Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
27-09-2024 03:34
Static task
static1
Behavioral task
behavioral1
Sample
f9a23c390a9b4cca36c6801eb591f835_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9a23c390a9b4cca36c6801eb591f835_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
f9a23c390a9b4cca36c6801eb591f835_JaffaCakes118.html
-
Size
175KB
-
MD5
f9a23c390a9b4cca36c6801eb591f835
-
SHA1
102170341d0828e796c572fdedf0c3c60345b75a
-
SHA256
fd397a3b930418a04124ae2b4c862d0a1f3e5aa2ae57b088d9c89142c5b23409
-
SHA512
6798228070a7b4bc78ba53a2a2d38e58d0a6dcdaa7aee60e4d77a0827c54a5844a475e13bb17d90fc13e395fce8522e49117c3a081d93bf0cef4165072392fef
-
SSDEEP
1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3WGNkFWYfBCJiZw+aeTH+WK/Lf1/hpnVSV:S9CT3W/FfBCJizB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3058" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3058" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c06c913e8e10db01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{5C05BCC1-7C81-11EF-A02E-E67A421F41DB} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9593" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9593" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9593" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433569920" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "7889" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8004" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3058" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1284 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1284 iexplore.exe 1284 iexplore.exe 2756 IEXPLORE.EXE 2756 IEXPLORE.EXE 2756 IEXPLORE.EXE 2756 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1284 wrote to memory of 2756 1284 iexplore.exe 30 PID 1284 wrote to memory of 2756 1284 iexplore.exe 30 PID 1284 wrote to memory of 2756 1284 iexplore.exe 30 PID 1284 wrote to memory of 2756 1284 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9a23c390a9b4cca36c6801eb591f835_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1284 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1284 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2756
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD54f54ec1c23022688bdf38790fac7bbd9
SHA17528e8b370e6a3d1f6ed51d0a72488640fe85ebd
SHA256356a2f2a8318b6c884a08f7831f9b14e30368f12961d28123dfad83f32c125e8
SHA5120e1005d650e9569133091cd67b8dc3bb6731935a04627da19dedf05165459605ac95deb5199b4351ac1f212590326af9da29d9b3d52d35a3273bfe724506b9ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD551f2fbb31ad0243e11435b84cb517aa9
SHA1bbd45aa456765c349f078d14e13e696a1a58e404
SHA2566edda5b2107be852aab76d82512f944a1e7bd7bc237f3bc257d1e43b5e617f15
SHA512d2c94cb1bbf5f268692c0dbcdc821214b213345d5311aff4b25bdba0e09af3b50a5f1f7d643359776a8c1f4004ecbf0917e927a793bf7abc1b67b4e95a4d1ba0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e08c605cf4734adb5d441318abd46ad
SHA1900f271d314e243abeb6c0935c61a29aa3666101
SHA2564b5e606a5a1c4ef1bf97be686a7571ebe066955ebf2b5b1e95d0d3eaa8ba80aa
SHA512ff366fc2c78acc868fff7c328a189f643d995f63f505c5873a7d291b7c54cc929d8112be3a135a73ca6961ecaa49d03c4ae37642903191e95c00e67238125901
