Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
21/09/2024, 17:51
Static task
static1
Behavioral task
behavioral1
Sample
f055369eda32e9594dad242f0982cd13_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f055369eda32e9594dad242f0982cd13_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
f055369eda32e9594dad242f0982cd13_JaffaCakes118.html
-
Size
14KB
-
MD5
f055369eda32e9594dad242f0982cd13
-
SHA1
d806746ed9bef7149956d4959a572dee53295a08
-
SHA256
63b0bfdb2617bd239719a3bf89fcc853ef7b4a586d931d4b1a1443a7c4d1d7ef
-
SHA512
a5f1da6c25d8895d1022507854f4023650c325c7aaca0acf44e40b93aa577085b4b9a87e4e192e25c351acb0b6a45c99df7678673dba951fd740da3c859799b4
-
SSDEEP
384:NK2VWCFccN9+wNDfCtxdAZgsqf+3rYp9YQqwTpUU9Iqr6OTGI0LSdXJ2:NK2VzFccN9+2DfCtnAZhqm3rYxq8UU9I
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007b88b8645d6de74ab21efaf0de98379b000000000200000000001066000000010000200000005d9f777e28a73312f017cc8ca50c8c403437f3846f0f83f6b817a0b72c5159f6000000000e800000000200002000000064416194efba80ce596775a83ec4d70fc6b03015addf45886b8f52a037f5ad91200000009a4c6398c64fcfe3228cec0a13dd42950a8a0220e6a994433680e817a419ecf9400000002034c399daf23cf3539d8217b251be6c1d268fb7d9255dcf113c97bbbac53cd5e4be6fb060cfc3610969f953ecc2a8e76ca6efc0a747f18d28aa161f95e05aa8 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 009a3f074f0cdb01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2B414841-7842-11EF-8FDB-C28ADB222BBA} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433102974" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "25" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\Total = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2468 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2468 iexplore.exe 2468 iexplore.exe 1808 IEXPLORE.EXE 1808 IEXPLORE.EXE 1808 IEXPLORE.EXE 1808 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2468 wrote to memory of 1808 2468 iexplore.exe 29 PID 2468 wrote to memory of 1808 2468 iexplore.exe 29 PID 2468 wrote to memory of 1808 2468 iexplore.exe 29 PID 2468 wrote to memory of 1808 2468 iexplore.exe 29
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f055369eda32e9594dad242f0982cd13_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2468 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2468 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1808
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
867B
MD5c5dfb849ca051355ee2dba1ac33eb028
SHA1d69b561148f01c77c54578c10926df5b856976ad
SHA256cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA51288289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b8452ebb62245f367cf93647c6994444
SHA1c1a51a6e06b0648b7161ac7e25fe3bef67dea154
SHA2567212cb55eb3e1ddb6837d3d3da977b9c173888e1490bb33969f0c8afa1f5d4ce
SHA5127775b22b1f0098c85f91c72a4ab0b5f0a0adf38672aaf0ccffc8b29221ef6fcf1e7c24ea787ae4b1540e753e34e8832d86c3999d77578e4f445eb48c52fa45ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59f4b1a327166745df728647fa107be15
