Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
02-11-2024 14:10
Static task
static1
Behavioral task
behavioral1
Sample
85d8cbd454ef748f1a58f4a121e772a3_JaffaCakes118.html
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
85d8cbd454ef748f1a58f4a121e772a3_JaffaCakes118.html
Resource
win10v2004-20241007-en
General
-
Target
85d8cbd454ef748f1a58f4a121e772a3_JaffaCakes118.html
-
Size
85KB
-
MD5
85d8cbd454ef748f1a58f4a121e772a3
-
SHA1
4fadf1e8c2ffa31fc3a2b831425744f6d4ca77a0
-
SHA256
29b336ce0a845f5383774c4d7e9a060f4f482ba56b4aada89ba28cdc5ccae171
-
SHA512
af61a8bc9dd87af9d88dab152bbbb295cc543b00d9199d77719e6d56510166a0ce17288ec19fba749817de83f771316bf1877de04ba621a216f82d1aa736cff7
-
SSDEEP
1536:Tkwgr8VSeO3xYTvd7YyJrJgMTpkaS6cgRrRtZciM:ueO3xYTvd3JtzVVntZciM
Malware Config
Signatures
-
SocGholish
SocGholish is a JavaScript payload that downloads other malware.
-
Socgholish family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0396717312ddb01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3EB822B1-9924-11EF-B4EC-5E7C7FDA70D7} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000004ecf3e4259aa05419b9c0951a15b13190000000002000000000010660000000100002000000078563662b15b42d94291de66d001657a00fad8f851d393d4c2e8caa9e3c6040b000000000e80000000020000200000003ffd66e88aeac21c4f2917bfe8af6bdb7ef9a29259365d75819305faf09af4e220000000e9f00f4a2421178821d5c6dc7142b9ca4bb74fbc54498316fd2073ca2a86ced04000000011bd929b224e77a322d8c0e06d9b05f41357dcb8dcb6b1a50c486929a4b42a18bec9e817b12c1eb9c796a39c968d60a949d38e63a2358d65512cfdf82956620c iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "436718512" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3692679935-4019334568-335155002-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2868 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2868 iexplore.exe 2868 iexplore.exe 2840 IEXPLORE.EXE 2840 IEXPLORE.EXE 2840 IEXPLORE.EXE 2840 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2868 wrote to memory of 2840 2868 iexplore.exe 30 PID 2868 wrote to memory of 2840 2868 iexplore.exe 30 PID 2868 wrote to memory of 2840 2868 iexplore.exe 30 PID 2868 wrote to memory of 2840 2868 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\85d8cbd454ef748f1a58f4a121e772a3_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2868 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2840
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5869a2b7221c89e60c1c0d331eb613b5d
SHA1ae586db98bc8d9ffaad649caebc18f8164f92db4
SHA256893e0bc766544fe40325ca635309ee62de819291d6f78459a5887bf60e9fb26f
SHA512245b1b6669f690301a67ed61371dc26d9907e89eb3d90dc45502011ab19822c3a271f32b1e5dc41ed7f58b261ff4b4012120daf264ee72c647cadcfb18d99ea0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD5ecc835a66f35583dc8a85db9999c8b2a
SHA12c8c857b3b590e5c23ce73719955e20292eed56e
SHA2565aa7b21993713edd4dea378a183cfea95b194ed8b0a30c8558003005ff40c6d6
SHA5124b7ac14ea408fa6757cb596c8707b81bf5b7d07d8a8c371e4b33eb94f26b7eb93612ad2d9c5cf4c16215c07b1dd7741c9069216323ae2f0d50096219aa558ab0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Filesize230B
MD590323ed6094fef532e62bc8a46c9360b
