Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
29/09/2024, 22:56
Static task
static1
Behavioral task
behavioral1
Sample
ff720757e4d32bb24c7601aca21a57e0_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff720757e4d32bb24c7601aca21a57e0_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
ff720757e4d32bb24c7601aca21a57e0_JaffaCakes118.html
-
Size
15KB
-
MD5
ff720757e4d32bb24c7601aca21a57e0
-
SHA1
af12b2e47d270e0fbea933d4bb5a2cf33ae8575b
-
SHA256
c8da1ef5efc3e1da9056a3f81b2b1cbbb44b0b3615c762d861210b63faaa5ac0
-
SHA512
6a9ccb3da77c70aba9f61a212c7797fed36f572b325abf2e1127b2c59a7312fb1b6266cdaf29e81ce80052b06734d0b16f1c12d0d7d43c9ccbaacb76468b10cc
-
SSDEEP
192:1fqh95jctBKBtirJQJbdkf7bfOTsJmbBH/KyvgTb7JWo6xkhhasnBQcw7rbDu5dv:1SJcdwbYTbsp6nBrwzq/29G+qRpI2V
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d793ad506ece624c80bd99362738d907000000000200000000001066000000010000200000004cb8124cca4978963b1e76df50236b89b78bbc8686847890a568f3368e49ac37000000000e800000000200002000000014fed911faa24eb18ff3e66656fa27e9b5b5f302a2a4495b9e5881c0a6e1a57e2000000064b325e72fc112777343a1327114ce97d817aebb57a3286a5dd1d22ec6cf723d40000000f173d88f1174e7ec78df5cdd8e99c5c5229dd3d5201aba2d0ecea33bf72643cccc04d76fa0e2f7a52fba88caaf1aff50247418bafc10839a259e0b0dc1f277b3 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0963efbc212db01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{20E774D1-7EB6-11EF-A701-7E918DD97D05} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\Total = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433812484" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1846800975-3917212583-2893086201-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2872 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2872 iexplore.exe 2872 iexplore.exe 2032 IEXPLORE.EXE 2032 IEXPLORE.EXE 2032 IEXPLORE.EXE 2032 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2872 wrote to memory of 2032 2872 iexplore.exe 28 PID 2872 wrote to memory of 2032 2872 iexplore.exe 28 PID 2872 wrote to memory of 2032 2872 iexplore.exe 28 PID 2872 wrote to memory of 2032 2872 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ff720757e4d32bb24c7601aca21a57e0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2872 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2872 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2032
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
867B
MD5c5dfb849ca051355ee2dba1ac33eb028
SHA1d69b561148f01c77c54578c10926df5b856976ad
SHA256cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA51288289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD551c5706de4cb88632a3cae045d071fc8
SHA1e35b5822e1cc9f0b1f0b717d906e8501967d5ef8
SHA2567945c334e73eea2e438d6189ba9b91a59c1080cbffbaca6f27f0cf72ee683a4a
SHA512c8f9cb6b66125b5f6fec5c812344839137ba3512c600af0a1e5c388c7ff65d4c4f9019826a337adb2902520cc8720098d83fc67963ba19304df289069c514c39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f8779a502524c9d4d110e92308314e06
