Analysis
-
max time kernel
129s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
03-10-2024 19:44
Static task
static1
Behavioral task
behavioral1
Sample
10474bdbc32f07e233cfa0aa2789ab6a_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10474bdbc32f07e233cfa0aa2789ab6a_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
10474bdbc32f07e233cfa0aa2789ab6a_JaffaCakes118.html
-
Size
282KB
-
MD5
10474bdbc32f07e233cfa0aa2789ab6a
-
SHA1
2cce7de4e9b51dd4aba8ff53ad371ba0b1c3b62e
-
SHA256
b41e00a17b247a1c8d8af029decac811ecdb1f375d2d54a9b04d737bfe7db18a
-
SHA512
ce6a429a7aa0a1d461be8fc10f001cfe0d75da8e92167059d942d580232d7022e27098cb782f65546fe0feec49106ad19e74504a5ea945213c19c75b8a75ad02
-
SSDEEP
3072:O1W6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGg723VY7RJvfy3d/FpL:7DAXmNR8/j5
Malware Config
Signatures
-
SocGholish
SocGholish is a JavaScript payload that downloads other malware.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10538" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EFC1AA31-81BF-11EF-98F1-4A174794FC88} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10538" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10538" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 404e4dc9cc15db01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b8d48fc8adfa6b4a805f1a4a681aaa6f00000000020000000000106600000001000020000000f3aa3b0bbb824af98b35d6e7aa7d5da543f152514b5689e6f03017b0920b56ff000000000e8000000002000020000000271ea44654920cc43a1429d83c1f91f7daf0e00dce9a6302bde6c2d83b30a567200000005b4b4601089081cf7088d56459209b7623c37ba28701ae710fe5caeec84a92cd400000004e0c14061772f1d4135ad239859fa48580880440cae744f07f38e7adfcf29eabab44d2555584a9ac2cdcc0e379014efea92db9b68662fb37fae50457f9e5bff1 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "434146551" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-312935884-697965778-3955649944-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1648 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1648 iexplore.exe 1648 iexplore.exe 2984 IEXPLORE.EXE 2984 IEXPLORE.EXE 2984 IEXPLORE.EXE 2984 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1648 wrote to memory of 2984 1648 iexplore.exe 28 PID 1648 wrote to memory of 2984 1648 iexplore.exe 28 PID 1648 wrote to memory of 2984 1648 iexplore.exe 28 PID 1648 wrote to memory of 2984 1648 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10474bdbc32f07e233cfa0aa2789ab6a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1648 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1648 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2984
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD585734e4fdf84905c041035519e27ece6
SHA1d64a1a388f643163fc5e17739c9140cdd79e2a9b
SHA256da789abda708784216b24ba54f7824001205b39b8b06d5892aa632fe87479464
SHA512427159af6d30724c5f7fb619417b3dd256d880c848d61b74a4834694c8d3a0b426fa4c92137cb755a68ec0bfec65b2d071712a0f46ce82bc8e5b8220674cd5f6
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF
Filesize471B
MD553448595bb5a0782347155847bfc264e
SHA136fcff6ffd0595a934cad4392462c7ef989c9c7a
