Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09/10/2024, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
2effc1380661550604212ed8ef10526b_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2effc1380661550604212ed8ef10526b_JaffaCakes118.html
Resource
win10v2004-20241007-en
General
-
Target
2effc1380661550604212ed8ef10526b_JaffaCakes118.html
-
Size
43KB
-
MD5
2effc1380661550604212ed8ef10526b
-
SHA1
a6940e190eea05448b765d13af1298916c764d60
-
SHA256
bd134ce98f2304a52104b0747ebb1c1da3efe2921af0b934776df1742617287b
-
SHA512
6c9ea4b71776e9e61447636b4e8614e414d35db1d189518e75388326722ff4ffa86dc3fcc90fde11bfda3df5babb4305df972b733708fecf00ccc931ffd3adb1
-
SSDEEP
768:rvacXuYy/LCYZpnhGoRbF3GhRbpfG+RbV9GXRbW0/uIKm9aenjljHcjwvns8Lhz1:rvDXuYy/LjpngI5swvns8LhzCXcVV/oU
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19199" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3697" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3615" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "12951" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "12951" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9893" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "22339" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3697" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "22339" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000078a0cc6b0b830b4fbbc12dd3fac6f542000000000200000000001066000000010000200000006d93c86a800bca89ce1fcfe4b97e1ec42096fe1cfe081c8ad52b43a4ca05653b000000000e8000000002000020000000d75318e372cc93258fcbabda1546dc41813834ff72755dfba3137fac617021f9200000003bee5d8444bf3a630fbf00463f5520987ff7c20c20466f881be8f90b0ad4e0054000000050d7568ea4f7808ccd871353e6989869f930a80feb646c833f2fd632511b1e211d330ce0a20db58770b68b61400fd5029a2bd0055fb03723688cd4f2699db814 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3615" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "31951" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "22339" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "22257" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "31951" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "22257" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "434675610" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "13033" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "13033" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19199" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "22257" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "31951" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9893" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3615" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "28535" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9893" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b03817a39c1adb01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1732 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1732 iexplore.exe 1732 iexplore.exe 3048 IEXPLORE.EXE 3048 IEXPLORE.EXE 3048 IEXPLORE.EXE 3048 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1732 wrote to memory of 3048 1732 iexplore.exe 30 PID 1732 wrote to memory of 3048 1732 iexplore.exe 30 PID 1732 wrote to memory of 3048 1732 iexplore.exe 30 PID 1732 wrote to memory of 3048 1732 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2effc1380661550604212ed8ef10526b_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1732 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3048
