Analysis
-
max time kernel
133s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
22-10-2024 22:04
Static task
static1
Behavioral task
behavioral1
Sample
6c1127f3508b22eb2d6769d36eebebef_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6c1127f3508b22eb2d6769d36eebebef_JaffaCakes118.html
Resource
win10v2004-20241007-en
General
-
Target
6c1127f3508b22eb2d6769d36eebebef_JaffaCakes118.html
-
Size
357KB
-
MD5
6c1127f3508b22eb2d6769d36eebebef
-
SHA1
393d7b5048f002546d41c11c485b9647e78eeeb6
-
SHA256
89bcf15f7025cf8c58540b02a00b6046c46ca1a63fbbebfe3ece7272b3c07361
-
SHA512
4d6965d31157ca939316f45f8a3da8dc6b3e7241ef4439a0b1c50ad05e630155f1d79d9d0ef0091557319edf3b27b68edfe6a2e997aa0e6679deaa1a93c8a753
-
SSDEEP
3072:wsW6WCiqYxDNvG8rmgcXmNRSz77Ler71BMn3/LBmGx8SJ6VEiVPzpUVrn7RJvfyV:gDAXmNRo99uEWV
Malware Config
Signatures
-
SocGholish
SocGholish is a JavaScript payload that downloads other malware.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
IEXPLORE.EXEdescription ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
Processes:
iexplore.exeIEXPLORE.EXEdescription ioc Process Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10475" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b3e8f15f634dfc43bfa5c3a2648d88c40000000002000000000010660000000100002000000048e89f6aa37198324c2e1ddc32974a99ea819891373164e3e51ef372d3286f07000000000e8000000002000020000000efac72af2bb48e086255587bcdb522ac5a82af7f08dc12932fd230ccced6d80e20000000e12dc68bc7170c6d8cd566d868f6fd22c27216f034ae389645c25f84a992d4ff4000000074eda9fecf85a712445d1cfed4c1cac4551f86bcdec14228de8916dca4505b56cef2c19d392331e1993ab5e22b0fdaab223754a7d056f04130188edd51c394c7 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{91F27A91-90C1-11EF-B656-D686196AC2C0} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "435796528" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10475" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10475" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 4057036dce24db01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid Process 1864 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid Process 1864 iexplore.exe 1864 iexplore.exe 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid Process procid_target PID 1864 wrote to memory of 2296 1864 iexplore.exe 30 PID 1864 wrote to memory of 2296 1864 iexplore.exe 30 PID 1864 wrote to memory of 2296 1864 iexplore.exe 30 PID 1864 wrote to memory of 2296 1864 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6c1127f3508b22eb2d6769d36eebebef_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1864 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1864 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2296
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
1KB
MD567e486b2f148a3fca863728242b6273e
SHA1452a84c183d7ea5b7c015b597e94af8eef66d44a
SHA256facaf1c3a4bf232abce19a2d534e495b0d3adc7dbe3797d336249aa6f70adcfb
SHA512d3a37da3bb10a9736dc03e8b2b49baceef5d73c026e2077b8ebc1b786f2c9b2f807e0aa13a5866cf3b3cafd2bc506242ef139c423eaffb050bbb87773e53881e
-
Filesize
436B