SHA18fcd040f6505141677ea00c59d16f00d4e02c1e1
SHA256f2840e94dc2bcd9b5746bd02d16ade5d53dcd919ad76da9337b8fb9aad012b7f
SHA512652300b2179c710dce2f7dbe017820348c65e8db9ec39e081e84283d1f25df50164123fcec3893868c8228290ab873e49b9f4678adcbd9c2fba337e65a2aefe5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD545cbbf142f39dc38bcffeef812dc84fd
SHA1cdf2038fcdddf0b657c5f65af06e77c9f327948e
SHA2561c4424d6ed0970bca11487795c2df41dbc9fd3d59cb43d3bd4d15d768598249c
SHA5120b69838ff9f255e007de94200ac02d9c30fd1cb434815e156b8cc17dbfec180191b221e4d09eeea21ca587b4d9489116a1f3f4f9472b45db17ac59ebc81db1dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e877b9e2be0c18f08896aa6a67820886
SHA1842011a8da3d27be2fd9c04c3b542954fc3fc7fa
SHA256471c6379a8b72070a7be8949995997d18893eb01d413ae8e8f69c31ea21dfcd5
SHA51258d307428b09fcfb4832e7a6c683a23f88c2cb7606899e4a17c0a360ab4fa0194c92eeb2918f2cad15dcd21c8f286c464aca193972d30540230d20ea545624b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD545697bd82329f529493552f6211fc9d5
SHA112bc437ced496a0728536d67b3555356fb7965e4
SHA256c2146b74ddd6ebbca0ac06474d6f40bdacc936e29ba9672509defb29c52b1fa7
SHA512b8d95b2a1e8c8ddaecc46174f918be8de290eafe11f272509b003cdb21990b0ef406fd39af7f99f019e68f0fd56cb6ee710b17f19b723cc4f86e2684b02d4d18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55a0b8aa719b94053472565a51bd17b81
SHA1bcd94c6298fe898d49ee050508549d4322b95bed
SHA2567ec0407c999f1f73453fb50e07fd6f6abf4b2ac853eb4e21822f33fdc51c5f23
SHA51281542df2aae16b5f3d01dbd90b5ea95c16fae54def8e65e2ac5aae482d9d2c227fde539aef9b5e71197215da18312c95c482461b9afbf9d29f63d4f380a12e21
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5df7eea1599cd3b01ab391617d444f7ba
SHA1c9fd9b57d0076c6e7d1b9090aa66751352f54739
SHA2560dcdcbe675a286c970742c4bf535d47cfa6ecae1c8c83bb9d02c8e6dbae26f1b
SHA5126df24ec771712625506d4a4cea0b518aed5494316350612b828bbedb3287de843778a1e727793e8b01d202111e720ec94f14eb671faae1edfa8fb9fdadd989a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56d27fcbe364bb830f314087322c0b84f
SHA187fc0402e7c5cc12bc67b5e1ae64b44c4c6daeae
SHA256b5991e272364a8e2932603aa6be2a80a5254ac8da41c272b3ef84e69e57d425e
SHA512b4b0907956c3e7ca1a91fe588f6a65fc82fcd8bfb1a9505335d1451415c6ff13b0bfea72c0fb6ea3cff4c674404516dae06be68942982043eb5a792ed4c0d56a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f708b4761279235a7519bc18b8f50a16
SHA1d91a2961e3cd351e02dc234c269247f2c15d7f0d
SHA2563d4b501e0db28ede71aa697685e1af4444ae7f4bc646cd8a260a89b7d02dfe08
SHA512edb3c36ece2d3735c4ee8e58e1f5a4d6261fbf8bbbbec392b2f72d938f88ac12a58d2b1ad3522cdb62f83ce81be6cf41f49fc42a3d768b65b123f5da1aa1b5f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD537ca077def0f91ca2f505d7f3d82b53b
SHA158c637450b7099af34b38f10cf2cdd0d1dc2062c
SHA256f0494a4528788ba55adf06169d13bf1137df0a3d716958b4c9bdc859567d2bca