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD58cf51dcd1d96709cbfe56e5c5ae4ecc2
SHA1045c8e952bfee7cde4253e7c97e7c169e4e0d66b
SHA2568e696d0968728948770b28a445fcad11d43e288cab1f10d907d1d7a62a95363c
SHA51225c635386256d7f16cb74de859081d2150c1f4c7cd47621a32a6757c3e6340ca9cd6005589fd7ffdc2e5cec6651d2fef4eb918df57d6ba5b146de872e38e6635
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD54557da057057f25ed7fbd5b18c852aa7
SHA174895da9e0bff275c2110c07625820f724bbb57c
SHA256d10845b5ff7c17f2d105509f65eb6872ef15660b6995a195dbe1c32486ec12b1
SHA512bbd74269e22406fa5f6b1f5984b324bd72ffcf2f242850a942079ab703c6d9e406881e2e6b044a8286bdf9c9bc88197fb27432aa4e5b50f7f6203dd057f00bf7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD52f8abb01f4c1c96f1c1ac19b79d8ed23
SHA1b05f035e6615f74824fb37359d51915b4935b829
SHA256897a4776852b5cc381816d54a452a4e37857dade0741ba5777ad26f4cc37c2d5
SHA512f97face897cff1c3ffc08cba27e8bbe4c64e1121eab36bd04ea58c050a22833a53db057a0a56aa708b11ac06c6fca70d328c89bd8f236f0b5c0828c56ad42171
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51724a46f243aa71f0a1035f6d7b718dd
SHA1cf21cc9cd57936733aca1420ae61f0d69f0828e0
SHA256e1fd1dbfb1e31cc984bcd5e9e3ad41cad8a3d57e3cffdfc572bc54b8b2428ac4
SHA5125c426c28c7e88e2d6cd38196612e5ffdb456a6ad6a163a79bf8f77eb62c7671f0e68ed205ae17799d9e9578f2e21915423a86fa6087583a347db7d58b08fcb98
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD573415058825449279136174785527699
SHA1831858889ec886d9f2347468f59a502d490ecce8
SHA256e0dc5b8ce71f834fe77379a56cafbd430ec071e7aef1b837e2957d0ffb7dd811
SHA512e804df09a2cab8f82f937a1ffdb834b0e6fee59a784598e8f8463dfc3f6e9515738fa8ae5e1ea20fa56b7d04cea257f5b1478e37912f8e5ec560125e53af4889
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a22ff3dd4565efa56aa7f4e89265f995
SHA12d6fb5018934bc880abcd4bfee59bffabc518cab
SHA2561f1e949687640a0ee88cc22ceb3d30d942bbc3c0fd2566d4a4ecccc50d7dce7f
SHA51237831690a6389566d072f3cf55aba40246932666f17b26525b5507a0dbb3539e0c33c5fbc49dae78b2c51256a5c10ad4f68a7e90fa10214babb573ef0f10b10b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c10d39f24fd10c0ea503e18f3d8400f
SHA1399b12785402ad85d9864ca7b3597d76a7105d69
SHA2568f737e26a5b1943b17fa8a5a2543a525270cc5783a42fd997513e75eb529a742
SHA51251e0f549cd05ff65e6aacf5d058db1f2bd952611b94da8568f07cd40f35bb6a075bda146cfec3e9759dbb46e5d615b36def4e41fa4bd29c05e9e3e80fff639a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD573fc82308068dc8e51a004cee7cb9648
SHA1c5d813c9078b3388f31d1e02d3191cbdb4f82fa6
SHA256b132fa37b89ccab5a5feba918832e9176f40905e7e1894607191d91479940671
SHA51230e988aae3b0b438b1fe2bb1026867f28946836d679a3acb404592ed07301a19d635beac13179270e531c4ec40293f3f804b7d51ec40d1f107c274d2c24bd0b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55c1517c7bad1f89839a7197f7687080d
SHA1a5ffc494d416de0b154cb121e38c25f8d17942c7