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5335d4a384079a74c46ec0dfbb51f1100
SHA16cca539c61045890effaa7900ac3cf00dbbe77a3
SHA25670744172d7fff4858c386669729d50ec9ed5af5bfec8507d1979e2ac7572f5c0
SHA512a105985fd7dcc0bee113a581127b1a4ee3707773a995022e1ec47287909b5f31e90d98528dea64f9a38fdc5f117efaddcb644e3002b4147a9ffca97815c6440c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d38c6fbac63a8fdcd4a79f7314edcbe3
SHA1ed724863cf6e3836f8917907a356daaf95d050eb
SHA2563e72d0b104de9ec50f92946de31a9759846e84245d31af1f04915bd72951ca0c
SHA51222f918023ca1a20ffeef1ff469a5ec928cbe54819e542770bb58a1d942dd9c093f28bd362671882392028a664fd880e03eb169d598e114066f10c36421d57a0c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c9e7c24131f2e0db8a2070d842c3cb9
SHA1f6549cfeb581a947ccc2148db088623553a49347
SHA256d0d3f4812db6a6fbc82864aea45e79332ea0433fd9e63b64193e80f024216af7
SHA51259c16bffb790f5585f9ab6cea02f57fcc73eb6ee677eeeb7707326d98bc734460753bafa9ed47d30558be1d3ec32c6f5e94c852081d10d9049b873ed7e8a369f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52609b6ddbdc0ef7e85d4bdea33b46c06
SHA137a7a7d7b5a81a024ce9f42a7008158576887c10
SHA256f51bbb31c25ec1d81bccd07b1bfd0e8088c320d81f32cf143ebe1a649bd14391
SHA5127fc84ad088a2d50905d2f8a7f9fb519c29c9c92cf4a950453b720b14002d33f29a8f344461d27e9f443879e1ea1491c4ffe79c78e898cd2b61649c32d1f35633
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD541c11be8269b5ae37ae47cf380b1edda
SHA148a49e12ab224829bbb680a3793e61d2fddf32b7
SHA2566b6a351c9fdd9d5501f6844b37643b64c141e2173dd053363523afd7a061968a
SHA5124dff3459f3c4ab48b815d101d7e9da4670db0e95ba8e825194c3df4b8486cb800fe92ad56e4ff58870f38071b1553277f7461c02881e6f4cc1b2610ccaad7f7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5886dc374cd5fbaf9e6080dde85b466ae
SHA1b57b87ac0b7c988f6ea2cbac91308ce2f50d0b6b
SHA2564932b1d58889689bedc05122bf891cde5c4c2d2a6bdda1073abb6f19aa919c17
SHA51268addb2ff7d947e4d832529cc165c4507dc52ad334020cdcf91ae22e169dc1727b576e0323e0a8e596adba0515b38109c8be7dfe73b9fd65c399f3f9a31b8564
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ddadb316bc96d8aba2c56fcb1592bb5
SHA17f5307f657fef9db479ca5e593ba251f0c5d3cb2
SHA256b1504418c04db358ff5081e14fd21c57df975739d512efe9319e6efaa119a910
SHA5122bbca161eca267d928b9bef88b5eaf330e07133630113c0099b677ae122f09ed76eeea4d2dc6a4a7fcde05e67f7b7b1d5fc591f2723c6c49efd6a3827b88d156
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d07062e4f8426a376d342ba9116a4be1
SHA11145b306fbc917d7ed973d68a8c0622a1f7d0366
SHA2562c2d540945f49066749f51d37ca6ce8b962aac60c4a0d0ad24fd474106ef88ed
SHA512516f6288994d5da981b87012fd0ed0437f90ad7590767b385cc58e2d391187c3368f1b7e8494bc6b835bea5daca12174f650713048bad54d160b44b2ce869fbd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b0af375731333586cff8319c1c0c6bb2
SHA11bc7c68d494b1e8ed94727fd413e5b42d5675c4c
SHA256d20c5e42d603e8073bf0be3f5df67e56c6561822b35a049649807dd59e58c398
SHA512ddba4dff807a7b249ec6982abc7e5fb2a969cc76f445489026d89e9eafc54882c4e19eba17446c3e51dc01e556202d55f7eb7089b61e17ffd6c9469bac9f2587