SHA15efe3accd6d9f660e84ddadd12974f5fc062b9d2
SHA256e53f061c43dc74e3af592132c1618dfd15d4c18d23b7ed1b776a3e373a45dbbe
SHA51296245cbd77c5934b8698210a48675d8104c52858780004cafcdefa03448529b35546e3e36bc7118aa61890e3b1f16a6ace39c4d07160776872966c7310415127
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD557df3fa7d7730393e2889d4645493304
SHA16ba0d29b904b9bcee23e7eb505e9ce88ab306d16
SHA256e973065ce761c134266c4e4d30552b9694b6e9cbcfad1d1d7c8cb1b45bc98f34
SHA512fdbd539d289f390b988cffb211dd75fda6e1a8e786b70df93067207ace21c27266e467fe520ed791dd78a065031ece42a328308a5c1667984aba847988552373
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4FA45AE1010E09657982D8D28B3BD38E_1D349A035F531E40CCCF658F74AE70F3
Filesize406B
MD553f47242b294e24e7afdde9c4ff905c4
SHA1ca522d2d89450ae58cd803def6fdc979281b2be8
SHA256256502334317afe49163ca77f9950a427b2e96a2ca37b3b18d8dd32fc94912c2
SHA5123353aa63cf52d766e656ac1638850967ba77069c4e107772a7252491a9a28017dbb20246b0111a5f95bceceeb29001fbc823a54b8e775a2ab5648dc5196617c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52da35b7ae9923d80bd5fdacc628196d0
SHA142cab1cee15277baf8da7f1d1eff0a25a53f0bc3
SHA256bcb7857d3f98f2f8ba16260b2a086f7135bc315520c355b6b5211e47f6229551
SHA512034b63d7f909931b1d4cd65e8008abbf2670b17798bb10169e133a110d7722e95cb2eaddbb5407a37e0fa3cf1073804e53f8be4ad7b26f7e25fd124cc1c34590
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5da77149b69da4d40077e1bf7d6cb2e0a
SHA11355b34bb2c447e7a7e8b5317a411b1a4843a3cb
SHA25661f5f8a87ed4f87f8773df659b383477263995afab8ba8dee81cc6057f587f20
SHA512c0105c04b5510a5fafaa5df756680db8c2ad9048be8ad9fece8f0650db0e7c43f269d6dfad479769cd04bd6329af72311767c9e4e35ad83d35ff201f35062c10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f51715d8368fd1a08386c8c1f70bb868
SHA1ff4453337684143eebd237882d37d0371f8242cc
SHA256d1568034f226675e24cfb34322bca45bb646a59bf0359b1103543c76dcf27f81
SHA512ee53917b466a3c5bbe6c3e5257c4df06559e91023f1f64f411b6d111b403f543026fcf65bb0d18dd30d4b9dd900521b9a06a90dea2767dd7f386b33f2b4e6a51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c84b9d316a90050c09577a4957378fc
SHA1c733e280a3608d91f7930e2abacf7ec46626ddd4
SHA25613b6e64ffff145fa826c51393f422e2146154c6d2c4b6eb6c8c696661c8487f8
SHA512a539aeac8b11bdd6f5fee31f55e6fad76b63e246bfa2d7737b2ff44f17f7f2df2888144c3c96bb1ba2f7bad71114a6af2eb37b42937694983df9a64c32bfff14
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD576b4d4c33c7de76ecdb485c1cf28b084
SHA16944d2d229e169196c85e49d81a4f9cf325c59cd
SHA25669905dde0d0ad032bb9e2344990f3e03fe9283c6c08f472a81930750b886ae01
SHA512ddced36c271a9227b44e2a5d7bbf918529d835e93c37972016fd3b9e5cba3bb6c1122a5e4a2b7ef4a1e426e6b62e6527d9aa6c78059c69b478146f20962336fe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55414d9ab034fcbf209ee352b53d1f5dc
SHA1bbd35093be9daf8a80f2cd38ceb459cff95574ac
SHA256a28d610ef209237c1000f6900725807a7d6e3198b5df01bbad4ed88832f15a16
SHA512b9aed9468ed0c865b3eb4a054908e1c65d6589b176f19054d18f4a7a2aa43b1781940383af2879654267c55d27cad34d16843592d181f4184fb46efd32a67eeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD558ac6a940982aa820a0ce4d54c193fd2
