4cf18348fbbe71c32c0aac7
SHA256b3dcc5f978a3abf2ca6c72413db9da9587c4c6f91f1e8e42d3cfcaa418a16a09
SHA512de953bfe9f7ef927ec0c0ca11ed226abd085ec8725724a67b8f28102fb4126f9358f624fdbf46b6a44ea9282d60394c35dfbd1e629fe91f0c818247301bca8ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e0ed504dbd7d64e5d53a7489ac49ce62
SHA133b990e2e6211cd178abf622766a347939828906
SHA256571c16667e29fd351fc88cb5e925d1b71bf0439a6a90b4da977fb502a7f3b1f2
SHA512ff5afadf35a9867b1e29086e3f941cf842cdc052be877853ce4eee66e842c9597442033e88cf13049f911b6cba875ca382bcab975b9a448a0364582407d38d00
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff33545685ce6966841fa3995fd63fa3
SHA15be2811c505a0b4d2f0d13700623176477fabb5e
SHA256d690e22d942c27a4604d92e4617c04e3361ebc8cd2327ae643f7cc8bd4b4beb6
SHA512789a839758f48131dde88d0b3661d7c4b60c10925c374e1b0516f34a5803cf2d068eecab38c92242968050d23f7052fefbbcc9ed98bd49927f7eedf6fefa2cb3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56e50c00b11b648742845974d6abf5704
SHA10c7f52bcd87fc916491656ae0165ffa0de6bbe7a
SHA25639a8dfc7a6bd0175c059914296e99116262632b8a8ac0cf918ec555dbde02728
SHA51299a81eaf9648046b8b3179626972e1d6597300e0d9502f81e45af4dea54e8d22131909a7ebb3dd3337a0b33d0cdf2300bd02211c73665fae3e54722bcc39cbba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD541b706f7c7f45edfb5b8917710f01357
SHA1052521ac4d374b9e606327b696b39e07f6570025
SHA256017f6f88ed7a6f20b70abb7cd25b68ab896169babced00ab464c7bf429a13a4c
SHA51206807771eaa28ea2eb038dcf30da9c9c7ec799ab5470119b93ad82bd2f5c4e024a07f225bfa605c6341cb6d7c1540924672052b7e4e3ccb08299872dc149978a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f1d6b3dfa198c6cd3423f15c2dca88ea
SHA1653bb091843ed53d98ba8c956a5a88a90a65066f
SHA2561778f6462da0357d013afaebead71fa630226335c087734af7a9847ee06b957b
SHA512360a05c7932abcc05074b04cf6d45d6513d96303f5c36233ce7d10824772aceb082a64b4eb8fd07976905da3427e40a6a1af84bea59d37191745947a90d0c30c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD593b742c5860253504cca3cf6824001a1
SHA19552684bf78b2371cb4d78caebc6d834a7ef69c1
SHA25655d5f6381dced546aa1b3b3edd3958b5e1f4d79cc64bab2d44b80b8014c1fce6
SHA5123027feda5edec2f6319b2b265527dc3360e29b4d660fab28f784d93c2a77cb4cc96790e1921f9e64f292c62fd372402c5d0a7ba4f8bc97cab434899a3060052e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD534ac5f46dc76cdbfd1998db5a0212c1a
SHA10ccefe1afe8bd349718cd7d999505f2b8a3f86ff
SHA256f2594e6e5a48d7b9dd8392083abff66ebc4d6ea7e58a4eb78efdeb62fc875db5
SHA5129d99a83a7bc5eebc7b6ae8582ac3a12af2a120eae7b414e699eddb9cbabd8e9425c2dc4d80269ca1a6d43078308348043535b835313578a0119ed7864df16f12
-
Filesize
985B
MD5e0dff03da9381d8086d509d6b1e8a5c1