SHA512eb9eda1d6a3485255ad1800dfa6d004be8fcd5243242199641f3540d22953c98ef59a5069994a0168cb82238e852b2ecd212131d7c8b163f8e89f5b7bbde04dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ca7c5be0de2846de190cab1aecb747e7
SHA12210739c01d2df8625e603780c5e494363d503c4
SHA2567563491556afccc394f309711bbbe40be58937aa03a2e2da5e0aab216b787788
SHA5121709a9b4212cfe29c579d8c201e3cc6760b693ed49fbc9be1a33f977057f004214f04ac9d40fe0c7b19c2b8aeb33a5f587855085abccb7fc3c0562f06ce5752e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e6ee7e59a9b7b8593594e9d09447095f
SHA1e95874fabeefa23655d0211d745589a834d841bc
SHA2569611a2f51fb616e6adaa49cf871eb747bb50809a46eb7b845442bb64a9fcbd9c
SHA5124948144d37368663934e48a1622fdf2895f2ce05c981d3c317ab8aa375a849fc4b0fb32af11b8337a5d405bd688f17cb420b157de64bd42a08da147ff9413e00
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53451217b3b0c94e52989a9a623b05615
SHA17e89ff38f6160525cd468c71257815356b2531e6
SHA2560cdf77608b0483ab75f7ee891630da866142fee46a7563f55200c1d86c5e42db
SHA51295384c09616e7bb754c716fd659a7e72ba55347fb427b61b93f7bb64b5f1eec8a20c521fd208c4eb104047a8ef06e8b6a832b53c25d65f7753f57f386864dc6a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53d870c7eba3782aea87e78dac38dde6b
SHA1a7f2d3cbe0706d6aef0de1e2bba0243cbc2aeaf7
SHA2562eef961cece66df34a0617f07cdc1e09967d1d24fbf123251d6c49753b5a2d0c
SHA512e14e338227944072021ce415c090627efc936793310fed868c74cdb05293acc55cda009833d11126ece769a7ff696dcc7dc5853f2418a78e46055eafb7ab8fb9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD569735fc65be8cfec9929c98d9941de42
SHA1e1f560b69f35f93eb0d0f0503315f916063d4f31
SHA2564afda2efc9e3b6d79e6e13f821a42945f63830620d22e433c9d9ce0656ca78ba
SHA51211934ef289e7ab456a273ac3f4d72c8ee6715079ee354c017839a7ee0b88cab4cc4da53a8fb410aa144c572f466ccceda83cb46dc7b6a5443cd68cef137cdc99
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7844a16df4d31dcef93ce23b15ed5de
SHA1d0055b458917e95135b1982a5c09ff63121ff42e
SHA256a7fb89a2495e5a8b208386b4250da62d2e87d9d2223abf40c97b69d87a9403fe
SHA51254528a742abf2a66a3512132931bac63006390896f9287f166fa8cf23442fed868258d79ae486d6803c18b5d8a8084cf0b89eb5d5875de1f1292df05db43fbef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d2b00a8254946d6227b9257b9ffd022a
SHA10c0f02b7c7da85997f6b0cf22640cce1d4094ec8
SHA2561d88cdbcc85b42b7cf63bd07b513ed4f4b3edf2971bb713c67b44b1af041c0f7
SHA5124204fa666876f25ef88e13b2efa397fd0058cb6808a11c4b83534b4b67bb94337d5fa5af5d7ed3009ab443301d025c7f87551d13f0367070e90c6402da374697
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ceb034ba607837e9dff5271bc0cbf6a3
SHA128d0e521a5c26c23c1c2e8b4e41b6447409ec86e
SHA2565e7840d4be60c3c87cdaf0253702dc69678413b7770dae7b22534636007cb9a6
SHA5129b14eea85b17c68f38c62beb758ba9d6e00ba4a75c15203c4f7e1334368e65d551fd9517d48845d6a10eba08b244f944de5fcf27228ca9e02ee5124726095190
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58862b309879eb36dd9652a1d948eb21a
SHA137450807a186a9b1a000f475720ad64ea6686835