SHA256ddef3b7fd695b0eb9aa5ed831c3cda485af430f9761263743a2c22259f56a12b
SHA5124d541659c899f90e7843e8a9945a7791828dd3252ed4451606dd73e8048fc1c8b3b976f7cb799bcc2474bb717cd00440fbf5027df7d9c2b4a3d9e9b46b7fd05b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_2DF9D35AB0D2482BD840A671B3E7EAEE
Filesize471B
MD5974daf29cb263ee10b13d9d5fc393c29
SHA1f3114fb627fb21626e6a27b344763f35240d7e2e
SHA256f0ad41ac820377071ceac78eda0419ca6fb9bc80b9e66c6da48d9e5f67cacfb7
SHA5123b9b27a622e4729296195ce8fb8e9f77476bd349bd5d46db8629e7656a66cdf36676b303188629794eeecbbb497206f40ec7ef8e1d94bed723f0420c003a4cea
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD554bcf0de0084c9a0f288888b0855a161
SHA1f5bd0fe921e097262801ab7264663b16ee8c718c
SHA25676d64f5d764f6ca5ea005063a502334f694eeafcb4e13893e828fccf8207d4de
SHA5124861fb6179e0cb0be5648c98d1ca2aeeb607d28bee48fcf4529f963708d33eef681b1224ce0da0d0b48ac419d170d9f631fe8b3dd84b537b487999474a72f43a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5b5c6799c8ddba31f2dba73ce5e97c636
SHA1b4f8d4f83c790b6b9049736ac605e5ae63849dd1
SHA2560d634cab5b60e7c9a0b47eda29b0d9ac63370f78513229097ad7de97591cfeea
SHA5128978cf2db9e67557aa9e6e702459660e2a3bfcc204d5a86dbe29790547e4848bd32b55789d09840b17d3386f071bddbb80245e3a73d484a3d898cfcd9213310a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5d35e882a00cbd2977764e1ae54082bba
SHA1cc6c698231315907f60d0310fb62c591051691ab
SHA2564e6faa247a6956d99be2170d90eb60d4bdd4d3086ab0329e0e390e7582c8f16e
SHA512e28704a8ffff6906ede16a3777700a2507986114b179671626882a35c2744053e08364d5bfcb64225d8197cb314bce9ac75e925d57b3891f822698fc32ad09a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD588d287c32911c4cf71e2b30d74dcd14b
SHA1094215fbb0fbb489906c069c0ca9395753c4267a
SHA256b95235ebc51d193ed97b340ba692de3746f80645ed748019a21ca47214bab98b
SHA5129fd7d244f75e68d753414b9160cc3be3798b53d6f19de3ea425c2cd4fa07d0ca030cf7c1d7ee0efe613bcc50400c815c3c0d87edec6eb4d60ebde4bb77062f19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f1a23b948f846195d3b4b2d0116bea26
SHA1e27e344f09a231ae00aaa1ef1de4095ef367b546
SHA25615f0297728a34a421567158317206989761b4a01660f514e9a45015d6a482d1d
SHA512dfb7e6683cb44eb2551042c4d8a91c36445e11d91e193e45067599d7ad366119c9f982f058591ad0550f2695fdce2fcac74543d1afc7315f3128dc5895a62cd6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD542e9b50954f55bcc82e82c184f3122dc
SHA13ae0fe4894b46a7cd3948b58e73decdeaeda9608
SHA256a79482990fc981a6e7d6171d79caa486a762e10a711dfdb7d1ef220e573ca696
SHA5125adf10c5d60136eac9fb9d444396c588674d43ef7ebe9771438a664dd765a32e929872d51bca93fbae1db84efee4450f265ff17a3238806d958e518438fb358c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55873b9e157890d573169638951451a28
SHA151835d3f01d9bc03cbf573a7e5836d636555bd88
SHA25681b99234980c32f68121f23be374e3b9a6dfef5b474ffaff2fb3fe8585a86eeb
SHA51210aaf2fabaad58657f93104fc97ae0603dbe0d2440606444f6d2f439792e57e013679ac4a1af5f3a44b6426e9099f1acb0ce0f8a5def89d100617d2bb4484263
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a4db24ea4e6cadfb46daa00bf82a88b5