SHA17cb15644e9f7f4c699f8d9e8247d5f60500c9e57
SHA256334ed721f2d91ffc29bddc8d1e84569c6de91887734a2cec1395b0086b5ccb22
SHA512bf6b773a96e8a0f2a1e176505fc84a512d82ebd33fe40507aa193de3b47dfa51a5aef487f0da7b70cc9ce2ee3639e220489d5159c77a40f56c76fc3d130546be
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
228B
MD5e268b0a191e6a510daf69887fd53e6a5
SHA1d9e0bc081970c8cec2692cfb94324cafce125f19
SHA25604011f9578a58a3839529b897e37bef8a40d7431e39663103abe2d77d177c8ae
SHA512e7dd7967d54a0c64e42f4ed531338a25c5d6b93061bd3d1e39ba4eefffef127fd890856e69abc19a2355cb4f488ce66acf6e934ec5542f5eee819962035ed8bf
-
Filesize
228B
MD5f49967fad5ff7f9b44f438280c5c8e82
SHA1eb5c83dff422977b32bb77e529f492f0633bd097
SHA256a6105624c5f4574560b5369ac83a7055026bba219507b57f97ca0f3630757b47
SHA512cd985a7a32c4c3ea5e7d29c60eafd0d252b9a84080d662034b3111bdff7f8c6b9745f8bedabd4860a860de08a5b18783253921e4235a4da144f89a932a357659
-
Filesize
228B
MD509ed2fdaf703479077a45ddc10d210ca
SHA123a1f056f7890e667f9fe6b78c0dd601798bd6f7
SHA2560311dc0c045d8c5ecbfb8cad7056cbb690cf1ff03d682da9343f941f3347ba2f
SHA512a076f94e5c36ad4cac3268ceb30eb6fcce60931063a278b315cd4e63c95efa2a1f37942ebf936960d285e8613d8cdb2fc0638a761e5c4980690c2c15db5e38ca
-
Filesize
228B
MD5c6da827034e04f3b1b47d6bf10af961f
SHA1a12a576c6993cb5f0450b77d913bfa8b3d6aa2d9
SHA256b70a4e56cc0d4872241f191a334030f47b5787b8ff96661b8a8147031b7a6ba5
SHA512ec9afb8fcf2b2b9fab24a39e5c604b2910d37433ed2f7e045e0ae95245c523d3de39dde5d1c9fd46a5138351b619fe12459fcf9835d4bccfee2093b8cb0b673f
-
Filesize
400B
MD586a5da570a8606c4301c6be9190866b1
SHA17c80b5efec3212215eea037966ac1b63c3634879
SHA2566e1c8e3d22ea4703d3a4751d51b5986774c537b33add5b861432ec3dbe6d363c
SHA512d4d62c74c37a84312c4ba3f46615f57818be00df790c71cc32acb086084dd1222f4c71556054e32211010102dfe57427ea0f5335ea0227ae320aa290e5a9f276
-
Filesize
12KB
MD53ddd477ae8094cc3083b9e452b8bba43
SHA1925935e633d5f321a56c0a83ff7ac2118378420f
SHA256bfc9202cbb114b743c8c5591438721a320140215dda19d8ed8542a1328d7b23c
SHA512bd45d57fae2fe87073db8936c6665b694f25767095b35fba54da598558de4535a9efb8e88d98767d129f6560b99984d52f0562f627eff394f1d233ff6b1b1709
-
Filesize
985B
MD513ea89b5e44026e9194f5f5bbe734968
SHA1933749db5fb225618720f61164e7b96f3bf83c8c
SHA256a29b5a805e9f3a44534a4a04c00c57b49e62af4a2a0448b3d80000ec392c3002
SHA512b1945ea456d9087c55fa254275b81d506abcbcbd476e61091e9a88ead94286aef6c489b7de41a5cdd9ef8e86e0a133d93da74bf3d9f89245db203d203fb204bf
-
Filesize
44KB
MD586c3571aff8fc49c3583c5fe8eee0181
SHA1640e5b89ced696840e994accc614ef111554ce3d
SHA2563a1b3581f49e104056e5b5ace73a167c01bd71bdb532f58d66050681fe9fbe7a