SHA2562f1c8597e989aa90c6bcec37ec1d25d49a5798cea9b5ccb8823a029cf20a682a
SHA51223a96c8fc807a2ee06f0598235ea1a696bf5ccaa4054ab1843319dda36c411517c30ef668dd0ac45ed5660ef3105b0b6e05634dbf98307bef444bec24cc7aecd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD594e7d06c60bafb2d34006082d8b17bf7
SHA13896d60f09398a3c8d9da7bcc03f899bebcd04df
SHA2567902922df170079ac60ac75f138587210750532392d76a89bb6ed6aca55dec97
SHA5129d6b8a7301da34f8abce0c9c18d04f96a12b6bf118ee58b28280cd042326ebab4bbe85f56d559eafdef312b67a4c74e3addf569983522c696e5d2034f900360d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54cc1841a3149905563b14f7ba974d5d5
SHA152fc16de5a85c8934018cdd373afa3bfa39e1083
SHA256f5ced6b77174235fadd899cfdc6d8c29d6bb207b117d4a763e3cb0515b1bf79e
SHA51207c006366ebc2a074968b624f1ca14044770f6e42d9a880e9844d05371d248cb5a932d37cf2a176145c2f12652dc40acaffefad6280c12101a3437170a213c8f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5690fd5cdc1306b2f8eb3314f04b9a28f
SHA119199b608f3222e12afb7e9f98b551a700fc2a4f
SHA256bb766e934e4d9fafe2e93cb2b0f11eaa9f176fe208cef9958b9c9e95ca821e1f
SHA512dcf9d7ac4726853d50e5d63db544dda38bb92284cfa549007f853f5b5fb59fd4e6741b77d7a99cb0ce488ea6859e3118cc066557d433d75f1697d94225f759c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aea206d0ffdb2470da96844fe1cddc97
SHA1debd559051c5bf2457d98d87cc90508872c59a9c
SHA256429549c00ae18317d9fedccee95b3cefe1d4976f7077f6509b3d591e076280e7
SHA512f33a960259559233cbe836fc156b1f6513ab58660d1ceb1c57847a6bd6b1e55327f1b2bc8186eb7021875fc603e45c7b6ea541aa99c2af902cbc0f14cd6003c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ace5c676e078247f4a7f8ad23b1efe3f
SHA16b75debf1deca1497928efbcc5c34240f9d5b5d6
SHA25617fa8e27ed2dcf776e568088065be6f0ffdc6345734fe9a93fe286fbbcf325fe
SHA5124f03357c7a765c198eb55597aa557172c4971720bf368bdde3d6f6fd9fca5e7899da00fab8f216ba0c01ee090f14fabf3f192e4b3ebea4fb92231a12b95636c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5583f2d0dfa6e40a25a2b452e28dc969c
SHA14ef5b1ae4f2b92665bc60ade7f4af487d3b07861
SHA256ad643760bf2912e4561ff6160d7ebe07ca712a160b2f7b717658e11c8454f8f5
SHA512cac45e25d2df719dab6e608ff92d0d231c15f897613c7b73b888e730a8021db9a2a9e3552f54ed3c157336e27094c60547ba68cdc67b5eeebb5f7146b335f3f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD552b9fbb0589fcb3c7742639884fdae32
SHA13f44f1ecadc02bc9094e8c3bbb26e8572426d539
SHA2569e7276ea51dcee8c1396b7047040bb4f7b66f71c2361e1bfd3fdabfccf11b44c
SHA51234956d35485628e40b454d65af3d88a9ef588e6f8cc9f35573fd61a793a70bc1df58e54a9f7718d4c65a7942579c47231b8f13592cc5fe55bba57043835fc3c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a4eddc317bdf9b0e4fee158a413a30ee
SHA17ecc06ee67dbf988b42e8664d9af0576d7bf521c
SHA2563abc22433d2e6eeb33c952a2a8aa0e783c02eb489ee09c237197dafb17f078de
SHA512b4b08f9bdc15a7b8fa182575d50d6bc1271b7c4cb8d927502492a65d53f3c152d7b708665eaa639aa37dcb1c045f229e22f0e28afef2b484caebc7b3ff9ab589