SHA1c5d591dc3ece07c1c23876f2f838eca92494112a
SHA256dd8580e7a24acc08b2079dcee0cfa4961febf59272e9df1c803e61846c90c98e
SHA512e51c68ff4a3816d4aa9e20b5809d519bf714df1f9bdc9af597154a044113716c6e2943c432ec67612d62a0ce01b06ea72fe7f3bfcc364fad2dbfff5958491d08
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a60708fb329583b0d86ed013eb11bb12
SHA1adc166d1ffdf4aa79656d00eb282163920a4c5d9
SHA25627feff7f73665e81a19fbd123b2cf7a3dd396c31bc716c18d20c7857f39f45a8
SHA512b2fc0ccb806ad85934781205fcbdf24b70acd84b6f8bcf35f9dfd8984cbfc0dfd43a86d4c0314c439bf94551263ea043d21565b9faa35ef673d8b182a26c837e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50ba3ab365d23b8d26accb69c403b1bb1
SHA17ca2833fd1c97932af9f40fa68d9efd377b19ad6
SHA256abf47a36683f15d21b43b6d10c009315a46a2a09102dea25e95472be67501efa
SHA51251084489026b1175e2430fda38a1774695dc8de13c5b7aa823b38f887cdc4739e03504cdaac936b89e500961529a1ca50416152620111b36b740bfc1ca265d23
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ec78b07e584839667dcf0d54ad9b14c9
SHA17f7d33c2983f302678fd4a996e979b27215cc96b
SHA256eaae6e4cca88335f0fc37eb20b03acf37c8d754db563cb53ba2e3e9594c39b39
SHA5129ebe914dfba449d8e3d72bb4869096e8b8665c8cb82ed1a0c7623daacb157ea853e781817010e3270f4e8254455602b1edc578e337fea72ddfdb5016f4f70f01
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d506f554080569319150a3f10e23e504
SHA1e0b005a6ff32b6c4198ae409bc2dd1eebba28490
SHA2561dfd84ff7cd8f44771530de54928da9580c76d8ae6bd9504c235304fa09b6117
SHA5128b0cd76db698d764b52e8f40a42e5b493e458c21910170d447324cfa38733c8153f45a939858f0cdd617c610d4755432bb51ce54ca97b42d278123e88e700fab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b5c55bd3e1a0e7b1b8daaf4d2b888902
SHA11f54a6a62314766e728e05c9dba4d1248f325c3c
SHA2561f20c89284486200e61dc6417a718e333ae926ab0d90a4dc8c5423e3af5ae424
SHA51272636114697c478d25d484d8427e65016e5fb7fda777c13c2e3bf2583adab0f6a918be8c5bc5602a6291babc18a9a6cb72703007dcce0514664e9d8db96bd555
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD557235c9cba82ef116963cb92fa1c9a2f
SHA19206b627874a0aaa491bffbaa00ee0b3857e6759
SHA256a783ffd56734595587f277f2bb6ae8c79854a9f5902df69c4464b8f178f68e8b
SHA51263d051ebce7d28b477acba9988b076df74c2fabcfabf246e9835bbd23d5d78385d493add0920aa867f93e50fd54cec8b353ead3d80aabb42d79a340cd42b47e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52a031c95d38a04a28f26abd4837309a1
SHA1db31aa138187bd38f755380285e61509c780adbf
SHA25689b9588aab74634157c5d1f2470dc172cc7fef10cada2095b395694270760c42
SHA512e2238a848ac50243642daf323c7a53cf2c4c1aa0c7e06e55b9c79cf02f55287be700a80f962026243a6d23c4400dbec51457885afb570b46ab811968071b59bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5800de9fbf956b687978f4252cc16ffa9
SHA127c5b6111e9cc9a43c28ea69d5c5aa0d0c9db40e
SHA256a0f0866d63fce8252ca6cb8ec2cae40687a6a6c671903890eb568883b5ee91ad
SHA512423ca911cf4e81e325ca40096f6efb5a96c8f208845e0d0560b01e1216d04851e9710199f1adb188145ee46971000697f74be248174852f95f188b8cf016d57f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5096d32ce35464639b6dce5dcc91a94b3
SHA1700f98f71f233e175a0cd505a64ef866068e5088
SHA25626fa3e5d7ab2214a22c70fc55d2ede6ede783d7b9e266e9cf11e10ac2e52251f