MD5971c514f84bba0785f80aa1c23edfd79
SHA1732acea710a87530c6b08ecdf32a110d254a54c8
SHA256f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895
SHA51243dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD517169f604c5a221e68d2f77161769349
SHA1291e1cb83c3fd39e39b39bad0fd87ceb31cdf62a
SHA2563951acede55cdc00bf6f4edae9b33381c2db201f1fc86424c56280d6fb323243
SHA512231e523c805e39e763517a859f62de2e34ac7fcbd8deaa88a7a1442e6634993a341aa9476ea4b7577c53138ed5a74e33da4a9be78ddc9f28c273533f3052cc5f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Filesize174B
MD52b6032b37e93d5328d03da1825d4cf18
SHA1264ffa77a33a09126f8309e6f020f41e38381e78
SHA256761e31485360be1afff4e8b52b2cea88498b541c1a57773733c367f1ed6d50f0
SHA51230eb5e0db2fc0dd82e14d7d0b8c50b8e6208dac65c4a0329e767abb2b0ccea58a4fd0734fe97263440d01e7e31e73fe8228971f2cfbc883000c5c9e4d9472184
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Filesize174B
MD570a59122c870e00a89a83fbce0473ab2
SHA1b650053ebe4da66ee0e82b68c5a01dd1e3b5200d
SHA256fac380ceb6ea0c50d9a508d76fcf09815b352ca603b9b2a6a0d504064005bd77
SHA5124615859709a412abcf086d29af9ecd8557c93df5521c9f5af9805ba70eb5a073f69bf297db16acc79a7a232b9aaf5571ee2e4b7a357f20a0a69a3eaabdb81ecf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Filesize174B
MD5f9b2dd4983fdfa7296fc949022bde85f
SHA16e9935b29c4c63b54f9393a993c208706135186d
SHA256247a05724b136b669e356a0187fd1538ac3d095f86fe7dbf94e51fb67de91aca
SHA512f2f38b8eb29008f2b364469dc4c1fa24028bd4a0faa6ba375254d3bd5ec567c7d21ce89a93427a11cce017a1f97a293bfd6e721956033decbe92227e6a2bb687
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5422ac7a88a8dc601c5e6c91e9ec281bd
SHA1163ea94be72bae431544a6c3c05b7166b29485f9
SHA256bc06e3d474f7b86822d441c901dd2e8f7de4daeba2b7b22adefa732e3036a6cf
SHA51233f45b670ae1c7bdb0ff1aed145fe06d748700ab2ee0339a108d8f45c5d002375156b95d4ee8377ae1c107493c3e0e816c9fdca8fc989c24bb2e9d4212bc7333
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57063c7ba1ebd0352400c094759714fa4
SHA1305dfd2d9abb6e6cf1abcc672c282bc039f2b32e
SHA256dfbc2f1bebad66e20b09fe237ae42f69153b2e98a01b20ea39ea745c2c871088
SHA512bbec76d6e2bac113a42c2074ec99adecd8c7e2ca9bbf6634156ee52f8d393708455ebf6a8116b3520736bec14aaef0d4b4f4bc455a062cf659ae9aec4b66166b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ab24d8ec10919664135f4e0e91aaddb3
SHA138d373e65ade1938b65cd9c3ec31d6bf75a12295
SHA256cad5abe90618dee54e6c71ec800e2855fd585487b9f46ad84dbbcd61f107a9f8
SHA5123ee519d91d08a1ba0f1d33e1ff61f426ab8e6d0d1111f3e2ce2a78a9dd6e30748af000371f4cd3287f04cd2072cdb034454925940a064477125b5f10d8d40c6e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58aed17a839f61cdf615e557ecfd47ca4
SHA17f1422ff593eacd880168a6789aed1e11a56ca7d
SHA256bca0896c1b216e156483eef534bc7081678329d4f89778e8754211660b042083
SHA5120e028e78874ab2624bd33fedeffe6ddb457834f46d6bf75afb23d967533d1545da64bc28c1a5369881f53623b095b37b8e846cc81abcb440fcc5bad95f122104
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57417d7b5f9ef3d667d217d51194f3528
SHA15ce20fe5d09ebc405d4ccd7de515b4e366f52154
SHA256d8b8d780949c8135d9758fa402cfb301676f72255bd08cbebeb6f5bd20f989b3