SHA1295533124f7bba1c9243b7cad8f486c9cf3f259f
SHA25615c7776abafa37e1965a726c6e25c3bc5b6747f173f5834a4d92e744e65585fe
SHA512fa9266199661f8d2411ab21a6378095f7ce0d4382bea3a4af304950e00db41d42812ceea4c24af49b304e202a12074a24316f9ddad5da7ce91a7a156f387ea7a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5772e7f2da93168cd88999db99e6ffdec
SHA1d4699ef5d1a2b4810231796e21bf95711841ecf3
SHA256e70d8f470ee7de383092f4789d6a145d9246d356d77a1e1295500e22505cfd77
SHA5122ac0dcfa3a9667128205e06e30a168a4ded9a3016ee57c827c8316a0cddbe6733ce9928e3d791477104f95b2d304ce29d27abcedbae12ac8328d51f2b55c84f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5065d4019daeba2dd99d3ad793b84da35
SHA1340b58bc1014d62738922de3322683f939be5f88
SHA2560d21764521be780da489bafb360fed40c3a137a800a088f8b0d4e31b3539f7ca
SHA51247f9199ca300496be99d1acd48a84cc8bcced920b23bfd0ace2509cfe7e0369e182b0bcd98373740f194ddedcc7285dd76cf0807b29646d92ac6e497a5b97d52
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5acd9bf8f77c0b048dc6ce79f8d119cfc
SHA1e5a1812ec1b3c83d164e9775ab2d873c0cb9d51b
SHA25612c85050b37e5dedc3bd164e6d67796a0e42d1bd389b391a51230a2c90707ca5
SHA5127f1f0114e650b8fbe907cf45debbea882d43482d3c7f50f2e499396bb8a5189d60bd0a5836dc7150437db8ce73949c5c01bcbbf35f79e9196a2d16c7567b0da2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5604fdd7ab513c7f10bb0455a64d2be68
SHA1c71538d4ec8890bfa1eba97c244aa9aa03f7592c
SHA25629f151bbe6190f08ce370cc1b957fac01254f206b6c0789492da82ce01502f67
SHA5126eda97902e07d963bcec0fe1e6f3c40d1b3b7d34b53739bb4e9ac7fbdff11fe881b6cc9ec0235ad92ba5c4b525adbbe4a2de432f394ff698fe86eac60d85ebd1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5714b2d9da6898a2b3cc6051460950185
SHA13ea7d55f999728ec5b3fc703999a0da90d1c9bcc
SHA25600090c517d493d5f38d288797c12b6b7721ba2ba55ccfbe827984a85fe30b165
SHA51276bf6fdbd11bd3355f28427fa81253a2bf347265ec432def0e71cd9a7faf7f800e982eb802eccaa19a195bf4e908c7df9cc68bec5b50f03f03502336dee2c46a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dbed7104ecca32a9b8952962762559e8
SHA10357e645ef6fbb93ba057acb9c52027bacbe32ac
SHA2566405f36e2273fed291cb111362b820da157f3c9d63f60e631fae17683e32c9fc
SHA5127824a5cc648a04e17a3b2355683b7b1e9f2281850191b0e8c8cc52498d9d069ed89cfd268fbd3d78b45bdd1b56ee9030cf88fa72952de00be6c2447a21e52da1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD504377d3e3a0644a52895afc18eedc59d
SHA1dea1c0989854c680f498d46466367abe35024dec
SHA256775038b82a7045f6e9ea3242e02bcc72966246a2ea911a0b4f30984c851f4319
SHA5128aded28a1e8478e937839e993df05340dccb45cd3bdf91757977ee492d9383df5080baa32481eb44fcfb3e095f01a805c66b95977b8afde040f531a8d43ecd9c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57e4f9f7b01a451ceda459fb9ef65faa4
SHA1a4a76baa6f82b28c933b05b6ad8cdbd9f5456e17
SHA256055986c3bef1b1527117d90b8ad5b2026210e5eeffd782b90c350b1377dd2ccb
SHA5124ee341fae235c9c499e14dc5cdd3139751127b35cdd7dfad0056e6ff8fde76f3d0e279f9c837a17a43486c21ae5b4dc8e15a10fbee2dc8d8c8e2db9df91fed14
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7490c3fdd87273d097876705602f5b6
SHA146021dbf40f14cd2573dbe8d0936378289b41afb