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD521cf3a120a70bc64b57650414fe63829
SHA1e86021bd4e90dccc0372f778fb9a5be75fbd47c0
SHA256c2e395f935ab009b1666076c6273b9543cae68fb3b22b5048e9ba470c7a17b72
SHA51235aa2c18e2727fa99d38e6ba9f29e606fbf7676ff62596135272603425413bfab8b49371d4dacafe69b2607e406ab1103d045dbcef031aaf50a9076a080e93da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54b649c15a9abe3328bfbeee8e94f5a1c
SHA1ef0f1ad3caa703b229e1dfa1842021016647ab5e
SHA2560fd6673ca9f289e41d549e860d2389c56424ccddd62b5bea9a81e395a4db23f7
SHA51250e46590b8f9e9463792d2632449f0ffeea545183d54fc7ec4d970301be3c5fa3536e5eae9191d561e01277ecf340bfe8da46a41ad956bf0cadccae19c383a2a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cea6637da3d02ff8dbba9003ad316283
SHA12ea6da820519f68c635e3453a2e93d8249ba4fdc
SHA256e709536e8c6c5894a8a2260efa984e6e4717ff2a13745ff069ffebec5fda0929
SHA51217dca4f39634176b4c15ba7fe6963bd367a12261710bc7faf58d23b18c75bf4a61d2e112a47896d6e8f9f01f92008b3c12d8b4af2f591ed7bffd7c9d293d9f7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57639dafedb9df65b65ca93f4c40219b9
SHA142b0f9a5a7a1e85955503b504f297b22338b375a
SHA2563d30624ab2cd59a650cc7bab9f1cfb689786a7a03c0f9939011441ad367a02f5
SHA512f9cc0478c18277fb4b1d8840cbd02275afb40286b6157d5420ad34a5eb9e6334d523a27793db1d6d066524ac834b21b2c2d0bda936d4e102ebee71b2c9b69d6f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9332cdbc796b02fb88666f9cee42b66
SHA1293481089c0da6057a64af08fca6134b34d62060
SHA256891391c0e4c96b58a2eddaa829f7d53d4e89d493fe20fa7206147fd1619ac283
SHA512c51054947125075d878d967c27b04b013274f1efc528ae3e9b048d254b8783834f7dcc08c1cb1c0da71d4cea261c35bd48a8aab8a1455d0dc715e50d2f1d1fcf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD538562ffd5e69a08975c2d1f5170182ac
SHA1b647956403e7aa10bf089a50bb0bab2bbf8cb044
SHA256d4ea8b953c43b30c1c879e02eb6ac8e29926004f269fb11c40da44ff33e00426
SHA5123d6b7db36572a70cfad30d7939e0bb3a843ab103410cd887f9cf789515487581527760d22d69239eabd18c1724323e6246efc6fdfab9855daa023b682170dade
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b3edb6c2989d04ce00859b91fe21b523
SHA15cd35bbb96737aaaa399995616640e891bcb56d7
SHA2567718b1f6ab07a1a46a757ce141865e5ce1238ed339d6599c5a2d5cf8b07241f6
SHA5123d0a5fe8b987b45f6243dd51d8e529fbd18517d587632948826d3ff340a57382fc3bb46815f13ff90016efbb18835b799d487ed14409734a3c78e18f9295868f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b3e88ea9b488f58f504555e2adda1453
SHA1a13ed6b1e965545ac12a60f662ff473e677b752b
SHA2567493fad54da616f1947147339d88705acadd6143d344ee60c9bfe1a8fe98dd7a
SHA51241299ae7fc22351ace78c93cf9bdaa379323c4038cef0bbc26c858d74f186fc26fb37b0c65beb1cec0e2a150caf90c8eb7c4b436fed0a5a100b56213b25a3244
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52f021cea5576b8c327fb8bf0d6241703
SHA17b2b5416e9382ea63347e91c3d996f48f46feac5
SHA256fa3aa30b61a128706fad8b2d72a373cf1797e4d0d1113589f4b15e98f7d1300e