SHA512c59138432b4c90cbe1f09193f2bb6d5b05cf3e3cea299e0333c54d5d2ec7a526d5bdb499e32a9be17e27eb327f97c05b5cf5ccb4f4be4a450f8b429542efb3ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e7272ac3fa0d8d862e8d03fcdffa1222
SHA1d2f7990ebe16e74b89619e3e0f8f538bd1cfbff1
SHA25678c0355e7c1dda754b2d8a206f4a31751f379518e0e1776c7ae384d86d7aaff3
SHA512e048594609e55df694d4e81c0a835c0084ca7ec33b25c2ba90c6e197c3f955bbc54e0b1adb00ea0dadbdd821eb2a472fb84dd5acf211818b9eca035e51a86ad5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5de4413e686d8194bc21a4026dffff100
SHA1a62f387a4898155ce5c445b210618a8a68334b2f
SHA2565bbb831c0c5111fa19dd57f465954d9d3fad3fba4edba2766d6ace548d82b759
SHA5129f7348464d378d95897a521747fdc4e8c007ebe4a6990cd9b3385831978980e9cae2ecba3142b9fe0bc5c698e3ab5e8f8015038c0acfd53043f0ef4ce49d06c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52f1d96976120077349c981ff53e93179
SHA174d0f18ccf161dbe146dce7d4d6a538f0242f92c
SHA25664777dd9484491adf69fa3cd93560aa225d96930d03226c0317f248ae2216b7c
SHA5121a558a55e2a169e854e3c85022de6fae862cc28c588902ff94f3a3fe499c12dbbf3e54abedecf74f6fc7b78ea9086375fdcce31cfe4e07ba3a47aff6b76c8af8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56921aacb7aeacf6586acb43273e7f90b
SHA14bac0ef418b7a5e31c69b7e3110f343bb7c7154e
SHA25692bb8f84cf0aeb5b4bf2f2cd2d34214f18404ca0f601db4c681a419c8efb324b
SHA5125406b598103e8f828426c2ba0c7d3392324554031bad797a07cede7a426d0c7683f2a7e484e2c3f70c7d7586a7d20c34ad61a72b8d333c1d694ecffcc4a2180d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d1b791f3451a701b39391ba2ec71e6fa
SHA17d83a671282df58ccc3b3855909f49334d5d37fe
SHA2560f5a63fe9d3b529abb734cf87683436e4d6b31a85f13b527fdd5f16837246092
SHA5123d74e45d9b08d205b3af83fb19da1d0ca9654c777926077aaab394c4ac5091ef115545f4057a42828114ba7d71c071b0c560f9de2637716a1ab7b942ee68191b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59b64fc2cad32aeee74452377841c57e3
SHA120ffb4bbd99a5a348d947d1ba57dc2a534f1410b
SHA2567fb093733cbc6ac7868bcf1ad559ed88640931aee13864f86b4d5557d6f43dfd
SHA5129248ef6b2e8d192c9637a9c2007816c26dd341348c77476d3e7812196ea6c9898a2260773f85cb50af5769823275ded94ec4add6c8837bcc9d259c21ad56dc65
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b8b789c0fc7e4c995cd0461a7da55f35
SHA1e317938e9d758191df411df988c9ecb1ffa339da
SHA256e6dba1585d9ddb8cdb657318d6da8c7e0f8e6f8ff8b3d0a7e8db203329fb3607
SHA512a2a4f5032c8ecc7f4f036e636f763110bc05eb10e96c72ee4d039094505af18af2242e6330334538e16dd45e2aca381e2d8f2e02ba948fdd97066c1e078e6bb9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5783f1f98c813253e9acf2e4b884ce0d0
SHA13d897cbfc5d0b5ac94f8d18cff3b7c0a222c7fad
SHA2561ab07da49052709872a302d9ae298733a0bbd5d8d1887cf4ff4fe3f1d098b035
SHA512ae3cbf1280e991ea6d6c2b3265f32d7a64b7fc8ca87987db9298587b4ad36a4987f48ac5d9801792e19156ca600b94b71516cf73a64bb2679eb007abfd0d437b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57f6160d656eb1fa4ed87adfcfc3c3d8f
SHA1af2e67f57f89d340cc28a9c4cf5d20ea117a311d
SHA25640fef4f6549f28a60cf99b25eaa5aba4b400ea2c08e1c57829aaae1583c3b0d8