SHA256f4b7f10f8b70a3c2cc9a0462b2ce4196bd9d1cb8554725f5692a34f875ec9fc7
SHA51218b279f3896e7695cfb676bfac23c6da12711bcfb3796aa616f2856d44efcb4164856c8e95ffbae1008c3b2a142fc7c214dee746d0dbcc29af08560baeb61640
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD549fc401d7965a156e8e1107016dc8911
SHA17b5df9dd224e711d198a186345eefa90aa4a86e8
SHA256cf368e57ebcfca7358192b6bf36c1ad53a63af437b042c3d17a3ee2007fc4062
SHA5125625ea6df4b297cc2827484d77fa3c3d2d4fe6855d7ee51f548d127d10a9254ccb06c5652fa59b3d325ed98260656443bf412aa1e3dc33306e0e21e3b3fdb6c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ed7eb8367d6d730a51fe04f0bf5276ab
SHA1b41974aa6bd0b38d74249f77d65fb6f48c03b355
SHA256b90cde0a332c491a53ce390a73a79d80e0422814c3df2a9966735a82d4e03a76
SHA5122a09dcb8ee37eda21eca5e9c9bfa5f7712f74b35a0e11948ff1afc1a8005193ecf95153358584a7402d086e1c11e8af6d6a18600c681af2d7cc329f294302ee6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5698b2776e667f0cdc2d3ad616021c087
SHA110bc77608df3a89cb83ff4dfe90abb319229cad3
SHA256b413bc24e6ddd8ca162751c0c15aded42c9cf52a3cfe3cb47c2e229d0344fc22
SHA5120265713d4fd2ad8068e85b7e642730dc4abfe94466e7624d7901755240c7399728a42d94bd23b39d5548205672406e310ce2a384047ac17c0b02fc29b23249c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e9465ee2077bdc1736cececd7b98dbd
SHA153b1e343d5a94c0814788ffe15e5c6afc39cc7e5
SHA256723d8f3f0a1bd6a179323216931ada9c65c8ea2b7d34837bc62198e7e9a80074
SHA512aaedbbe6a98345c6ff823fa8c6bddd558d63d0655c80859996191aca9fd67430108b54db9125f5f68e3ce1c6806f726b1ad70065e810ada076701a9b3f5059c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5217121180f17eb6b7e07e10603942139
SHA1ad1e939e4a635984a9faae4a152ac5e6ff35292b
SHA25619b18b8d57dbc1036a71abc230ea5e288f35e6d562cae45ec901177f62dd225c
SHA5129f96f1e6c9b79507e059dded3bc07d515ff2f94d66353fa10c0b647d8e4b4005ab523ea30ef18b027b310921b6dfb1caadfa89b2cf39e342d7a77c56c69c4916
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56f90e8eb609c2cec2242fdaeb34c2e6f
SHA195ebe746c2afd2a4019aeee726f004364dbb3611
SHA25677591f5862eb502f66b87963f9b05524a846440cc52434dafa4eb885f28a1a71
SHA512b308f95050224bb425a54888114ff3fdedb5efeabeb9f03e72ad8d50a27f1ad07a4c0bfeb8ed3aba6b501051d4a24be49072cfbbb488edace9d8694200c72e59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5460a1943ad8a43b815424fcd41868fbd
SHA13437980ef6345afef37a599d22edc0154cf7c0a2
SHA2562d03644824b71bf74c4e36f208748ec4914f69da040b03ecbc1c732d04efd877
SHA51215a04c4862acb824de09eb81f19b8515620a7c03d54528add3dafc94846d126d834a30e794ab0b3fecd4578db9e14d1591d273b04a2ac9f71cd09487b8bde2dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e46ef4e2ca233f4095449f31e6e95b3
SHA10f820d138a6c282eb2515e4536400cc62207e676
SHA25672f1d749dc8e99430170ded8183714fb87a3fbd09534e8dc39b5398ad03c1852
SHA5126d3c17f1a5c9b903bef391daee0b513014cccc2d483f2eb04c3cc956ecfd2a87a09c11484ae25377ae1aa11fb5b6aa05400dc944cda88dcd4b7013b7afa60a1d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9518aab25ebb74717541e56f592c5ef
SHA13a31b6b97197db6f31b68605f4b6c743b0511389
SHA256fb0e295d88c27c2d4893b65bfbe8d514725eb9dd625055980ddceb4ea411477d