SHA1a1060a849296eec7dc513e0f2a07058d95d56ef0
SHA256e0fa230b496477a1788b0361ccb25752b8d679e90ab20b43ac94b081a9465b52
SHA512a59e378d0884fe1a54d02763cdd44ba4686e3f825bab835d6e29eb11684e459cec187e2e23e85e0429ec9c0ea4dd8a095309f28ef469a60698da613c088c4611
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e2380747219b2bb01d9ba76089e1816
SHA15e5262f82b9e554cbbaea85e7a3f298ee5235afe
SHA256215db25192cd5d0d76808d7be30087ba4d5286973e1a400bd8bc6634a92e74ea
SHA512c6f59e6922f59ec3034622af1091e7f379d08ab5a0ad497bed29b437178eb2242e43d40ffb9adce70dcd7f5ef2e16207c7ac3f886fdbb73bde649efae939e2da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5671417eb8c48930f7ca1b69ca7e5cfc1
SHA138a4e37511865006376c8d4da1ec6627896c11a0
SHA2566396b44922c1f6ed715603568905559544da93722854f2780977939638931c2f
SHA51276dafaa89a6ca0e9cdfa9aa41eeccf420a08430c20ba1f741e5483cadefd8bea6c3ad1fbb6bd1599d5115d288d6290540d9530f702c201d06f1ada5ac33c69a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5016773c56ed6bda6fc80d2fcb25b1ba3
SHA119307cf8ae62849f28835cf450f1c4447c3ea604
SHA2568f9733b7c1d116c2a92bbacdea4905026ae25e9977630062ba4c34da4d1c4a9f
SHA512d936720b35ecd079f6438653687cc80c8327e915721df2ac1cc445ca543e038a02749d7c8b1358f7e5213331b3fee0db35d28b54ba39cdf80e913c34d2f06c9f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD571448312469f312fc71075b8950a9572
SHA15f6fc2e309e96800e9f6d8c60c1c7a4dbfed7203
SHA256a5d55b24d7df828b7c6e3729d630fb76f401604dbeee8e3ed0756423867c609f
SHA512ad2b021a263dfd52612136f669e976b450e00b8508747c55b449a25f77e49b27e6e796f1b9417e2a0477dd3416db91be97b1c61edf3e27a2f6ee0c4f2f5b4615
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f172256fc473a6af0c1f031ca4aacd6a
SHA10d03f96e572e29bedec8a95fc26e9c54ef930511
SHA256663d99984553715c920a287921eb910cbcb30e61ce7b347b1b813b8e3f4895a7
SHA512a1943a27b427175878e4e8afd5a9968ec1c21e9c9cd57485ccaa9e459b70edca6867aab1c54abcb27e76d0acefe49b1cf7a71e8d3d391caf3070e0799fbd75bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51ef42a088d2a7c0b1dce0fe20d507163
SHA168a3d4e6db889460a4a4d6fcdf5a864813c1a966
SHA2560523b79f83cc33a112e474dd0a0bce9a0de04c00a0b7d53227edb7ef8457fc63
SHA512b090383d994c504c915b3b3aa1c0cae02291c878bab83debd6f5ce067d33d06c2c531a2a2cc077579476181e7d697d044c93775d3184ca5658a17cd23adfafd4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52bca848a3fdb365a4636a0f163bb0b0c
SHA109a174dedadda1d1bffa5e06c635e6e823091a73
SHA25609a26227f493daf30664216df964c6a76bc52ccafa6f7daa9c3b8e43b5bb9531
SHA5125031c9192007bb8c9a970c53bc968822b6d36ab44c02a4b227e8c6dbc8619171b76ad718ca0771e61358489b8fffaa29ffbf0b4752b44bd9c42cbb3ea9f1fb75
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD599ab625c86501f6553031c5644ceeddd
SHA14d977c7d212db2b8012c83cd471ece035246487a
SHA256b964f839c46e0196ecd7d48d763492d868afabb3e302707314fab8f87a157269
SHA512b64df315386bd615ee3d8b12f27a46791cefc67bedf41aa4f234f5594ab02e92b04fca1008cb638e364b1385001c7f49defd815bae7c7571103af1665f1e3734