SHA51261bf077af461e7e2a0f2dcee8f09501dea775dd67186ebdfeff74690010f31653cfb1005e775780c28af42c1ec5386168ad956966ab5fec95070fb5122965153
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7547bc6c3c220328a2104917c67a48b
SHA18ed5087e3b7f38648a09844aca846cea77805dd2
SHA256cd1e99abafdf6baf8e64e13e06c23615580f0a3e5aa87e7931f0917e4e23d38d
SHA5120eccf47848a252b0e860a61a7ee286e8fc82afc62026ed3d6f807784c37d75cc11a123ac2d7a04d216a809d1f18b6c1e972d352842b8724684907fc4792cd50a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59ec163bba713d0f0d252f0ff9ca0eb78
SHA11a0d0defdb3713acb395ffb78043d83b0fd3a38a
SHA256a4130a788b61d9316578b6a5a3eb5ac7b53b8789025e3ed335a5641d93cb94b6
SHA51234e6b8070b45db8bd20239aca094addc266dc648d44122834246f2f54a232df3aa59cc92f6ec1fcd2cb1c4dca65cd23b884daef49a504bd017a1c349d3525c96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a207434b6714bf5f76adaad1da1d4337
SHA1a530a06a6c4ef862dd2a6213543cb46d90761f33
SHA256cb1cba5de5020564be20fc1d3b5e528f1f471a61eed83112ac783fc65a23040d
SHA512d5b9650785ea8278247e2793bc4351a1206271c44dda6efdf1b6dfeabf1e08c8fc42b0305a7de2b514e311e30e225c14cba4180d70cd6a70a7c41c0a8b0b1eb4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD537767dd3a6591399f32d62b2e2d3d623
SHA1189af8a90d5eba85080ff220eb60b36926b30667
SHA256d8543471b9f0df23a0982cd6b49156b757ecddade2aee8389fe031297be4c12f
SHA51267c9f5f9179a70b7d3073a29406b3eb87af4f60b2a3ea8d2ca4755ad0a9a98b1171b1d5a71f9c334385488b2f2166905751a890404d4cd6b47e336ef621303d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9f5eb8313ba06e42250c7ba3e03571c
SHA1c5e65945a054ce8674c04482f2e00fb1289f38c8
SHA256ea2247aa70baa79ee6a26f3af979f5a8ccc2c3720bad93f101f0cdd42112abe3
SHA51223357bf3986088d8d2fd96da6ab8248ec34fb2a463955e4d91e6c4df648b880b9af1e1268c0ed1aee9933016be678615b0bd00c6d6229feee26591c1b74310c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59bffca39bc78a22ee7d14ab90f4683fc
SHA1ab9e7f1a34538afc153031fdea6c1870c5ab6339
SHA256364086d2b5dd039249bbec501822ef4b9a509448d6af3f63228f278ac72d8612
SHA5122400ad59b3253c0cba60852301f1d11ff2eeda5d1e4b3b204ab5326aa11533a951e53ad246d27b90e455ab576e32e587ab3e0cd105ad32a00e2f9fa46562dddb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5502861f3f870e579234474857bbe36c2
SHA1ff586ff7039c407c6f1f472666515cf256355550
SHA256362fe817c6520fee4b8ff11d170ef6a5613a01a75164f87f8fef2422b072665d
SHA512342c831934c9f76334691f844d5c095be2dbd5227a983a96a04eb2dd10b11cccd118d22908ad8128d6f668d55e7e99a543bc67406c559e8ee820a16eda709c85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5370ef0a3c2dbc0dae6a19250fa0b878b
SHA19ec93c922202c4902a6482480f160622701efd13
SHA2562e20765e7d44cfe364646eb0b33f7fac325b02cb85ec542a03d83913387ca10b
SHA51283c41939fca5c8c7a3b31a6b94edd97d69558efbb4ceda9ad165ab6031f91545b1429d682c5d41ae6edf4dce553452e5af185657e2c5ae5b79140328f78c722b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9e5885504d0cb14ce9a837721b48a26
SHA12477b85cf3b5fa3f328f6ec70892fd92621646e9
SHA256366c634a6dffb101fe551f4ee2560d49fc7f9d192ee73e07d294b59832a246b1