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55723dd8f4cf19fb87d6a4bd2a1b8d3d7
SHA147ec9cfd89cb32edd04f3c734138587a78e87822
SHA256ca13ed186c4165bcb5f17a8e2368744bcf26439b3fd4b04c6c602fd058b47526
SHA512db50ff10f1e92a718dfec5558499e216634849c72f12e75f9646bd901322ae1031c3c91736895f9ae798fc1b69ff8cf474aed17aae3af63dd319b02c0c32ef3c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ea7a524bf318478081290fa38e5b4173
SHA193095f0e6c0777b2680d2f1b786443c5fa4a4b0f
SHA256fab36d09343aa7079499e96c07b72f194f1dc65227d815d87e6a61f34af541c0
SHA51219bb041359d8933120b29d94cdaea8f59439495456a00f8a0a6a0eaeec56ddef2195276ba9fd85f8c0ea8937956816e495c12986c56bcbb076ce840a1fcbdacf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c078b1fe74d3dffd2aa646f39fedce4e
SHA1e2dff77633d5cb88fe65a7bc7d19091a0a3c7e8d
SHA256b09f68bed03fb6fba628b4b122d4d03189743ea949ab731d858d50dc19c5944e
SHA512ae709d24a736dee465cc98d9a6bcca2f9f0512aa2862028f527a5da79c79f49c68f8eddd3d7f308ebbe4fff0163ea38556859d3f5e07a28b77b655eb369eebe3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5061b0d849e4c9ac73d2544d431fd0ffa
SHA13a0580b130470f9a13c5c762055ec1ae604e328a
SHA256f86baabbefb8da0ae4541e692da7f6c59d26de60b11ac5172d5393f717cd9053
SHA51263c2088468b054c9bb6fdccdf92b8e76647145479cab6264ffb0f55775df202bc03b0fa30eba36349d58dfeddea31acfcd1419839b40bdb23cb8b0ffe8c41370
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD594cd2a81a2ec3b4e21a296bebd17ccc8
SHA1a3d71d1d6f2ea3dc4c96954877bc231e06101085
SHA2568325a3a7051716b8ecaac40c77c1dda3656ee962184b2e3be210f942f5971ecb
SHA51290c8b5f3b5ea9c49ddddeaf3ff3ea3dfb65b8a65befd5a48eff14f96f5e76e237e53fa77950ca37427f20a489f13f134cc15f3dd04a6bf654beedcb6a0ad57d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5246a6df9d6a01d96bab964625d524b29
SHA11da99a139005acf46bb649a9e23800a019cf40c9
SHA256690bdbc1e3771dafa1a3515c1e6800d7a688dbf7ef1a0520ee0430b65e8bfa63
SHA512df79fb672ae003b0f1dc1b75d6a04ce2052d136581e4170f97eb2dae302fb925a317407f41c0e8c11f19eca596ed24346b4d33d0d8e7ee5235630a9e5c422713
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD516d1b4390784b3c23838cb6d6fa5168a
SHA12bdac81ccb8b000e17bf2250d409a0d847cdd530
SHA256d625ec3e5dee786db21b76e1c14a6363c70d564c722401e79d97b04d3b548741
SHA512c60e18c01ea350b9ad453222be98404f40c4eb6ba6d7fc3f6648a77b3dcc2ca727a5667581f242701509c289f330dcfef182ede06e67e67f6c7e067a4d4c600b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5df8d34c10756f5d64581e2d86d295bc9
SHA10a4a75b28373c041bdb22b25cb6b9280d9057468
SHA256bb57a406aaffe4b9774dc585f015b236562d546d66bf2aded89b6090ab213045
SHA512ea90f6a5c6f347cfba94aec22cb5d1ddd998f4db9239b1a2c6428857ffc60349cde3ee30bdc06ec13f0c6386caca22a91153653d29c6fcd54aef0298f5a25eeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b6c49b36f16e838c372955e0521ce379
SHA12ef98d341adf45e94fc4c6469913eecbad53abd9
SHA256a77f35abcd324dd496fa3c42769856810885950a2820bb26d7cdd2bdf70cae39
SHA5123c1ffc6cc5bc4e89c440f6ea74445ca4303a5665b505df72cd797f5b001acea42cd950cc672711bc699c88698d0af150f571d7439722942ff635bc186bda9c59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dedcec5e862517865bc335095f8c3a53
SHA1a1644d1bd09883b6d8e4d44f0caadd325090a93a