SHA512fe65caf1731401589fddf00ff97ed3febb98888aa2cff1926384a6740f9e834d5109ab22e78c199158439be0c46fb6718a245533b1d6e3896eaf6b1a43882fc8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cd83b3fa41445fb92f3a93a561326f8a
SHA1da3e8c26f28b312ce59ec684c4455138c756c05b
SHA256f5397a3b92fe18ccda4ffde02ff20897c757725aa949f96875be22413f041968
SHA5123fded6f9e02196bf5197db23ad3aec0c3b3ad29151d887bc937492d98f1e93ae9de70cad1f90a372e57afe0719bb9ffeb782e187a5193a1e8b909a85b02437bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56eaf6effb9d739b358e2e83e5cf74aca
SHA196c528c90934053db2442ca0c91ff1a1422628fd
SHA2560c7956121ae0f782ff67f94b20cc212a7b0e12be0e105332e0f75982938abd4b
SHA51283a1ef9c82df50fe4ba86d764f30c625e5e0b54adcb4c56f5338ea1eb2eb34505c2a12e63abd63506947bf556069a8b08bb1698090712091d6b2835dafb61e77
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5800c3231a49683dc4fc5effe6e2433f5
SHA1cb59d4a628ffb36a77f57edbb826ff08ac4cbfd9
SHA25663a018f5ba5eafd2c4c834d49d9b1daacddacf30f7949ae7997e7a886a030d2b
SHA5125d1ffb90b887f269001f522e892ad64b511f6a718404cb5838559c3132f9d45eacb97e4cdd37abc7119ab4953497263e2b8ffab60588917c114e0f4617bf546c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5de574b1cfc0a7e65aa01d61d9820088e
SHA15cd863737d1965a7a93178a8b35e57f863dcd66e
SHA25617da10f75e6b40fb67f936bfeb1909cc600210b86c56479fa4005df92f3c4d45
SHA512179a908fa20d1bde1e779b73c5bacd0e6de630565cd7350f2495eba8b946b070ce11c44356141d07cf63d681220a9f495e807e8ebb7ee9763154c92047d47d8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5328f5ea1e8bd5db690fae3ea0ae282b0
SHA1be9aed724c7056249a66c7556ff2894dbcb3f7c2
SHA2566b0d72ef8d6d93fb5132deff28033bf8467631819721ae800c15c57c697cdc2a
SHA5129a027ad1c2582d344650af19df67c583b9104fdc01d124b2839dbdc2b87159a7e4f68ee820052a047a4c1ec7a91e884961ece6b0ca5b5f8be2786e5c45d8f8df
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
578B
MD5f2c4f42ca0b71db308d82a27c30dac4a
SHA10517f0a850dee37cf3d6d4379ef1ce6a0ad85bf9
SHA256ce2214fcd5c0f49a0e752438b5c7b49c84d68760871f53fef528be2270817f42
SHA51239e1af3349065c1861f71ece207b270b326ad91288a69a077d0cd5554d74a9ea1211b0edece7c052d8f890709c7a6ce4075190c487954213ad39258e8a7a7c75
-
Filesize
578B
MD57950be9439946ebe2d3424570007f17d
SHA1f875e1a627ed2bf08f7ea4ea6ddb4d2803c39e3b
SHA256915dbcf2575ac59eb6ebb36ce6f39e831893039a39546237f00a68066f5582af
SHA51297d22ec23402f453d33afa66e1b91aca5ec5cc21a102aeb247bf8361207728f4931d89637575c80d5bdebbcb1ef89fb3d199f007321075c8a6887683bb3356e1
-
Filesize
578B
MD590122faea3bdb4568d8d93f8b4cd0aaa
SHA13095440aa7a2d8d110f1b48801ca870c5695d179
SHA25633b54a0c34af95f336f17f7709b39f3c5679aefe33840cb701a00faf028b3bcb
SHA5124c4981e7f938afdd0564beb7fbb5155dc90dd57d25fed70d33b5de96ae9c60c9ba57b0c840544ee30e5f0fc4f878c9a54b5092cb570cdedb2f127afc9befaa68
-
Filesize
229B
MD578c457616d3fe83bfa130d0e175f70d7
SHA1d15bcce746fcc1abf19b09bd5ca4fcb635afc0e0
SHA2569b489168501131482015ac0195bd3e1cacf831cf87035de90411b7df91f0758f
SHA51288b7624e67c275e3a139446dc32d04ca75b59dec68f5aea24a487dd86c301d9ea979fe4e4919269a8d9abcc169b8a38218dd1197dc74b53973ae7c3a87e40ad4
-
Filesize
229B
MD5446d5cca2e5447768af4d3fb647112f3
SHA15f2521855f6f326db5326cc677b32012fc0c0b44
SHA256b918a7f513b94c81886394586cf9be26b2aa9886429354fa538f6c03cac5059b