SHA5123209203837dcc6c9c474242d9e6d227ab2431bda886b66a699e88479fae317e671fac3846a8a18ec1af602063efa5570a74896defd37466de47d55d1a55f0486
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b46f58a6c94fe9de141c9f955fb5cc2
SHA115b7435116687b4281571f388ac65b810b432bdd
SHA256c604083c18466cbb7b1a60b078e8614a2a66082769c0e8cee3d24ed4e55a8b10
SHA512e0d84552b92cffb46de2709e0f4b09349b8c67555968a5ef078c55d46c42c650489eb50e26e58b8e9a049100dcf62afd0cd0703fc4a0d04f645692200a44e8d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bfc54bafd4f1eab1bcac877ed6307ee1
SHA16d56e37e65e218235c6fdda02c8c0a41f9aaee9a
SHA256ce73574b6ba0d7fa2843d88442ceca652ee76b7eb24e5365a8cbabda37faec1e
SHA512f98994dee1dd230d86e4304a8574f9ab1a0e80499bb3c690b0d8a25fb23929f01266eefd37d48b4986d70e8846bc33dceada0feec749baa3009626a7e96be826
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bac6a9a9516571b5f945a7c0c6956b0c
SHA1c9c78355672017cd071281a7ad122808d7576cfd
SHA2569fa5b5461ce3309075885842ec14fcdcb84979e828cf17c8566ef70b825b5e1f
SHA512c90453c67eee32892fb9e877507e83364237bb36c4db237fbccfed65d6732dc14e4887807034d760e778e63b610ef519315367e5e8715186c1b61a72dd182788
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD593902472d0a2eba5d9fb0574ecffe47f
SHA15036c5993c6f407fddcffbf96b9c36d6b8407ae7
SHA256eec596af13362c5d7528971444c194d2f50702ea2aaa587737732af6a527eff0
SHA512e577d602294d2ad73f0c35fe940150027eae8f9c73a3be855525fe7ec35f269a5a03a849cc2ba9808789ed9223e51552624ca16ac4b061a78fe959210c161d8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD542a716fccbb2eab234adaae995f52496
SHA1da52e775d6d6932e1f47247baea1289692b26330
SHA256501e8362dd1a72a168b9c0fee0f69f9b2b1209550dd03b906168b2e18c98f38d
SHA512fe146b0c423c12d19182d481a5a7ddbd8ca37ce37178eb9e86be05484796f1b8ea03b53b46432335efb1f841a3314122556eb5ed7cb24244d084eab63a6a60b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51161a7b18fa14063196fab4355abab44
SHA10460ca015a4a7aad3ad7e86b3ff3f695a7905da7
SHA25662526d8efcded01367368ca576aa5082eafa00319de8c8a19d667cffc1126618
SHA5121b2c2002330770c110acf0afe025e0a6e39c6bcfdb1c51972832359feed4c758a81117ecc92cf38035cc0d974b1834f23c5369f3208189c72fc7f29cc219de4e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b607cc7283ea7cc7109bafb6e1fa316b
SHA1ede312f164a12aa21b6858304c7eff7360cb88f4
SHA256db6e2f1028ec5652a2373ebfd0670b51fd00d1eede00ca66747f2af3fb0e3fde
SHA512242c9972bdf6bae58120e6548f4959322641a93dc818c40c9940aa4665a70d422da4d1c909af45cc15ca8e9c50b1c81c4c2f473b3eb4e5ea87d5a79e37b22ef7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5be7399b0ce4a1fc7c67655c5b67f5311
SHA17800d29d25acdf2397cc83fb1959fa663446c608
SHA25620c734642f6d7c2d74285d6346808c78cb037976585af2881ec8e2c96d6be812
SHA512457e5347c137cddd153c2b87d0456740e39df482ed3ad9d0118331b98242f74aaacc39828687e01c808d551c9a498421023cf31cf15518bcab24a683a8c0d818
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\454518911-widget_css_bundle[1].css
Filesize32KB
MD57f736e7c6844ea55b608b08713e0822c
SHA1e9242a3e84ba2167c85a2364f034e26130d3362a
SHA25645153ae90182f718cb7dc159ac2a02a3c8b5f9714d2d30b43e66a158a778a14d