SHA2565950af61f8169c51a3f07d6c2b037794c1818f49e7360547120f78d64a0cb165
SHA5129efa5d5a318a40b8f6bb175651e067c6d6a9ac370f7ee92c1157903cab474eca69f064f43041cdb3ef91305b6fa3310d7acb1aa943907b09a65d5d1814305dfc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e87d62342466469ed4182beeba271320
SHA16184cc4b527f5c6cfe1a4dfe57d3740ce2e221ac
SHA25635c3fae68a54162fabd0a43f2d182e7cfdd263e3460ea503cc90b7107163a054
SHA5124b037382abb02fdaa5d85d7c77535df0021e11fda06ac085807c4c186dd8bb22388ebd24b89f0676053369bae40e86100332d76982ecd5fc8c8739844bdd9076
-
Filesize
575B
MD5237069f779096dbef473c9c4a639b090
SHA1e77aec88a016b22c4f9b48d4d7ee286c9e4f7bff
SHA256061143e59dd6280d84a1a335d1a9c9e900ae78d16be655c5c635e895180b2231
SHA512fadd29a9a8038ac6b8eda2d1c2bdc2f538d64573a0a3348104d894045745ff119a4df512b6759e74db3916d584bc2203079026f4cbf53d9352ebe0a190848257
-
Filesize
575B
MD59eb686eb2433852d535841990cae5058
SHA14eb53571b26bb4ed28be7e621e6e5ba32f91ba68
SHA256f1ca3cb49fe8faf618af16fa9aa4cc0bde4e91de6f2a67995c56cf0351b07c4c
SHA5128e5d26816207499396393d426b88a0eb3d83943e1b102a4ee74752e4ae1ef750209d171db85f646dd24c9bb265045e1d1614820d2f1914a0c12776e96d9a1c4f
-
Filesize
985B
MD5e1df14a6b9f8c4cd520e26855eb822f8
SHA11f7e2561055549c5d4cb3f816c79c80a6b8a5b49
SHA256939d7ab3131c59f6635651df1d715a046e1c9720f6944b5a11c86b0026536cc4
SHA5126e31e351d34a52d6736482dd25e306682aec3744a81ba45ac8a930e68ae4453c5a400b92b0403aed04a5daca499bea7771159b7a2e922d0e8719df8de503b892
-
Filesize
985B
MD5645d3a48e2418c18e8e62fc0ee4642b2
SHA12f41783091159df54880a271eae9c7dbe85a3825
SHA2562bfa4fc1cdf7fdd470191e61ed02fbce0855ce4f2ff3f17123d923b5545d7b1b
SHA512172f0363e481d01cb59f8bb938bd1eef5d510f324f50f26ab319c04a8885ef9718a1d9da87c27e1e27fc38ee99c6c702f3b79d9a9cb9d1d9868b1cfa06bae846
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
14KB
MD55a45fed16b83540142fa05c02ad47af2
SHA1ec4225c8303f5c5707340a3c819b1c0191c15f1a
SHA25628fb7a09b465ccdfa03c7271325d14087cf16eb3420a6eb18d1a379528a16723
SHA5129134943f41f708a2067038e33d211382953f541af0741316198bca76fcaaae64475e50ab081c921b0020766e2cf2813ed5621e4b60b33fcfa4986c03183dad3e
-
Filesize
985B
MD59322d0cb502c45bf8c27a56567d166ed
SHA199f7abca099d181816b8c121a2bf8f4d19eaebe0
SHA25677dc21c23dc74d19d36016fe0ca55556017c38fa314add63abebd01bc5ea0d49
SHA512601e24a9837c2981f8d5eb1004d905da0ecf3d9d77f56d92e9ac76c25e36f9a10c3e30a1fbb11b556dc1ea3a869340fbd1fb49f0fe386dfce6bc9d63c73410c3
-
Filesize
985B
MD5973aad1f925f6d2a7fa8c2b4c751a5ec
SHA1160f8808ff9a3cb288c09c8c14f8fb07a19eff30
SHA256c72a8b8f153afa76d33d709ae97a1025e16047452f839efd1cb4824601abc822
SHA512c3c9a5fa393ea3680a4560ee15ac336023c3811d1e60bc8809b6c3be52917feb01b84b557e25050ed4e67a03fca473f0bcc3983231000895b50deda64f4c9609
-
Filesize
985B
MD53320df2f56e9b07d74496153dfedd5b3
SHA1da8dae008c0892845171181e72f50c44f0a8f504
SHA256487ee4dbe702f6f7659cc22a6242d11eb7e437669d76f6b1f64ae8f285098f92
SHA512be08397e7138b2a20840ab9ed1c9bec1f28600385edbbcb39a69b7a1ca02903512a16cd592c2acafbbf1028cf1705fc839de22d80598cc253701e4c84a496289
-
Filesize
985B
MD5a4ce4fa2eee7708ae3d7d4b30dec0bf5
SHA1d360bd14024ede54fe05f7e6b8c0dd93a5ffc51e