SHA512ebfbbf34f2a0a240f916225c9a66a73ff4f7e327b36a014cffc06aa78a93410bcdd93df5f9d4656c9ad9a9d81736f21f618f2ebc61d9422e8e6530808a601aa9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54374af2daecbc254729e766c01eca582
SHA1e05301f0cb7b43b0dd3064774b1802eed39fe220
SHA25680af39a17cd55ddefd4dc29cd9d057b0b2756c209a7137bf182734a23f160d1d
SHA51221b02ba6bec9a031d1bd7161f017144767ff1da03dcde48ef00efdd9ad3ba7ca2c7de467bb549a2bf3948f77cd14df3707be4fafd194308e7fbc7e18e5c22d95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50447999a8e655f829a1c7288e4cac79c
SHA1eae94010266c1fd8c0f9ce8e3e5a0099bf92027c
SHA256b2c3b6650de5eacf6df24d6cb2656583183e36f92d5b4ed8bf77d0fbbed089d6
SHA512245a9e713b07ab35982ce3ad58ec0609f4cb0c66299dc59384e1937bff48050eba1bb0e73c73d8545707bba80656c40d38f7c171ab6d4ee2fddf3062224bf0a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eccfdafcf9ee68960294993ee41fbd72
SHA1afa80963d1385c7597d6564cda1e8a33ae33b042
SHA2565cb7bae36a4a51299be94be179d18f4965ad8605104ae41d4d5251f1ab52d904
SHA51240f0dd7086e1b3d707e63b5424c9da551d5496e2f5ea643d7db054603098f480e2e369f0948906ed1a88497ae49499b91a2286c3c90d3a0eecbd7a3af5c71093
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58f8852762d3b45cdfbe4275d891b8f2c
SHA1107f540bf527907ba38814cadf9e4913637fb600
SHA256ded2b0f1ee3eba5e52cb874cf129005c00bd072d93b234b05c9ad8d24f8d94a5
SHA51221673866803eb31b81ec947100cf52c5c9f48f06941f097d6241787a5895832b24ece395e23cd27fb0f664d7dd31999c12acdee29ff4ae34d0b9f26640134e13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD581acfa26a2d20a686e4d28cd1d58681b
SHA1d7d57075f2d1a61644f8f45ea5863d0e93a886d1
SHA2563a571d9f8aeb6d517aae3431c821a029d372f07579d7b44d888cda067111c7f6
SHA5129f9806aee02a55a8a9d12ffa53c885f26808cfc153b544af192cf31986670b51d6753a9afc806ce1d9f5746ea12dbe52400fea454a9ad6f8644cfd356283eefa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5babd0aa638aa7ddc5e209a00b3337aad
SHA1a4d0be997c8079868a75834dd9a3b568f5cf4947
SHA256a3b17d4d7b3455809071788e6e400d06a21fea7345f5a288c1dfb717414ec798
SHA512f26320e572d74c72fff401113ca0cd12ea7f3124933901bb4adbefacd5ea52c013466690251646b3143fc1ba8bb9e978a3eb015b2adf9de0a886ddc2ca04635b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD563d9631a477accffc10bb0fa0d957383
SHA1013dcccd697b04df0c6315b380a87cee0349d908
SHA25610be72ef8f1cfd76c5662a6434a85ebb45cadbda5d6c7f1725c3ce2d00d52afe
SHA512c7e918df44678e6bbdb486d1646e792c6081b63d6c68a7c762da0eddc90b010748eb44607dd13085cb1c594eb85602c547f5aeab274da81685f870e7ad0dc574
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a98a7a348531560f9b2e1d9ce01b36ec
SHA1590bebc96e344c509858eee666147186667a4018
SHA256a2113c26ad145826ebdb3b5d87b9930052a3131b017b621b4ecbae4ac608f881
SHA51249c818d0ef4cbf4823f04a186c2fbca6c55641bab97d208d8c930ec5b4bf092304a0097abaf150c076e612481dd2364b5110e1abdd2ca67e0ed3d03f8be2f19b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51267bf33b986eba869079ae8af171eea
SHA1358abc4cf3fb5a297b10fab92d706fb8efca9f11