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d943ff312c0b866f3145e693da58b3b0
SHA167337c8f24152fba46b9fb47b27636bd4a8c3e38
SHA256fb33fb785b192b82b956d9c96e8718bfc908e02109492c5b93dfacf531c8802d
SHA5127c824098db919ee2fbc139b3418ba88b2373e74d14524ca0f468923b1b6ee577fb33d9f7de5570723d0d827d0237b5904604e303908712d0865071240901910d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD506d2aed050b2911b0b9728250466168a
SHA1b1b1c43167d031694027edd4d72209fa5cb12f82
SHA256e38f0d3f62fb443af45ef244201f8bd2281c010f5f43ffa09badded824c9f6ed
SHA5123f796af123771b26e3314775fef4ccd4cdd5e7b3a76fd018055b109cb40d468f12de33d3775bc33ce978cce2c68a8a4c92b0c3893203af869f6564b88598457b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58f8b188a82a7edb311bbca4a98a8deee
SHA1052ec55a83e137d042593614c78c6142bad83f41
SHA256cc8aa497ce656b0680a46a440ee7e8641c3226f65e8887b8987eedc4a949bf3f
SHA5129c646c392af7dd467fe2a0b49cfd68e8bb81cbb29a005ef605cb621f4cd540d1a0a279108d058b3d66b13d413114d282d733287a6df6e46124a1553c567871b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ea568c90d0d75a26f673519ce876ff9f
SHA16a405604f3782cbf88715002886dcd6ecf00b257
SHA256a90f46a7644bf0f34331beeae1073a96867e358c1450d633b436fd34d94b6222
SHA51252f082283196afb39f10fed185a44a5111021c2a8432772a721663010a0b03654ab4654a03ffd53a6de1981bd2e63c7b8be73c9bb6c4c9410d082f2a87826a4a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa21514f7ed4c2b70406971b56ecbe45
SHA120f35c02951839d289962d895c9fbe442bcc6432
SHA256915b521bccb0cc149a3085ad624913cfa9aa00f7402e700de8812a219d3ad3cc
SHA5121d01b0b6863f8f4a9e3fced130c3b0dfa3b5910619bc67ffd7d9df2c42de6d9327787006a42d11b0d7c4d24ddcb5c686a9036c12469d25dca1c8ea6d1e92e151
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD522770e9d2bcbe7188d783732d1865fee
SHA1007abacefdd7ce16074931ebb57e6d603ca39dd1
SHA256d5c4ed2422c6bc6fec0d1531620e0422ede2fa0c8ee2767dd21a078f88b912b0
SHA5126b301d12259fc7f792710d08ccd560aa59d9136f0993b7a411f1b7e18c18b814fee0ef0dcd9d97299333aa35130f1bcbfee7df255f5b0b3aabd45dabbc8e8a26
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5566fd292fca50bd41be59bd0aa09e62a
SHA1da95447f388eb31566d30931da7376c2893c0ebe
SHA256e4c201c15fa155633b66f14067655f2070cecd738fa337a65db8c08acf311455
SHA512c6b7b82a20ef6ee9c5168beaad67330f09638aa322df8954488d1ab95952c76e85eec07c19718bed268696a4d0bc08f117013322f92ef583f02e88f1c19d9aa3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c5f347a6988f6faa370093ab7d09ff2
SHA1f3b8ed5de70241e6e9f29f1cfada23704b80200d
SHA256776b67b23de9455c06ba1d59b54bdcbb648c65f7fa82bc009d9cdde10f07f209
SHA512dd5136ecfaaef90531483587660d6f224067627b68e9d1194c4a140470b1655a36a69d2bc79d4287fdf2061fd3c88535f8f9c4f7224928fdf5c7438477bcaf62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD576206f9ef8e8dcdfff5cec90df3d16a0
SHA1fa411407b3fa0c1c543e698cffea42c670e7853c
SHA256cfb6ed33c5315e2169db3d3968e71879fe80e3b6156bc4ace40ace5862a5b2c3