SHA512b1dda580493f8c80a68b8b13c7abfb5522fb8b13ba2ae4adfef399837e918cd6b061db721d62672c7bfb2f6daea54b0c31c71ab2af4d5c06b7dfe514d235d55c
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\P1060141[1].jpg
Filesize3KB
MD5f7db7f9d6b3e5ad197077b622261baf7
SHA10a411a452b9f1bf91c53f096cdd2e9e539e3b266
SHA2566aafc6ca27037dae186bf5e3a62386bfadc70af66ad1e5e12fc8f83568f5a3b2
SHA512ddf849258d34063a2f942e68c78abc00c8dd8bd47c93f5b9b6114e50402f3d992cf9448d612fad0ded8e9cb43b944b0c466283e40512eece3416b9b1ffd282bf
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\arrow_right[1].gif
Filesize62B
MD54f97031eaa2c107d45635065b8105dbb
SHA142bda037423c40045f7852bdace0e657dd94ecbf
SHA256fb57165d255438328c270b4fd85a6873c65f61a6ba64eedcd2dbade61386edf4
SHA512cee33327bc5f5f34aa392ab2ba3df755348f1279ec10cf18da4119f3a5884b5a4304228b8c0fa2d35b81ed166874efebaba1503d5685cd089ba5a4e86898b99d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\dnserrordiagoff[1]
Filesize1KB
MD547f581b112d58eda23ea8b2e08cf0ff0
SHA16ec1df5eaec1439573aef0fb96dabfc953305e5b
SHA256b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928
SHA512187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\plusone[1].js
Filesize62KB
MD51106da066ce809fb5afe9c6c1b4185b2
SHA13b64d3a7f52b4c07047fa8727db4207137733bf8
SHA256d0f3af1e716ce7846e7c252ace160c12480d41eecd5a7e7917ee5b2ccde62b51
SHA5123f0205b89d5293f14d863e344680a9d8518e5d4ee3b981dc5981106534bd597ed6b388eecab1385320f77c8d5a46a4ce5b64f03f4377b8ea13ecf9b569878fd9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\romeposter[1].jpg
Filesize4KB
MD58a6eb089afa0c3baf016fa9f9270d52b
SHA1789351233681113d15f97d5c00a9cda5052fb291
SHA256c06ad9ef294e6fc923556aa9669d64d56a118d22791507505520d229b71d80a8
SHA512727850b0d66be301c1ec8a251de5e9d4e73a3ad83e7dc1707f5242e81f42318c3684ae96f2de68fe1554d22cf1e6dfb41b954f4b6c5f7ec692cfbd0d5e9d0a4d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BCOPU31\rpc_shindig_random[1].js
Filesize14KB
MD570116351ebc507731f11cfb8653f69bf
SHA1667d48cd3c244c41a84302056e5b14140045acd3
SHA256e3fff060584ca9c8eb12a6925252c8c6333622f4e6aeae8417449bf0ae355020
SHA512a69875a52b635e7a561cfe2c7f4639bc122be434989dd39b37ab8dda08b49aa4bfd681c572628e9dc056c69808d0a03e2c6b4fef88db20a59ca73f097870aee9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\2254111616-postmessagerelay[1].js
Filesize10KB
MD5c264799bac4a96a4cd63eb09f0476a74
SHA1d8a1077bf625dac9611a37bfb4e6c0cd07978f4c
SHA25617dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d
SHA5126acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\NewErrorPageTemplate[1]
Filesize1KB
MD5cdf81e591d9cbfb47a7f97a2bcdb70b9
SHA18f12010dfaacdecad77b70a3e781c707cf328496
SHA256204d95c6fb161368c795bb63e538fe0b11f9e406494bb5758b3b0d60c5f651bd
SHA512977dcc2c6488acaf0e5970cef1a7a72c9f9dc6bb82da54f057e0853c8e939e4ab01b163eb7a5058e093a8bc44ecad9d06880fdc883e67e28ac67fee4d070a4cc
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\P1010080[1].jpg
Filesize2KB
MD5e6d8c1d66a675a2ab146da0c7d9cbf8e
SHA193d8f5434bfc5987ab861b1b6afb08da6c839d00
SHA2565cdf7e63e1062f22dad66bc599050cece67bc90b9404f3359b1218bdca1a833a