SHA512df93d4b7d1594ed37fbd1fea3bd79fa3586aec0580ff2b523ebeee1b7df62d4c48df85cd9fb2a8fc6148c641c21fb6b9180cd9b9b0ee21747fcebfc59eab2c10
-
Filesize
810B
MD59906a65245c9a67994ad1a449784eb2a
SHA1c04ea96022e40255201188f9f8d0ffbf10a66bff
SHA256b2147c87ac53fe859746e1071d6a5755f62df6f13750d5a483ad1a2121a98c2e
SHA512f8b70ed94cc0daca48915b5b035273ea76dda865c979364bafd7953521196799fc4ddaff0422901f121305ce365c78d90de478cca23fb425a8e4159754287718
-
Filesize
15KB
MD53ccd637a05121466a2f6b0fa3a25e722
SHA1f80fd8e0041be5ed734d3e2b81ea77437355fa09
SHA2561dcdc5808eb8dcdbab92dac57ae8b825a42815fb15ae16a254f06352e1557a71
SHA5121d0dd8302388ffdee3041a430ab22af6f9ad28d9a0728c8629bbfb03d93145c118dbca4735d28117fece580b7bd49e3eacc76a9aaeab01fbb6143e70000d4a55
-
Filesize
985B
MD5b1fc6100fcf2b4f2f57d788aca4068ca
SHA1f76d69189ebc8a306c20dbbf6f28727e280c4d56
SHA2569cc463a6df5fdb8427bf77f8f0120ab23b52d6e7bb632bae3e5f31b9a6cf4273
SHA512f006df7a04fe08e24e66ef8ef365b33a0a725acdca58ad88acf4e591ce903f948a1b41951661d9680d38a7aeeeb4bb7c233a452eeb241cda5a6ba7dd6f96b28c
-
Filesize
15KB
MD546b1d541b26090a48d7819809d7177a2
SHA133d9f9e3d04929d872b21b416f07b12c9b353948
SHA25603247d6b612a9327e76f86428608146717d2efc2cb8c63a01340abcc881943b8
SHA512133de3d1eec3b9eeea723442f7f648f7a1ac472cb59978bdb5d54ef06cf0cbc858fc009ec3ec44c22820769d64fee6f85c8b0e5c0d631731b37c4db73b444dcf
-
Filesize
985B
MD5fa1d6e8325d57874fab29f2a246bf947
SHA129df37525861548d37fcd925bca3196d9a6080c5
SHA2564015e23056b23b4dc1ce2256295f3b5c6c2e1051e3b9ad5604db24856ce2c8f8
SHA5121319abfb5dd3209e5f7d8c4ca817123bab25e31b961a7c42dc4fad1132c2f6e7cd56df08d273f632d66d47e04c77b9b1ff534e22344fc5b79b4a4f334512b263
-
Filesize
985B
MD5985d8bda136946fb3c19f74941df3afc
SHA1499777d395ae5fe7827b536a4d0234cb791e8ee6
SHA2564441b471b26a4f9a513a5e19d60d85cf684a2e43940b38c050938320f48b2a7c
SHA51270d5855ffe8fe70d60813edd46a7b542bc0dafece87963c6ac72570555cc0cfdf82fbd870d81e1de4937e5bb51c11f67b54a782ac57aeab5bd9d8d0366dccea4
-
Filesize
985B
MD519afb68bb31eb0c3d6d5b9de9d3bcf2b
SHA1ed3012a39245c8663cac1a2cdafcf8956a7e80e0
SHA256271aa4d38f5320745e3350bfaca507752c549c3c7246068b54be45483601abec
SHA51291490d6a2e448cd5244612f350cae49419eb58d26ded58b99b0ac5243a52227b1ae58d8ed926a0df0b5a4620806df18ea6f1bb1ad8a36d372ef3691bc71e6983
-
Filesize
985B
MD5168651318da57c8f66c2bb6c5adf006a
SHA1b629765ffc9e383b88a090305d05eb26009a89c0
SHA2565f39691e75b4bfa3868192eded4d551c79c4031f6af5f7e957961b19a6b7494a
SHA5121a97255f14e141d136dc0e11861dc0a9a4178fb1c91197bcd88c156d1ec8fc21c521483363a30d29057a15ed5082a133a5bac41fa513442ccae43b9c5adc0eba
-
Filesize
985B
MD5c9cf7fca2a877b9b3c5d8fb28fccd6e8
SHA124668010f8499f91808138f47a88cb961fab2afa