SHA512369effd49b6d1df40f079b493f5d1931b6841e036a9033baa8de4934abcd4e938762c78a9f4709896c756e02f9214364361e77373d9a3a3b260dcb53ad5c6a3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fb3d4c0acb5856c756e72e6b2f6b87f1
SHA106d3d80518dca1372aaf4574a412947d94753b53
SHA25669c5805a5bbf69da9d02589c190073b726febbb9826986f3e7fd55158bc157f8
SHA51202510445d435f33ff068fbef06b07d5811405cc6f11f3a776cf79f886a0463d2cbc870132bad85bdf8d3afe4859b62a881c4fb75c734b7acc9ebbfb2de9cd78b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50e667a8c97efb4b46151fdd65b72f8c7
SHA1dcc3b84fcc6d5ef87e8c47c95b515068c60819bb
SHA2563b2029f0709a60f00c3aa06a96662b64290045a1902ced88fe3b191a514db6e9
SHA512af5ccb0bb2b9926f04a34dc02d82d6a68df0e0b8165fff4c0f3e4f2e8d7e4a523a400928162f6429bb6c7db0d4cb11f18b69ffc115ef41c797a8f0db3fd6468e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52ee622a37e570afa32c55be7ccf307c3
SHA104175305e510a542657fa09b6fb285e8a8fdc670
SHA256e6ff6c26a6b73b82e8cfb95b9f513524af23ea8700f6fcc6a42aa88a47e34b87
SHA512aa5004de56d568fd79ee4467715328641563429252d62a8dd9d68d954feb429349371d1aa111479cd5c7b0884f232b704a05e7f4d8caa1b7912334d3b0380dcd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e9ef3846212ce01248b0ccf479f417b7
SHA1bee9d907ad2bce5cac0e6ba7661a2a0fe61e5d00
SHA2565e785d40265cf67ceef1e7163dfe3cd66085097dbdf9cf9745d08de35ad3158f
SHA512d58febdd52ff180e692fc7d6bdb71c0ba0faae82d97e492cefd9e9199c7957992c6ae87d443a920a1b20e033ab84bdb16c1f4072d49b93e0c99380967f837059
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55a2017bd28e667cac72096002a65e55a
SHA13eccd1a47dc962349354feadb2d56b3581491f75
SHA256f2d2d8ff912c1c8f992f19986005f098042855c066ae4cc483915fd150ee31f2
SHA512610b4ad149843c706681a5a24e92cc8db908f2cff62a439e2ce94376c69c47fea602a2f76b6a6fb8fe30d8a02cb8035c182e2986fceb654521be0280722cc6c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54c43d9f5d30f389fd384e814045d4c9a
SHA1a23adf05c0d5a819c3742d09802aabc606374406
SHA256128af5a6621ff5556bb55876d17e2f85b9505f6a7e653a3ff3563c829a8de092
SHA51240b8c1e58f5ec90675583725d68d01972ba23f5ffcb1df8fd1f32f9d3bcc22d11780c214007aaaaae90c53dc8989042fa218af2646a09776a29aaa42cdaeb797
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5de0ebe5599ab350ebeeba81beb9f4144
SHA128c99bf10fe2b5010a9c2082abcb396ea5783e97
SHA256c4af8b309fc14a3964ab5a1ba4849bd2c1acb4d6cdd35de9cf008bfa034f02d3
SHA51238613ada184a5d142c4fd13ee30a7b9ad0bcc92cf6aecd186f6359f4174327a974a9819ed8f11f6acebf3f25bdb9a2a5750565aa616039a2875495f71a4006e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f955d3025702d2267aef335f8e7326b7
SHA1c16aacc4e5e5244f0912f34010208af2a53af214
SHA256c85d8e06b9bb87c7de66105e24050327e0b04255cb8a77c9cbddad7da5343c39
SHA512440cb818a3933b56a2703d8aa4c505119750b2cbae4147cfe2b1c88b3ed0f8285ce523c99420c89a22736f0b11d6b76fcf659bf24443cdd821d8f354712c4672
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e8a4fe54f23846e5d0daa58323e9dad9