SHA512617cb897cf415c5d06fcf9d8288d5a7e98420d8a9524e58a3ad8c1638c011c95e5072b429e79f130ca9e3f55122a3084e0f630ada2b942c06727c7f5f7639ca7
-
Filesize
229B
MD520d81f97e564852a5a9baab936cdff4f
SHA1a9b0c67b6c09922ae9d36b4bef3d500fbcb581ab
SHA256704efdb44f6fe5a3caae782dff6f70442fc5a802df3a5690a073bab1f4b597b2
SHA512e783c03e13a905152a5739507d5463afa12f3507b462629ff201015b63db85480cd71d39daa376fec2b71e2e33373feecdf2dadd94628cf4419558abacc45947
-
Filesize
229B
MD557fde646204e3cdf6b3508f134ee2642
SHA1c391219c9c70bb0b1818b1062ee966b92b556e09
SHA25659bc6a60fd725149ebdb03bd0e8026d08526956cdebfa9f4325f3314bce43f18
SHA512b43432e569d2db92ad664da8ec8f1b4f99003e63283608a78b03be5d936482f40e3a48db9bdf170b7b2199f7f65c100084aa460f430e72770d621ec97a1e0af8
-
Filesize
5KB
MD5b1e3acf5d73a77ad2cfcfbc48a70903a
SHA1fbc0063ab5a27156c93a49b2fa4a9102a4918dc3
SHA256ceaddb5817f74186945c709ec242573efb40ba4bb01f5889d8f064337d3729c9
SHA5122a2208cc2e966dcc63e7c54ca4e3807bf986a2222c1bd459d97f69c8979cb188ec30fa5bbfd1d7aea715180677d8eb5e95cb730dc898ca91bd39e5624ab46c42
-
Filesize
33KB
MD53b56a8a5b186408b9f454d08b3c04eeb
SHA1eb6e8a2183d61f337bc998c528fa6de50a6880a9
SHA256575bfa1e5a0a544effaa394a4f97b19e28c8b290e4598d17dfd4489e86c74c6a
SHA5122370b18ad616b6fe06e02bad4ed8c8ff8cb14a789b83ced5780c4997c3d82ed901149ae9e21126f0f20a233b2f004282c4fd47aff05026522f37c4e41742a820
-
Filesize
402B
MD5fba1706ddfb0648ebed78159991724d7
SHA13176ac52ee76d96b3f40328b4534e4569f0b742a
SHA2565c7e20b7dbf38329530b43b9653f9378d89099c9ecbde315a70a7ac2d4d3084a
SHA51231cfd9cd1889c9e060a07e68804cd89c8dc439de9135e35344ada0fbc9166c32b5aec5b0bfb08e664de1ee5aa29185cb831538520f092985127f142e9333d2cb
-
Filesize
48KB
MD5fed60ce123ad15f559925ce1ca948c3d
SHA1d90ab17b4e47ecd4e82a1ec8dd1a4b4d6a4ae407
SHA25684946d6ca3efdf70c6d97b4f10188f28452a259d0067e9094469ad28bbe20407
SHA51290a34712d0e68d3ff7c48f5daf50abefc3e40cdfbeb1a2d4f7882908fcb8bd47a096ccae0f391d71c831d4311ae5e475e6a29330b82b83b39ec6faacc06d24d7
-
Filesize
43KB
MD53e6aa2a9953b6571e3abd503127cce19
SHA133dcb6e05d6ead65a4972b6d63d5641fdb636215
SHA2560597ed4582c0cd2e90f6db9c159302187ba91734b76fbefc94d01dec1d6321b1
SHA512ab0cba6c02af74f7075fad502e12de5b2eb1cefac0969ca44950d10c78f72053f91ad58a28e2eb0ce66f7a5aeecaaaca731ab4d451570b70615866a9fab8434b
-
Filesize
29KB
MD59033d8c5564bf6554c12a0616afbbd54
SHA152b205f91363f3f802a5b23e774c1230946ecab9
SHA256019bf798b3b8b93059161c45ac97aecc7f72010eb1d0edb76ad9825b704e81a4
SHA51236b1c9872768eedc5a907dbefbcfd878bcadbb64623dd8c37377cd566300eeef2a034e45c7260faf475f381010ea929e3fd6beed4146b8f5b3967e5c60dd355c
-
Filesize
15KB
MD50f68887930013fa21105440c08801a0f
SHA14399e73625c30cef6618814aaa00fd2b5b6f3b71
SHA256c90dfcf6106a0f8088bd847193e9a70b6888372f75a982b4667cb5d450378092
SHA512b8bea62496bc8030c458dd98507aec5625412d070ec9ba062e844d48d31054deb1281096e2fba9b3c7f87d16e4192bacba5e7d862df3ec2c2d1b0685e4faf70e
-
Filesize
578B
MD555fec2b197e4775d00781dfe36d202fe
SHA142f346affd7c1f9e7f00e0571c8527ccaaac5c9f
SHA25670f1d9552d01846a728b6da7f8afe9a372896710ce049f214807687faba83dec
SHA512e4e59458add591ad3c61e5976047c0920c72e6785dbd2d276a99aef067a6163f19cb9baa59e1a28948c61a61fb84e51f124a15bbe4bc6272a83a2e7d6c2e2937