SHA256c7ca8919c1ef0f8d7ff3c8e026100675627f2ffd2fe1f09849e3573e42c44a5c
SHA512e6383bb5b83a237c5ae796aeb3383eba70f9809afbf571175ad634ef1ae3cbd975f352507f69637d331fe7395ea6117aa8535a559a88a6546dc5bca3213dc0d9
-
Filesize
1KB
MD55129675f7f79ba660b7dd0f3166c78d2
SHA1db0ba3474b61dda91a45519ac2d28a2bc114c23f
SHA256f2b9672dcdacbfd471c23870909e848a3a6f90a52c6180f74a6393631e5cf0f3
SHA51218fe86d65fb0bd1817aba915bf1c279ec8b039c5078267f214e21bfd4deba8ea4c64a9f976b66e04ccda4c42f9df5896a0251b09fc49c218c6f576b7ee626d19
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\633SXO0D\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\633SXO0D\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLSLTMYI\7LtMhDD92Ma00lBiTiqZa9x8Yqf0prCAroDQalmaDn4[1].js
Filesize55KB
MD5d447710deffb5eaa88df7082d90976a3
SHA1b6e97e02b255c2b5c89281429afb7470ea4f5b9e
SHA256ecbb4c8430fdd8c6b4d250624e2a996bdc7c62a7f4a6b080ae80d06a599a0e7e
SHA5122b6888491cd37c24c06df89f33da4e43d6cf4d5aed7358ce0382a59ded99731c95b0e3f1f2011a10797abadb97899f8a23bfd405a46604b030e80cf591344fc2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLSLTMYI\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\base[1].js
Filesize2.3MB
MD59f5bf11cd4068cab63057ed99069fed9
SHA17a6329b5dde6cc10a6b6753a18d1178f46ea4d3c
SHA25689e1ad6ead4278ad4bba8ea5501ca5c79b066c61cfe38b70169181520fb5b0f7
SHA512768fa98c09d02d0b72cbcb9701ad0547c72c401854f251445fbb5d446da2d7b24a66059cd1e55ecff318a064bf9fe69356b4ae18f4273c13d4c14a7f9dae0d47
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\embed[1].js
Filesize66KB
MD5266940708e18b768536a35ff3018fe34
SHA1bdc725b2d6f8442260d996146e0aac75275af468
SHA2563c27b6e9d3d30224a589131e2aae5370d19b32038e292e2d92198a73a8e5147a
SHA512f22e4c43013a4024b5bf2289d69d24f8089d56562dd6987c9cf8474a8b352f0af359c2b5ff6aa9a9370835a46411dc3523144e6043d393eb17cbf339c157ab17
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\remote[1].js
Filesize118KB
MD5bd24e895b4340f7fa4d8ee7e5d9c143a
SHA145aa69a80b17487f15a05f2b2b71993cd6b0a96c
SHA256d19c33f7c67935c89977505aa9bb5aaab498ae265ac93bf4694edaaf939abe7a
SHA512d12c23e51b1bdb384cd5928f034b5b542bc18147c36d09b8c82abcdcc869e0530d5bdb204506a7b8cebb7f245b8db6ddf6c2f4ed3aa43377da9a1ed5c19382f5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y1738IZL\www-embed-player[1].js
Filesize331KB
MD5e05ae65e7290835392021a7595916b92
SHA1f1a340473bc52f98f2e73ee422b5b10d246b2fa4
SHA2567a0c22ec1c43c774664255605c026a3025992bee2a2e1441d391e58b30cabbc9
SHA512c40fe5dba0e7209ede7845892a3a5c92085d88263efdb3b6b9929d1bc269aaa517d1dd218a449ffc0aa3b82903ee5a840e021d6ceddefd57aff6d0419a0e3d9f
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b