SHA1e1e5b4809b202e4eb10ef65f4df324a3f9c12b39
SHA2569ea6610aa5c8a1e9acbf4ff140ede8bb960d760a03d0aa08ae90450a6f986b97
SHA5126c1b624b9d4a66e0dd5bca4efff88781a8fd66f04e7290f2408dbddcd0a00b164893d5f54979c8ad301bf17c69239477943c1782c379d7aae22b02dab21c52c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a798f1f6fbb5d591286d5e8bc036dab3
SHA157765606249876babad468594c3434265e525149
SHA2560f729dcc85ce973eba325048a520398d2a914f024d155015e360ac00f4260eb8
SHA5121859f5910b876179663909ec75c4b2d68945a6cd79866083e642c180b1435455b8bd798d6613dbeb35f3699b09d79f0cfe8d83da14654456061bde3589f00943
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD532ea7d0e79b32b3c588778cddeec5d47
SHA17fe14238898e99a20e61bcc8d89faf5b2585a5eb
SHA256c1d4f80b6878f9811620393d48d67d5038279816ce1fbe6e8932d8938f0a2c65
SHA512665c8d24a2d3094cc6388c1a865f93d1009f5f84b0c2bc01c7139569f6803593836c08ab5af30e7f32dbc2c44b6635427a82c9e2fba6b30dbb6ae9d73297543c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5519ab5e2f0dda37d6b6757de53dfe32e
SHA168c9d20cdb2fbe9cd15ed5d70e6b5e2f0f3b7084
SHA256ebc358dfdfe3811dbf0dc4fd7b6f16a306fffded96c822574629ac68d195fc0b
SHA51262e3d8ae1850cf9b68c1db982d4243ef636f91c35f096100a717f3db53495ea10d910509e890f8eb9dcd4ed52819c40ce1c15a70d1de42df844b36ef10d40b63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50b841df3637bc167aafe6428f32899d7
SHA1da6c058a7d72706da4db44e8d4eed3edfdae78c6
SHA25633d2d40461783953b9a1fc76c8385284365c642e10c76927980bb75dcf37adcc
SHA512d11c7bb6cfe0a76c99797d64b73e82629ce17e81649255a1804f6b427ef39491a14ea0d870764b56b3004f2a53434f8576ffb4445cad975acc7d340ff4cb8cac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53d467f11d9141da22d35a284df60bf0b
SHA18cd9654358086e4ae150d40769b04b0385cdd5cf
SHA256ad13122adbc217f7b4c1ef38c26cb996f8394968344c36a8a56e161df53e517a
SHA512638b1c253d746853798f77ff4f67e716638967f0ef18607f657ac1fb811d20e9e1992c0782609620edfa4f1018f9610437a46e80942fbc68958a550289c4253e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560a86dc5a6f3da9afa71fed2e5b4075e
SHA1b7045e5bf31a8a43b937bc87ac33ebcbab60922a
SHA25693349fb9ffdf3b9dc88e86d8ae65200bbd449301e6e2cd63202352c130b3ef7f
SHA512d14248709321d0560ea088f54f1887b31d8a39e7b214959321d9e30f36bf7626f9a702f5dbd81fd8dd643acd82ed66ed49a53bc3af7dd40b38c33b9e50af0ec8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bd464e19f48c51e41fca0a671b18fbfe
SHA114469864daa63442d9d215b21d7c90f18b280ebf
SHA25693c7f05ff0275ad36d28392decf5d7372b7bf0fd3b42267f4791e30b27f8d3d7
SHA51281a1b5d4408092ec6662d535c6ecee75d4c586709b4191de84224dab2709f51c42aa07d82a012312d82177b75b155ae0bfaf0f7afae59da34358650de157e2bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560e13fa1619a8e8d11f26bbd4d2c26a4
SHA186289646b1faeb471584b7f85cb78d407f3d8b04
SHA25665c1b4782c19b0ad1aec80a544cf3e9f3583729b05054fa2c473f42a6f2bd385
SHA5123092324be7c134e2ec34f8a513677ae4ebb54e6801e6c1febe78e377a86772ef0566f61902972b76df84f4d8f3704514baa59e3d2faf708f7a8512728370936e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d1fd652fd76031e6c60254bfecc80309