SHA5123412e4ffb358afe1477bd8813620b41e54b0b59320eeb82acc216d0396d752983784e51557b0198b95039405d75314f926f6ed4c278697c6e5ccc48c5b3d6aaf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5806ce402687552d52132f503c891cf75
SHA11512628a2d6206da2ec1911b5a72f5cbfad11e78
SHA25622faac7a7e34478162d5dfb004e5b3a905ce5a77f1963f01a9d6d7d4df0da252
SHA51235ac7d902c2485326488dd9cfc4237e1e7b2701dc81421bd9737c4e444dcb70cfd6be272db83a33ccb1b96098736b7a1c1204486aa0d277b82b52124fed1311b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56c644e72e531a8fe43f09d62c305fd8c
SHA16e63cc99c63e11898b02dff6f06e8591988e8dcd
SHA2563ebdca6080ce16e5fa75aaef588d35075b8c7ae66927083b6def60bc03c9d8bc
SHA5129a24af1ebbaa2fab8615f09f2c2da67f25db32d85af94ac9940cd9a836bdd025a65d006a994c2e7bfe6f0168ed288a7ceee43306717512146832fbadc37ed58f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a9daeb435fb1d92fbcb970b455ebd7ec
SHA1c2b144931b9795804e585a8d6f8110247227eb0a
SHA256ec0295aee6667e7c32d0a7cd4e399106a66effbaf9639b8555517995fe42c5f0
SHA5125439dc8d2c0ef7b0dec0a38e701439f484bb1fc0635641544903e2c07f490a9a045e85f09600657dbf52d0bd8e93fca89046ee2634f355d3ee0bd2fe5cfa04fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aeded351da8bef06ba29bc40a1acae22
SHA124b422fcfde3e3335694e2e04406e03b8dab01c8
SHA2565bb5cac31eefb14fbef2fbbe73eba32c6cfb478a8688cfee841c8448533184ce
SHA512aa2a1cc63d51b334391943da8873c86632dc6573e3f95d84545b543e8e7d3c33053f4b504124cc77dc7d5c6b5186079f2fc9e73a55dacaa8e0ad4011a0da7272
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_3247EAD763AFDAC8D547ACA55BB3C63C
Filesize406B
MD51a5bd81ee9f9e8f457b04c67c63f2f3f
SHA1a8fa8cc36e323d39fcd5ca02884aa80745bbebfc
SHA256dc84ffa6ca469913a9ab14e706acbbeff3f49e81fb31862bc2f43c6e8498771a
SHA512127dcf4d0397e73a6cb2d14f12b25deeb5aba34c0da884c3dd5302b5f20031dab1b467cf86168c88cd23df2fa2d1b022c60f2d267af400f9683fe98b3bfb4ff0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
Filesize170B
MD53e750b726705be8bb087d03db1d8ce0f
SHA1f39d4bfdffa4028f2ecfa800d3e692eed5f341af
SHA256a780ba26d5b6be8323f759639352818519b722ab191dc787a980b51900ddce8b
SHA512a4989a7d8e17d1a8fd130ffcb8f1a569055431a3c920dec554d158036b7bb50334a6746e34cc6abcb89267731ef6233ea7541dfa1db47c2f0b3a951a0cca34f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5555216d99254a42ee9e639a872ad8ba4
SHA1622a15a32fe2329456b5c82e93cc51f50b700739
SHA2561da3fb401c9e6a6189995dabec81761baee2b6d7d750e80594b1284e08aaed5a
SHA5122628fc15b40db101c51c38c4a1bf42e8d7186980bc452f69a4d8c191d3983caffe24dd9968d11c33ac49873ce7290c40f3be1afe173732bc8c6e8db9f990905c
-
Filesize
578B
MD5445811322421e84bba15563b4d997002
SHA18ea0805417280192a423a2c1d74f2b2848c4c44c
SHA256547ab26863087278be5117b81b1369222e94c5edbb8b2a9e954cfba265312cc8
SHA51229f40098ba8d58141878741de1cdd082e8b2e3d6f5ec7b4e68235e8d9fb0337694c8a3e53dd282c025cfd939d3cf96c71fbdac4aba24586018344f2f8c06bae0
-
Filesize
578B
MD5b5e1c940e535a080cc8d6fb681f3765d
SHA1f81b18d90519a26d96255f42e951db269058bbb4
SHA2563db2575c865e28c622601402593cb03088175114e95ced230a81de8fa1722a02
SHA512eb3ed8345e0df050d3f5f1641d2e913d0c34fcb7baa1085828a67e137580dd811eea5ad1f9a91f04902ee898dfcdc758c5f09d7a414bb8b645148eade75853bf