SHA2566035f2ed33dead3fa0c39aafc36858c42f598286b9f3e46b77dc200e85ad9928
SHA5124adf5ec541f82995e6e853398bac34e824bb0a9a29d4b8fc4a4f5e0e69e13ab00ee8220ddbda3a62f3006f4896b64d6a0aa8ede026ce2765d1cac73dd673bdb4
-
Filesize
985B
MD545c8c9f578adbdc8699bb90332386b23
SHA1b9af1873e10576c363ea0215bce74bc6b7a4c12e
SHA256c88049bee85745ec46776745064f53cb3f1f21760a52dabe9992b1e0bd5e04ab
SHA51264991ffebba96a73209ea32aef5c7632fd67664962d6f9f61b9bf98bc35ef9e9dd84eb9d9bb2cedd2255d35cc3604c563ca33629f152834bdc39c448a1945031
-
Filesize
228B
MD5a2cfc08cc4e9b68492b1d039da19fccd
SHA11a61e8342d1f2460c78898d640f2cf50a9ab5d2e
SHA2566062e1aa711393e8614bce8fc6a7dece3347152595ac9aba3a8b914ab50e6447
SHA512745802780d09e3b77577827a4e744a4fb1bd17ac6625aaf910f56029b9604fffb34294f78fe98d4c49746029af476528995d66216667a275c067ca8e7d34f89e
-
Filesize
4KB
MD51112109058f9bfcb4e789053a1695975
SHA1bda5e0e91428db39621c01b1e3cdeb8235b98250
SHA2562b43fbf89884d8430c3b2b1fb5c410b92769d3cee557d7e56261ff3d283fd00f
SHA512a78a4ac1cd4488acf3452c7eecf3b481ae44bf822b309f6528b5a62bd3e472bcc98102f68a62b5cf8a373b3e3310951e8e9959a0f40a930c6f5b1f4cdb24e7a6
-
Filesize
985B
MD54db79ba4fc1d3a6d2a2b070ca6bd3c52
SHA1a11130af24774d14be128106e4a98f099a67917b
SHA256edec2d56ce7fcf1c5c5748aa94ff195d7fb6e77fd2d2f84d3cc4caeade0a0e32
SHA512947fd8a4480a39132904ebd1d3af813c30010bf00d4b4eb0b29125f8f33ff327a2dfebee1dc73a43aa5b823570a35798c4b1230bd7c90754703f45aef6d57bad
-
Filesize
985B
MD57772973995dd9beabe335416832b6eab
SHA19df03fb3bf9a4aa7e28e2883744d7984527c7932
SHA25642c0a822485a858eeffb9c6bcca9042c11924621531aa0f1df28cf9bc0dfb211
SHA512e64752246a4e3819e75fc70b44c2891f91a55175dca47a8d2c4278d9752195e7479a1e5fbb1ba34b806442fc7c5d22a7d2617e6eed3950f5d5dcfc841fddeeee
-
Filesize
228B
MD54e096c182c78a7f2150e2a4e80718898
SHA163474e032ee67c4e3330210146ccc24f5f3ca7e5
SHA256df4f64757b056cc25406283c8be5ed74a916ce4581ab59ebb604f88d048ca031
SHA512be3985a3287f5000947764cdb3119485e6fcc6c36be242542490707d48536674f00c4a2b3cbaf83d548e14c3591e1d34ce22509b4c6ce3d688918c17cad74c60
-
Filesize
228B
MD5236284e55dd78a4eb9f6029b8b17db5e
SHA1ee453416f8f6d18509884805f51970b2638df40c
SHA25693a478dbdb9ec0540094cc66894dbdc23484d855777d3f06c4df41856bf5aa57
SHA51258f4c7610f80f29f7dd31d2b7a65950e7b98628d4c3c32da0862d97327ca4c7b1bf5ede82488892d3c7b1daa3dce72083b4f9b531a6d5db01474755306694a94
-
Filesize
12KB
MD5d7956333f8903bb12198d27ad3f0fbb9
SHA1a43997e56caf9801053244fa2fe104465cfa4849
SHA256676ba7ff0030a053cd57f7415463ddbacc4dc3564b458d8719215b996b9c535f
SHA5121882d3c929acd74fdf5ced2e8ffd291eba8d4b63fe4f0e966ed9faa975e2e98ae8853671e0fe8f05b7360977385249be25ff109ac899a2ae66867c30ed358dc7
-
Filesize
12KB
MD500b853efe9c0440592aa425f8b685d63
SHA1e314127ea52e260073cd7b279c49f5d416949cd1
SHA256cc2268b1f0c75a4a8f4bddeb22e0313542b3cab153cea92c5cccb114ed30970c
SHA5127b691c0b060e300d0c7cb1cc5504ea5886fe08a2937a5e8f133c40ad5897e9fafc62151e99ea19535b9f635e68a63fb96688d5441e542b8034ad1f7bc41146cb
-
Filesize
12KB
MD553b13f578b731be82014ec0a15952162
SHA16ab0c05cbb09c68b33d77b819906631feb048750
SHA25681d710c822e9f53366aceb301cfae378a289eb5f0b8c31d054d6419fec4443ed