SHA2567aef4ca76e15a4ace9bcdffcee45b87254d806b59014d91e7387ba319cf18a87
SHA512ba2d06f13ebcf47a83c66afa305f777457bf03870318da4f90b877047af0cf9ac1c4a4214a92a7677eb72a3207628039c5b419746a5713dc1e711f00085e11df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d2c540f96faf93827d09a8c2a081b7c5
SHA1b857097977b56230662febafb43c1222e4b5a411
SHA256d90e59d73755a0b716494a7805a7d7066590608b460598c5df4cee05eb50215e
SHA512c1668a409c31979edc82873335fcfced7fda765c60b1b964744e4da1a6dadf9a7fe9f1f6210d0304b756a4daee83d28cfcf21034029aebc00e97e658c3770b3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59da427114dfe6f432af598a016b3c2aa
SHA11208de9ea070198a38fc54869a4f480308789ccc
SHA2569d8d15eb5ba0a7567951ee824b2c65a9be586d33264bc02e878c059939347f16
SHA512fdf9adfdf1be8fd37e0c8da9284ae8d7c6631a6b8707ce9ea393b6100ed824d571574fe5c108117cda19c7e2a5885a236003fc4e562925a678227dbd505ead61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7702e03757ac1d2690aadeef9635b2b
SHA1775a45104c4b658dd52f9659fdf5039b8343600a
SHA256237a0e966051960324046bad4fd6dba58f0047bcb75c6cd494612d7a4ee9fafc
SHA5120553cdff76f13489d4d1218953ec794bcdc86cf94867759f3fc9df0a3065712d3e6de5cff8acf26d18c081817e56cb14b045b2709a302af9e111ae6de5988735
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cd79d3cd2bb179dbc0792dfc3e261ecf
SHA1d68d198896ed1c861669269fe5e0eb6548244151
SHA2565783df8cc813960c441920d17994f12624a963b9f47bcaeceea61a11b27dd20d
SHA5122279d18d5df58a4b667a5b220d7771bb35c75f5a356291513dead611d311936c5dd110cb06a3f02588eceef8f72239fdd9c912dfc5b56cd5bfddc9087e56b9fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54d324127c66e284eba950c3813e62e18
SHA15b85683714946b77545f086386a4bd4a74a55b05
SHA256216955f717d4c1f8a6202da344ca3211f466ab1c4cc895c8614d822247ea0cdb
SHA51263b5a1a41190743efe34fe9e20a996e467c492aaa57fe667ec2db9ac4c8b63516f769ae912160518fc0b98a4d04552ec9b2e4aae1f71ba0c5a449264304b7bb0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1
Filesize242B
MD5f9a559248d98d00e8eab2b55047902ec
SHA150c8c5bcbced7b2b793dc4120abfb1dfacdc18d4
SHA25638d0b4881913db4f7561c56989ad5fe0ea669d89f39b60b41bde17fc3e23c9e3
SHA512d3ae46084c25bc56d676222bb06d1bef75a2000c58107d42ec61a87157674ff0e1b534d49aac4c8637f751df436f7d809430e0fefdbb04fe4dc60eadea8105ed
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H7UVK5L\styles__ltr[1].css
Filesize55KB
MD54adccf70587477c74e2fcd636e4ec895
SHA1af63034901c98e2d93faa7737f9c8f52e302d88b
SHA2560e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d
SHA512d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\recaptcha__en[1].js
Filesize537KB
MD5c7be68088b0a823f1a4c1f77c702d1b4
SHA105d42d754afd21681c0e815799b88fbe1fbabf4e
SHA2564943e91f7f53318d481ca07297395abbc52541c2be55d7276ecda152cd7ad9c3
SHA512cb76505845e7fc0988ade0598e6ea80636713e20209e1260ee4413423b45235f57cb0a33fca7baf223e829835cb76a52244c3197e4c0c166dad9b946b9285222
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b