SHA5124835978f81d4b6556d38d2707a13af012628ff4b476b6cac8738d8983f53c6747c96597588d9c14736560647ac9d2700e5a1108b1c009e4da1cb8381aa67eecf
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\cb=gapi[1].js
Filesize30KB
MD5d8173ed15801dc9ccdc9d3b7f3dd6eb8
SHA1e9f5f5b149bbd6837df4ec360a83966ab56ac735
SHA256bee77456c135363d03126fb8d98cdb6835f8774168ae46c0db2b7714b2f3dfe8
SHA51232d7efd6524fef018b179f76863fb882738b141ad4797058f8e858927eac6b277008fbc3fe6c170253a235c7d8001f4d46a242be4d5b649a34b7894fdeda1e2b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\default[1].jpg
Filesize2KB
MD590fabe815a03226e52b8e69371019273
SHA18def50c5568e7d701c29209f78875a2a807f27f3
SHA2563e5735c605fab3961d413d62f0c53507a42f7df7cf0896fa0547a4ec4b0bb441
SHA51201ce77c30393459f6608284c2b3dd46c0ca5c315c7928257abbd9414c5ac7fdf42c40b32cce8c23ec1db954218dfe7938a13ef0b92e622386c5fe2246c034280
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\icon18_wrench_allbkg[1].png
Filesize475B
MD5f617effe6d96c15acfea8b2e8aae551f
SHA16d676af11ad2e84b620cce4d5992b657cb2d8ab6
SHA256d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
SHA5123189a6281ad065848afc700a47bea885cd3905dae11ccb28b88c81d3b28f73f4dfa2d5d1883bb9325dc7729a32aa29b7d1181ae5752df00f6931624b50571986
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8P9TO0C6\mas-icons[1].png
Filesize4KB
MD5f1d1d5333a3a267d6f8a93391b8a59cf
SHA1de8e10b4ed6e79ac6af6048e0ffd2b1578a6cb0e
SHA256d45b8c80dabfbb5bf5d14bfd232b35231dacc7ba6e93631557812eb99d852886
SHA512f4bc7130406520e996796187c85d02bc05d52f7e66a85ebc0dfe03deb0c2ab176be791108c0f88d6cd19a305ca4714de53e2d3501556c8a952a056231f5466aa
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\Idool[1].jpg
Filesize15KB
MD5e57924d189e7747924e2ececadf5d91f
SHA19304d20b2381bfaf974b1712a58aa03ee76b4816
SHA256ff99bb4813e541fa6b09c95e1a99ef8da29ae4fb16b0eec50299f53455026063
SHA51284a8fee1de19cbf36895a4b55b7c4e56a655be4f42bb276135316c49af30f363dedbefdfa50a3e2f3ede1899e1c4aa9049b7da3b84046b222b9246cba80ebcdb
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\batas[1].gif
Filesize35B
MD55b5bc61d7b5c90d91dd6a9e681481e2f
SHA1773779311ddb80233f5700f60e4b675f96c9c0f3
SHA256dbe40fa96687ac16e7d79ce7d0cada9b5fbda6a3021a79c0681e8396211c04a0
SHA512e3d8144000a16673bd6f2a7bf9c2385047aae4f1aecaeacb32a505c6964a701b7dacfeb91f5e446f2630e2e670b66eaff98fa7de53132f6156487f640b8e896b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\cb=gapi[2].js
Filesize59KB
MD51d4cb29476060a1b3681fdb681200b11
SHA1d541f88bf8d4fd98b9e0e723e050c47d4d32c18a
SHA2565930e64b0cbf1dc5922f65060422fcf822870ac69439450ee3cb134365a51a82
SHA51285575c3656c8e0d70cbcdf76194e37dbe3f7bd4535221a8f51fb6b51266fd682809fa86bc556c27d127f713a6ff75290ae1fbdcd8e589211e1685f82b99d93cd
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\errorPageStrings[1]
Filesize2KB
MD5e3e4a98353f119b80b323302f26b78fa
SHA120ee35a370cdd3a8a7d04b506410300fd0a6a864
SHA2569466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66
SHA512d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\jquery-2.1.1[1].js
Filesize241KB
MD57403060950f4a13be3b3dfde0490ee05
SHA18d55aabf2b76486cc311fdc553a3613cad46aa3f