-
Filesize
578B
MD5db6f946eef7876f019744432a7f3aa79
SHA116fcc79b47e6c68bc720e63c6d99e067ca7191fd
SHA2563f34cbb995913c02107be7cf46eefbdc91abe2974b932651ca1d329ce382fd09
SHA512e4df95ffdab8ad8dcb3a47d94d484ad957d0c9650cc3875628c3e3150e8d8c47776c6caa01375adfb98a2b2b4f3f62b667ddce54e63bad0c12254c0eb81b5d2f
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
229B
MD5a451d8bf9acf466dcc2d3712445fafde
SHA1b54cb608d170377df7f5029a8cc1a19811a297c7
SHA256dcaf1b3221f30b0456918ab8287fd1d24ba608d8630b477a9ce8ee863f98b832
SHA512e1bbd0eee1b75ac2d3c0446a98bdb9377bc56b8422a292fceb82460cbe32a32624c4d78673dc6ca64aafcfe4780141edfab8b1607a05a8bda88ffe92e25e1ba1
-
Filesize
402B
MD57831d0ba81b4570b5ddb80f2517ed7b8
SHA110d6c27f89124975cd24bb03914e25b7b397e0f8
SHA256c910ecb6c9ce11f610252d9f5774da84df312195a9d0ed5f27ada83bd60f6a89
SHA512ccc02e915d655092d94ce68b9eee2f4c2349d02089c5d5145b52d7a2e69333fe38a0385e10176dc9a93cea8343b80bcc6feb407cf147b8b08bdfca22a83253bf
-
Filesize
16KB
MD5549def99524094699a5438f282cf0777
SHA1ec9ae53e7002ce456de91c66a32dfd6d12a3488c
SHA25674fff9914f4a9f797bb0163ff85f215da19b827de0e3395a8dfd6ed4446735c5
SHA512057717c6d61224f0539771efd98f9a3a50cc4dfb7e1b049938e9a6074f2628f76fecb453db31a23502ef2725a9ad2b264bf1ccecdb17e2fd837b7cd4bf45fcd6
-
Filesize
578B
MD5e4ea86afe41d55baeaa81fa22890c5c7
SHA19cfbbc6afbf5730bf07df59fd3ddb935f61c648e
SHA2567e96e7e76d603d1a77efd3fbe29e611437ccde59e661c800632e2e1c3d0d2e48
SHA5121d31d53aac5a4eb99a6b99d8b58526e45931d45bd78174b2ab0d7a99144676f4ec12a65372f98bfd1df9a8376fa2eba83f150c155818ef35aa54c0716a5b3031
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AS91FDNI\2254111616-postmessagerelay[1].js
Filesize10KB
MD5c264799bac4a96a4cd63eb09f0476a74
SHA1d8a1077bf625dac9611a37bfb4e6c0cd07978f4c
SHA25617dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d
SHA5126acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S8GI6B9B\cb=gapi[2].js
Filesize59KB
MD51d4cb29476060a1b3681fdb681200b11
SHA1d541f88bf8d4fd98b9e0e723e050c47d4d32c18a
SHA2565930e64b0cbf1dc5922f65060422fcf822870ac69439450ee3cb134365a51a82
SHA51285575c3656c8e0d70cbcdf76194e37dbe3f7bd4535221a8f51fb6b51266fd682809fa86bc556c27d127f713a6ff75290ae1fbdcd8e589211e1685f82b99d93cd
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S8GI6B9B\rpc_shindig_random[1].js
Filesize14KB
MD570116351ebc507731f11cfb8653f69bf
SHA1667d48cd3c244c41a84302056e5b14140045acd3
SHA256e3fff060584ca9c8eb12a6925252c8c6333622f4e6aeae8417449bf0ae355020
SHA512a69875a52b635e7a561cfe2c7f4639bc122be434989dd39b37ab8dda08b49aa4bfd681c572628e9dc056c69808d0a03e2c6b4fef88db20a59ca73f097870aee9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZKZ95V4R\plusone[1].js
Filesize62KB
MD51106da066ce809fb5afe9c6c1b4185b2
SHA13b64d3a7f52b4c07047fa8727db4207137733bf8
SHA256d0f3af1e716ce7846e7c252ace160c12480d41eecd5a7e7917ee5b2ccde62b51
SHA5123f0205b89d5293f14d863e344680a9d8518e5d4ee3b981dc5981106534bd597ed6b388eecab1385320f77c8d5a46a4ce5b64f03f4377b8ea13ecf9b569878fd9
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b