SHA1f08da512b5f8ffde188ae2116bcbc5ba59c4e8d5
SHA2566b03877887284c44385f38e19a3901b2c309e99e6f0624109b7e8bdd9a1c4d64
SHA512561c17fe12d889b199b7e4b4359a7a1ca3bab0badca9a92ed917501b8ce24133cb6a84cc54b85bbdc2198baad68bdd416fce79e09f7a4ddb4fd337782ca51fe5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD535cadf8d1b67c761ac49fb50ba7ee024
SHA198d8c7f5ccea9dd86f7bcdafc9acffc0e01c12d8
SHA256ccb26f4aad225ea9204ef2c5e619647f67716ff1f457b0d82d9c7ce67203ef15
SHA512a654d485c7689c3990ef493693fd9220f25ea55c4673aedde1d5eb7b51ce3d37a0825f59f5c30ea4a4c2f5427308bf420dd7600848a6bbe009a2389e464ed932
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD579a5faa4f15676389fa340f7a589f649
SHA1d853d47d7db53eeb0afc5d0d34c7f4701f661063
SHA256b599a29c4f8f888b9640a4577a225d26a565f7b08235396bc32b88e9e25e7463
SHA512dbd8618cd4d3863d6fa015853eb9d20947500ae8893a6af5ba8495f5b89d202b8f2bb52916a575cfd1eb1716737179e4f4d188344ec307c0868c24e1302d5fb5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59d6719b2285cdcae6ac04f0c219f1abe
SHA121342ad1bcd913b80568beee9e6f63ac3be60484
SHA256946958c537df79cb08206a8f74f33cf06aa52f6c6fcd27b7c708d341ffa25503
SHA512a7fd891ea616435dfd86006d1456bf0f196a994af3842c612e2ab56d55013e002ecbadbacf3e9cf06473881aeb012521874c76cb68801532c158c59b8dba02ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a4060644b5a81d6ed90d6d354d3b5389
SHA1f0d1464dc1b90499a08c26971a883e6e5cc8189b
SHA256a72c924cc70cacf8d9a1f9959f84c4f7a76b2e453cd2eb149f343d482eb407db
SHA512374a915f020c184d6df7f253c9c187398001f00a7bf97b2325e8d49b50ff19fda127c3208de2561e061a63649688d711dc391db84bf4c355b770a4b3123f00c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51282a849d037bf42caa967f5f6dca31c
SHA14fa3baba79d87d88511526a27898d4ca202acd68
SHA256ac4f727d492903e956ff15fb0e1120bd3e88c78ba14cbef264e4a3b33c8a862b
SHA512dd5e2382e20297c98e44f7b73450b6e5aed828fda5281ee1b5e89306627f24d6554b64a8e3ad7efeb53653d5da0e83e729f27ec06cf1d1a60b09c2e10fdd117f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d06ba498c16f2544240cf733e37f781a
SHA1ac479f4d39a7cca167675c4fb0499b748bb8e470
SHA256efb4617563c4a35d3686a7f5fd7e914cc6b6484632ff6f9cdb683698178fd137
SHA512af452d3c1d5f75e3a70258d4aee86202d5d938e1a9ad036212b59cf2eae39ff5b2feb54b65e97df5aa77b820b6b07106ebb9974fea8fc09fc8c62b89b233a392
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b3e01a88f0a990b1c1a9c871707876b8
SHA1a679943bc11a640a9172ab62a75e72f500b8bb58
SHA2569f2060a1309410fa5075172089442cbf26e254f6379643b40d20829834522813
SHA5123f3656830060266dad544b5dbc34991f1297d31e668931c590488da32afa32cfe8957fa0eb1ac4a3360dd837da95e6305b2ddc63a77eaf5efc1dbf25cbd01bb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c99897d93a78de3335631d20bdb3c2a0
SHA1c8e82c268f8c0606e33a0285698af10511c71876
SHA256897cffaa3a6a8374a6ecd65d3238fea6f7c8d87569d3b30e36db8b08d76a36bf