SHA256a23ca89b220c4f3b5aa5ff58812ac97999075c3f3e01e5dac1f502bc6c374d4c
SHA512f65332d5c0f2c5f00f774b9f06693c623b2fd506bae1392ba6fbf4bfcf5ead157bd5fd744bd383b20aef7c8409d14fd1924df94a8f6392fafb2cdd0a9f146d7f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5922b870c507e29b68f60ec617632350b
SHA1d2e4486d8ed11d03ea0280f0e7c9f4da8b9a1669
SHA256088634245b03c456e94c4e4674e6ca91eb3064fb9fdc6a4c827c2dd0c8227fb5
SHA51235b27aa42f44010df154ae8a34cb30c4ef014ae038c0ff486401a2a497fcb558b0a19254d3d1bf6284d9e8f7c727425ee67ceabd3d7f30d00731f1937ac92346
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50c26ff88a89e8866784278b3abe39847
SHA1a5d1719670442169167c72b4ee8cac575ecf4e2c
SHA256ea558b46a234e63221d2ea30918759be50b01dd398f5f9f76006ca2e06f3b455
SHA5125419eca73345970928316620a0181d97ddca4362a7742b8d6a86975073ee2765411202cd56adbc0bf694db5694321ccd6d52559b17f157b6168c682dde983c8a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a8418f3ac9851ebba5897b3bbdbdfb02
SHA1e665950edde6148e561ede4354e5e2a177c9b549
SHA256377bf141ef53077faa3e37592cf6393cb58bfa86d480bc0dd75f088348fcf8a9
SHA5127bd1fb195912132da58700f79894018088978f42b60235cf36f5d1552dfcea150662d38b8b35d8801ad4de466b806959f7fc1b6db7edcba0f9f10fa877d47335
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b8244ce9934b4988802ecf3d6b9cf95e
SHA1cbb16f4d3d596d5f7d10a878d60c5b42cf99b280
SHA256c18d7062287b9232abab22421379cac4e88a81211dc25f5cb67400ea272f1240
SHA5125a850c3d64066dea0197b977b7a6917a316275a9040bb6dd2efa8da826efd40c272d5bf17ef66b966c46024b952f4c4c9bd16362bb6cb62b3554a7c7715fa14f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ca2647c3f4d7100b33f1dc3030c3890a
SHA1dee30bcf0fd7bdee3d06f06829a6a38152f596bf
SHA256f697eac6e193500124031eab7e2a2edebfad685f1911f631ca12fb7f65160208
SHA5123b14161a06ba6942984c3cc3936a51e99a77c2c244edf7732f8ab610121b8a59c88a5c46f029d56560a7ebbf3d35fa055ee151889e20a5eff6d8009a1f32f0db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f90a015621b0a3b091745fb955b317cb
SHA116af2ad96f8b27fa4cba45c0b106a68639a09936
SHA256184dc85add18489926e6a7fbcaadb6e15d1f4f19359ed33ef09e8d958132bbf5
SHA512e5f59e347f0c997f4fe0428ad2a8ed359193bf9dd592add13250baeedb177fd53df90abea83874559209bcbcf9f1843f8b95b0a03996effd00c2060692283511
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d8b92bd3504623d07feb68e012701db3
SHA1afe73e121444f53d93c039fcad805525bd06a812
SHA256eb649d0d1c552554c3b040397e4ec5644ced1bc0172f016ed5b957edd74817a5
SHA512baf68ea39c9172c9382a032fef3d8bb0772adcdfb9b53576746118aa8f6f88a3ebcfb336c30ef5e95331908c331f616b48ac1b5741ea9e8b9145c2aa54a2a5d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD597f7f0c733695cd5dba02946ccf46806
SHA18d017dd19d992288ce00d48f382da71c3468d2fe
SHA256ccba6ccf591c15c472820aa8fa20f019976f01cd951f11ab221461eeb34f1e5c
SHA51208ec2448854029c72d736e153483c4649cd43ff9b3158d40708987d11fc1379deab2be150b38c00194e43817190d664743c57a435198f87e64d90bdb59f8b10f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aed18c1480f549c3922d2b13961f3548
SHA145191c284ae79367bb69def9f4342234cbe7f3be