SHA512061d18eb1df38c2d3830ce553c8110d64832e8bfb2dd86cfa1243b284fcbe2ce429846d397a5abb7001b33e0c16b3ef99de5aa57d552e90c97cee4fc7d948cfd
-
Filesize
10KB
MD5b17c8557acb9426d38a27ad3123f022c
SHA18609d9c7cd100c68561355226a0fa3b1fded2654
SHA256409da27d512083cef6eec24d628913d59e2625eea17d610888e222d45887eb8d
SHA5127978ff38832573d6bdfd46ac23d15199e0fa7ebdcdac9882872a0340e8f97edfb0a81004ee16ae95f3022680678fd7f6b67a30f6c56ae601f895b3c3f08b99a9
-
Filesize
12KB
MD52213f4c0cf82ca3a5a200043a491913f
SHA166c2a751b761f4c53185f4586e2f0636a06db5ce
SHA25685ef097153856cfb917e6f718c5bbadab5701c082c268dba1d6ea2c9521f4ad2
SHA51281db2a03de023999cc58efea1178ac56133b42779cd9f8e53c5254fa0eaadd3774901d27d3424cde0660c1311dad8053f1c945c7045f5bed7e1900a2d18f17a2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\embed[1].js
Filesize66KB
MD5289d38403c42d3163e3f636616c60030
SHA1ecaac0127527cab74b4f9207d46f56be1934080f
SHA2568a8292cfcf858648408b62d80c7fe57ba6558cc223b846989077a4d5dad61dc9
SHA51217eca90cfafebc2b560ab9be9cdea4980c46e3723e78c53a81058654e6028d98117a1daa3458e1c1b0f5aa6c64fef2968f8afead879699a4269bcef5b40574e3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\56KJ964X\remote[1].js
Filesize118KB
MD5623a3faebcf826af96a9411065a3d6da
SHA13ad6d7e756ed4456f8a9119d8f34ab1aa5ade70b
SHA256811b5fbb77a4af9dce1afaa7975907eb27884aed3a7e904338e652df263dd3bd
SHA5121b47a25ce33bed6c58ff8889d780b0a24b08ffaf4e1975f311cdfff2e397465546a134326130501236a08e8d68419b55bef5895eb08934e803841a1436372c95
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8H7UVK5L\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\base[1].js
Filesize2.3MB
MD518d3ffe23750bb19a0ae4f42100e0dcb
SHA14a3d55a8a16ca835020ce0e71c5c9e423dac83c5
SHA256dc4e4b489c989b71573a2bb3c6fde2e2681c94d7b4033396837ccdc8f867c155
SHA5125d8ecb2d7b480deabbb65259e04bd13330725f521490db6b0e0335fbcda02e747a25d92fc9ba05ecea6ecc0d7e441e4437d2f17fe194961b1df833f8f777b882
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\www-embed-player[1].js
Filesize330KB
MD591680884eed37b5ed4a53094296d6527
SHA1f3df67a86e7b4c75f3c47f8e4eef569cb2ce080f
SHA2567b423b08e9eb0b19d9ce4b1e1f40b4ef0c00f40499fffce239fca160bb07cfcf
SHA512c3c0149df32c9e40cf09dd0a37240935f26353a8402c6bcc6eda3304fde962a4e3d7b41f40ca3de929aaf4f8b20f4812d97d2027e274284e84206e80f3bdeccd
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NQU8S4LJ\www-player[1].css
Filesize379KB
MD56bc73bd4e74e8993220f45682b0b7388
SHA1b55a53124024b3dde36aaab12b5c7dda75c891f9
SHA256716369dc2ba3761faaabc317e82a604cfd41bb687251c981a267d4ae96a9c71d
SHA512ad9e315d5762581ca2eaa4123cb6934d3e43861e0c22ae553c6aeb053b1823ba4cc57cb98abffdd5268b3089c38bfef8b76f014b70512d72146acd106826a73c
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTZJPBOG\cZ4mj-RCrgMYFwmmyFhFlnrCDlUkKgOwCtwj6KJj2Fc[1].js
Filesize54KB
MD525f3522ed1793154924c2b0bee1a4cc9
SHA194320003e4f95787b7cd97d30afa0066532f8895
SHA256719e268fe442ae03181709a6c85845967ac20e55242a03b00adc23e8a263d857
SHA5120091b68f9ac3f1e5aca8f48ee4e439b978b8ebc1f04ec13b651d136bc34de4853383dbb5c76c2852901085ccedf38f91e615de76c3ea44cc8416e77b3b8dc19f
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b