SHA512f7c9c9962fcf073b23dc2f1e8435e74bd5615709763940ea93db749f4da49211bf83f2f986b922eeeb59a8b5572e76a7736d4ad25bc77405bfb6b74be71082fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5898d8498d55b2f80f107312049f0b17b
SHA1e367488f52326f178d318f52d7a99235b7bf8e44
SHA25602d6cf7c2f0d639e6f16bdb41f09fd58dc75952e4b52df853aa0d8047c187f19
SHA512e3b36df31c2c820ee09d328e6376b4745494e32e7ecea3c5ae70fae8cdefb618d016b55e6912d635afe8427ac2bcb9c49ed7044a29612d365fcf88e7b185aa5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51843dfd79a95b39d1432113f26a62251
SHA1386f59c84f055eb88fc6d55b3cc6d35274cdc1a8
SHA2569d9c98096c92cccc921b522f1f7756afd637e1f2c80214f723b2a4b70100eb37
SHA51293e34dcf07a3cd70693c5ea4a521eef4d2e9986b70c3122a0a7003aa2c32e02dbb3a692930144ee3457adf66c5073a0112d57b97b6950bbe3018b89ea9f134b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5057ee49ceedaff95d6fa6affb51c61be
SHA12fcb75c590b2a6d9f0147b32600c9acbda96570e
SHA256c9e2c93d1f4b4ce39cead334156019c73930044d260c2cdd08ac69be3feb3357
SHA512b94a1508f1d5825deacc7265e84f60ea62f4aa1c30761854698010818c93c27d48c69c3648af73337d270b88934130a3691a0c61e06ef011bc3d712dfc9e612f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aff96bc870634fe14ea76e04fb2e8993
SHA18e3c6653a1c051fd1faa4fc404a194bc6a947cc9
SHA256c20f902a83ab0d550bbcd6ffa6deac47b5e496b3d57d7611efaff8e73bdbccc4
SHA512676434161f8e9661a67935491ba0ee8db3d2e4dd46d2a37bb897d3afb246fd1d2cac803645801c8ddd3e4860c35d387e94bfd4e5a8223b1f39fe0a39aecfe3e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a2dec0358e73923a7a7134707c988314
SHA155b296461b7f1f41c218c2c67697a7dfeb12de5e
SHA2568132d5dc6a3fc5c3e6478f3882266d0ea050d5c4de05b7c7b8ae5f34abe1adf8
SHA51239472478573e606fd36158beb162845e17c892935357d42fe85cd130ba3a09cbd12fe0f59c695f4442ef9448652adb5029315db3520b7b5536d6fea37990d91b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1
Filesize242B
MD5bd36244e14ef385d8cc21f8229b835bb
SHA14586200e3b979fdb50e3012a5515c8f39d08e8fb
SHA256e7da41f7ff1da124ffcefe267cbe71332dbab31a671edf9db1aeb018e814eef0
SHA512570b5e03ac51457ed6c4dc8d3b289c7c910c9ac2cd20ac5587e9017016c29c114b2a083e91a7e8c6a3e802f18ceb8256fc82ed25e05147c76445054de534220c
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CXRG2YQS\styles__ltr[1].css
Filesize76KB
MD50ca290f7801b0434cfe66a0f300a324c
SHA10891b431e5f2671a211ddd8f03acf1d07792f076
SHA2560c613dc5f9e10dff735c7a102433381c97b89c4a26ce26c78d9ffad1adddc528
SHA512af70c75f30b08d731042c45091681b55e398ea6e6d96189bc9935ce25584a57240c678ff44c0c0428f93bf1f6a504e0558bc63f233d66d1b9a5b477ba1ef1533
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q0WBLVJY\recaptcha__en[1].js
Filesize538KB
MD533aff52b82a1df246136e75500d93220
SHA14675754451af81f996eab925923c31ef5115a9f4
SHA256b5e8ec5d4dcc080657deb2d004f65d974bf4ec9e9aa5d621e10749182fff8731
SHA5122e1baae95052737bdb3613a6165589643516a1f4811d19c2f037d426265aa5adf3c70334c1106b1b0eef779244389f0d7c8c52b4cd55fce9bab2e4fcb0642720
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b