SHA2567bd771565dd5bc3c55cc57f3266e1014efa5533f43a00c629e179319233955b9
SHA5122c9a832e49f7a7968da84be838cc0c808831b68aabd56db05120bf03415d1bbc24f2819646429c26d48574688c08c30b2bb8a7abe57dcb56d0aefeb06c08277d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD540c587ef12a6b5869a989e263aa4a9e8
SHA1ee829f7fc23b5b75bcd92221a62719b9bd474e57
SHA256ad35b2cd80880a83d2fddee61fe5ddc7927a01efba941434f4de2bfab4d287fb
SHA5123c913a4388f88165ea5235a576952bb65b614003bf99bf7b69b0034d59dc46080dbe16d4dee3200fe1d2fbde7d3981f725ccbd224eed36570923c8cf73d6e0b7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e4546628c44852d57318e419a80d9777
SHA15d4f1674118ee8fdda0a0e66e1f3f794318e3d8c
SHA256ba67b4136c64331e7998ab68538e8d785f34a12fec7e2e6aefd7306820b73928
SHA512e057a349222c66721ef9c6a34250438fc4e58cc04dbe5535d8515e37925e1a2c11fb335d1c9070cfc53785257b82d7f96dd044afe1d7562157a0074238f6a9ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51aa9b6b27116d821441ae267413d081d
SHA1e6a029a31faa91bdcbfa7270c310bf98a054ae07
SHA2561d09a8892d8c59499afbfe355e79ce27b782f27df682978156bf9b49a42e7a9c
SHA5127bfdba7087402c739b7634c23aabd14505c90f55cdf01413cf20d3e23c93c1bc40f69eb2e64ec391859b094cd10d87f0d2ec9623a1372d7f9f07ba970b85de15
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cecb559cee733ae04d2957e9eb539ee6
SHA19eed52384739bf8fdfcafcc78671531d6168b671
SHA256f91d25d6c9b51309870e3fd83292bf7ed280eb711d7aebb22a6ff66495a84e0e
SHA5126fb6d297f5fc99a956fd3872a071bcad91b306fe0a765b29ec7d0da8855b046039aeca584160d6ac77da1d98f3c5e965c976eb8c9732d45f0d37c7a69c23e9d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF
Filesize406B
MD5b37caf25bd39d229d597a669efd70ca0
SHA199100130bd60b38b377bbea4bd6d24ed4b0457c7
SHA2568b320479d0363f96c990e63237a0cb48d55b712a9bd060a0878f66a723663351
SHA512cee155990f17ee9424cc0964147925c168d3449c985ac5f4381609723555cfce13d05f5ebd72cd96d26401d83476157690e34626c8354edebccacdd9a14d935e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD571113ca24b5a80a00d3c6ceb24502ee5
SHA11b06d1daa56f865d4780d76ab9026e5a66acace3
SHA25613e925613d931e5ac9918b2ea2e5cb5ba37fbed3d134c1990ea1983b59c51105
SHA51239aac571643f7709e2430f39e8c53bdf0449f23033020e09aa6800027aa9e50cb3f421fee7a7a3b1521f977d7cad7b29e28ef49586c9378690689128e40e7597
-
Filesize
578B
MD54d7db95cb905aea3ae0aa14305e427bf
SHA106ffea38b00b043f8c751392405ad8a5769ace6f
SHA2563af5351b30aee65e205db5cfb11140919170d711135d59dd2ae27ee59d586d58
SHA51255554b0330933beb03c7580b9e39cc7ee50f9e277f2ccb0f1c65fea06108daf8a173037475f74c86bbeec65e55cd75d165600e047ca99f926b2d9f059f02a798
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
229B
MD508bf6eccfe5af34e3ea7b93d0a5da0b9
SHA1de258b3e71f9e16acbc2b2dc05e99207ff224c56
SHA25623eaa69b51f1a1933635f713c7e7c2cc46c8d33d67480094b962a9a00168d871
SHA51236a3385182e753486772e41e75559b2cbbd9b11105da5428179c0c33074afe4b82cb659cc74b94edbf7b3d6d91a4e0d2cd5ac1ab377297b7fa632b8e96996e63
-
Filesize
16KB
MD5bc11779090b689cb080c00882ab9e6df
SHA13bc21fed3e8bfd97a06301f1c9aa952c90d86b9f
SHA256652004004cb8769d4540ce0d5314ce0932a35d74e83e689d7d84d7b47a40e31f