-
Filesize
578B
MD53da81e950c5ec5078620cedc63c99755
SHA14d73c725a3eccb0e0920ee54da376089228be53e
SHA256ee25bb07f8e8dbc41a85956d0346423beec9f1047fadfecbb7bbe1708bd1b049
SHA51283bbe057dba75a817dbbb3b6fcb4cb47bbe9f592b507b863761c3f99c90cbe70319e243b95ac54198a7ca93338a7f75cc478b524f8f2952e6bb0a18cb77f46e1
-
Filesize
578B
MD5489406216c49c0fd09020e33785e1df0
SHA1736e13f85eb6349f4cd9274e687ff090c1717ebf
SHA25666e06f994e874ab0d16632fb93879c60143f270f7b3a70e43d08d9df549c850e
SHA512f2eb3aacc98609e0118bba71fe13545221a509ab3d2e2938fb07befcf353b9221fd09acc1dbe366fc61601f635350f5ae6145259ee68a72c2065c2831fe3b11f
-
Filesize
578B
MD5d98ad0f743053e334eab4a1c870e12a6
SHA1adcd1f6c3b8c38d603c42335468ad76c556b594a
SHA2563128469f60627240400de1582c249d13138e211ed06bd424c331f4e641f45357
SHA51210bb64fb6981d88757cb693655d430b1528b57839eba3c926d6aa5fc61a26c640f19c7ae1c92c3977b4a0094eaa341cab48f97239ce06f31c6c0c2fc178bd69f
-
Filesize
578B
MD505bae79b91eac6027266919cf1b847c0
SHA17ff40e73df94c6574aa4ecbdc08bac983f42daf2
SHA256cfdb24fbdaf1a287a6a2202f45dcdc3ce790bd83478d61f44829f792e0512cbb
SHA512429dae8798b2c0adc64ae40fa332ff3d838ff2500fc096ea0a05b38e52276a28e8c9143e9635db53d47e2d5d06c5031fb7ec6e0f0ab5b4f3ee3aa9164d873864
-
Filesize
578B
MD5b306c07b59d4f2566d8f6a0ecf93de9d
SHA172b5d081c75c19fcfafed67898d3cd63aeaccd03
SHA25666ba4dee19dc3ee3de57b09ae27184cd59011827dcc7ee0912b3adbb52dafa14
SHA5121adb4fecd52ecb3a7e3dcf4237851e30405a2699735b796bc7dd6f9317db1eff2908052fdf01a66d30f5652686d821d25780e42dce3ed9d61ea952bf1e30e725
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\633SXO0D\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\633SXO0D\embed[1].js
Filesize65KB
MD58417bdc6e12e916700a7d96ce5da18f7
SHA14008a05a898c1b3916ee942634c9fd1aeec6df46
SHA256544db95f98f5f03c690646ba01723b71486def973b1e6f204f1be0b45adb9490
SHA512db6443c34b11cde801c3d3879f233122525b71de4d6f23d0f8d4671ea6ceedb86219e1dfff651988f8b212bdf35b3ed2b2388dbcd64d29c5271c1216a7263726
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLSLTMYI\style[1].htm
Filesize162B
MD54f8e702cc244ec5d4de32740c0ecbd97
SHA13adb1f02d5b6054de0046e367c1d687b6cdf7aff
SHA2569e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
SHA51221047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS2MOPHD\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS2MOPHD\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS2MOPHD\base[1].js
Filesize2.3MB
MD5be2d743404b6a7bd2995830b1d6cf733
SHA133987ed0b3fe75279181b0700efcc1886e7618c4
SHA256491c17b901c077b5917d1a123c565dfe164ff5f9a3756b210e84ff72ce70b7b1
SHA512da171fccd27a1195d2e11062324a35567a8468fcf9a7bf8f13af48bb4cce36b249418dd7ba044e04535882db65f8868855956f02628277ec2fbbf35bf9452147
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QS2MOPHD\www-embed-player[1].js
Filesize330KB
MD5fff03d39b3488c3db22d2c1b0f366529
SHA1d378e6fae5cd7766be264c35984ddd6456e2b6c9
SHA2562b0351cd7bc6e93fe5ee02bc2facf1c4a79d5787b76cd360c2f46a4959fb3053
SHA512afdab5fd6b651870259277df89943426cc87552c718a8d4cff0cfe9b7292c41da64ed5d5365a3adab62f619b7a1c7e1cd7283459e2b433fe3d061120075bf49b
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b