SHA256140ff438eaaede046f1ceba27579d16dc980595709391873fa9bf74d7dbe53ac
SHA512ee8d83b5a07a12e0308ceca7f3abf84041d014d0572748ec967e64af79af6f123b6c2335cf5a68b5551cc28042b7828d010870ed54a69c80e9e843a1c4d233cf
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\jquery-ui.min[1].js
Filesize232KB
MD5e436a692a06f26c45eca6061e44095ea
SHA1f9a30c981cb03c5bfa2ecad82bd2e450e8b9491b
SHA2567846b5904b602bd64bea1eb4557c03b09dabc580b07f18b8d1567d1345f0a040
SHA5121b09a98336cbc0c8ff0f535a457a3db3cd3902e4a724bb2e56563648ed1a36201dd84e63f45dcea80bb6edfe80a17db388379417386dec76341fb9eadbafa88c
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DUME8XYE\no image[1].jpg
Filesize7KB
MD5a82453e3ab5e55248df6eb1aff7bcf53
SHA197eaf55ff924d8b10a878969a3852ed1d1de85a3
SHA256880ab904e173d6b7f55cb37e96b4001ab47ff366b52f1af088bfcbaabfbea6d7
SHA512146635766b55562b4bd47bef6363ec50690ffa2b98f29b85edcc1b90a5942ef15a1d62de5b0e4fcd77799db8d3c73f1cc3d49fc85330147dd9b166219b5c7fd2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT668XG4\Michael + Wendy 183[1].jpg
Filesize4KB
MD5b713a3127329e4a10a0785404e72ecce
SHA1e5ffcc5d73118dff6b0cbc44b4940712cacd4950
SHA25633fde17f106cc4511d3887bf88c69b5a068b6a871074fdae1220a0d405ae8b5a
SHA512a4f48b8f5e96f39c402c30af25b4db04641d11ffb3690304b4933d7585f822935393e5f135adcbadb17054319f22037c7bb89b2c2aecd0a8d2c3fdde6d63711f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT668XG4\P1010453[1].jpg
Filesize2KB
MD521445554619c0100240951753c2b208b
SHA111dafd815c3a7710ef09c6a0636573e6bd8f508e
SHA2562f7550367bcab1aa383243dd45fddb1678bee0c9525f2740d484dc7145c1db6d
SHA5127d0f8a86f9e3e28af7a3930665946a0ae2221500f18cc3e693df19243a7c2d4e2548adf6239407946002dc780d7da8d68a5527c5454455215fc6051102c93eb9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT668XG4\P1060231[1].jpg
Filesize2KB
MD5ec77934ff87ea698cf520cc797e0edc4
SHA1bf003c067cb6f3f80bab2c9cb7af6109e94fdf3a
SHA256651e9413584ae4d67f2c65cdbb142194d319d1dcc12c696a874165d40335c065
SHA5128422602edb67cf009e76b729030c62005f63360dd0cb0cb8e18b59721af9fc47221dea6d976edd09d11a24cf6277a32a33b0f00173337f1f3d5cbdab82837db0
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT668XG4\arrow_down[1].gif
Filesize56B
MD53b2441ef107848e00feb754f18dfe880
SHA18098172ecdec9b8554172f028e91c7a30352bfde
SHA256ebe34389aa08d8f4494fc8c0c7e8a90029e7092d9b857ca635fa493999716675
SHA5126bd089121f9d60150ce194805e48ddca7e05337eda40413f0f7a9a4a7eb51ffb69ad04d1045b3a8bf9704c7e7bf6606703f1ccc431ad2f734fa4b3eff0072e54
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT668XG4\cb=gapi[2].js
Filesize98KB
MD5d17e0e80e14fb43e0bf1725df18085c8
SHA1629385e3872d75c946c09971341a85b000728ced
SHA256d934993d735e76e5c23c07dafb65a9947d8bb3ba52fca040ce848a52a74a9130
SHA512cd4b9784002372baf8c83c83bb54d1bf4240ee16eebdd07f1f477c64254b6bb141dea7db2e2a1b1e80eff8d8e9f39c2daea5023e79d1ba89a38117d5a6f0abef
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT668XG4\httpErrorPagesScripts[2]
Filesize8KB
MD53f57b781cb3ef114dd0b665151571b7b
SHA1ce6a63f996df3a1cccb81720e21204b825e0238c
SHA25646e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad
SHA5128cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b