SHA512b280d8281f60bf72204d51c42c1e2fac5e60afd0c49e320d224ed11e290066bc603d38bd0ed29538bf4b651aadda9261f97d3f9c9d05c0641ca137c62858bae5
-
Filesize
578B
MD506346ad08b456876bad2841d910e36f2
SHA1eaa9285382444df208cda1ff6d24c0fcbaaa9aa0
SHA2565da6bab08172a40cc13343d8fbf8b82638032937ba0cf278c0249a000ffce8dc
SHA512bbca53df8ef1431eb3dfe782858949c416272d3f2dbf74abe4010893969892c147cf9879e5194faaabed72b65905dba709f8c7b9e496bb6291530c0da9fdb6ae
-
Filesize
578B
MD5dc50842300f410316a84aa951fefec9f
SHA1f49684eb47a7da8f6322c97b354d63785c813e3c
SHA25624e7ba272578dc8d74be4c58d0fad9b5c55c3d7f3f2fad4e276b739ccbd9ca4e
SHA5122a2063394a5cb41df386b6758d5ede6a853970fe8b1111e2c0edab989710ef342a039bf237fac050e087adef8f7e04b71816deb5c155514ae83310196f159aea
-
Filesize
402B
MD53020be85b297c5926b5df661eedf2201
SHA129547caa8d27c107299bcb4308d408a5b6c38830
SHA25634b77e2a89b25520b14f97d4263f17d0c74e48c4f0f0b3bd11e977934fa6864e
SHA512419699a2b18a8617c0bd669ced72cf49a8efee5fc1cef3f719bd82f5fd8fa658ecdf5a0b6e36ff4c3d9be2cdbd05a4b00435f69fc4ed8a836675c9761523c7ea
-
Filesize
578B
MD50d8b1c8e64634cfd34ab84fc535f7ad3
SHA1f0da0138e241f112beb961f9e850d3dc190eaa0f
SHA25697aa353a38bced1a38be5b25b39a911648b9d942f0af54223851bf11188a09d6
SHA5127d4a207d571d5fbc4225da174edc110489d4441d1edfd8a4bd77122991d15f77d88b919d485c4982a595db2d8f80378798ed53744593f3a5f6baf967341524a3
-
Filesize
578B
MD58f967c7c6749644d372d116245a51b29
SHA11c0b442df254186727cfcda878e73e741dbf11eb
SHA25646e9e868d1852192e418c6e30865ff32cfe61e0b805cd0aa965f02a44c363a97
SHA5125fd151fb076dd0a06ed58bb561e99c3d6d2f1191ac5ecb2e7739c34dd9a07840299b029d7a05147dd33a5abab97401eadd51ef5ba04c22f7aa42d6f43524fa72
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q4648X1K\cb=gapi[3].js
Filesize66KB
MD5aa012028297a26c039c37ab25a4bd17a
SHA125f23d01b5f580c00778e1c010225e5b8c73b66c
SHA25655cd2316edf7159b623e4ec2c9e3a334027c01e2d1cc386f833ebcd35ed87b38
SHA512d346eb082674fc26d562da9a12f36ad2cc7db1f1b35c891a8734284cf1bd052a967137c1281982070688b2bb2e06c7f4967d1c9397311a31a11a8560b9c45fd5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROLMKJ86\2254111616-postmessagerelay[1].js
Filesize10KB
MD5c264799bac4a96a4cd63eb09f0476a74
SHA1d8a1077bf625dac9611a37bfb4e6c0cd07978f4c
SHA25617dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d
SHA5126acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ROLMKJ86\plusone[2].js
Filesize62KB
MD52b72da5279576c62e6e3bcdadcfb86af
SHA193255909ac2892a54fcbb2a4445ec1aff46cac55
SHA2564243c6d726cd3e7056a4ee7efe04d9eb84ee713bae54f0374d6f8d71d0822481
SHA51251954e78603f08d4eadcfb58593624100eb8ecff1bf3f7cf4c6c43b5cdb317daec90e6919a71f12e850f424e8ec7e0bf51a9c782beb5a3b7ca6a8c604a522872
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\rpc_shindig_random[1].js
Filesize14KB
MD5e691b2e17de9ec018eca758518bf5dc8
SHA13238d543acf53b803dfbd260405fa558717daaff
SHA256438d41bec769ff386a2c1555b6bf9105362f67dc3e711c81c6092ee7fbf6ad2e
SHA5125589a5cb408ee8e0fd473de24224ba8fa1453eba5df6e591570810f992160d4f3e8f60f8ba74d9994861759321f5bfe0c4a608636913a8407b5184008457afc8
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b