Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
30-11-2024 04:06
Static task
static1
Behavioral task
behavioral1
Sample
b4b3b30fa982827ffb39c01645a0ccb9_JaffaCakes118.html
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b4b3b30fa982827ffb39c01645a0ccb9_JaffaCakes118.html
Resource
win10v2004-20241007-en
General
-
Target
b4b3b30fa982827ffb39c01645a0ccb9_JaffaCakes118.html
-
Size
282KB
-
MD5
b4b3b30fa982827ffb39c01645a0ccb9
-
SHA1
4e62b46bd4856f3f302efc7997b1fa76c21e848d
-
SHA256
a40c67ecbd0a31d3e0633d34445def0366b90305cd5c28cc8f31bb213b850d5d
-
SHA512
46fa281bdab2875072c1e653e74f8751d342955f079031a9c9473b0b77a5e0749fc956274afb4e404a12f5bbecbf2dbc6e373c4edeb73114a39bd8dac40d5ff1
-
SSDEEP
3072:OgW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/1BmGgkr3VY7RJvfy3dhw8S:qDAXmNR8/pQ
Malware Config
Signatures
-
SocGholish
SocGholish is a JavaScript payload that downloads other malware.
-
Socgholish family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20999c61dd42db01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e78a69453f00554b9c7935775bae7b9600000000020000000000106600000001000020000000baa670eab5bc183363eeefbe0e2a9398a94af263130b2b3d22b943edff22c69d000000000e8000000002000020000000c106bccdfcce796ceceb6e898d1c3c42873c2e19ba1b156063a11361ae4e6c052000000057a3aa2c7ee80eaeb9b6d184311052a3db1a7e95ccc1b1532392d84a4b631c31400000003e636ef93caf95499dc9c7aa44171da97bb6f44d342a53e3509ac625961b2fe7b65fef20f0e4b040b93f73f421754b28c481c19b7ffe7fc494f73779f9920b88 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "439101479" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10911" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10911" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{870568E1-AED0-11EF-9333-DEF96DC0BBD1} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10911" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2039016743-699959520-214465309-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1748 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1748 iexplore.exe 1748 iexplore.exe 2592 IEXPLORE.EXE 2592 IEXPLORE.EXE 2592 IEXPLORE.EXE 2592 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1748 wrote to memory of 2592 1748 iexplore.exe 30 PID 1748 wrote to memory of 2592 1748 iexplore.exe 30 PID 1748 wrote to memory of 2592 1748 iexplore.exe 30 PID 1748 wrote to memory of 2592 1748 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b4b3b30fa982827ffb39c01645a0ccb9_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1748 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1748 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2592
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5017fbdc8756e005212cfbda650f88f8d
SHA1f3821c40317bda4dca6ba3aa5fe06d37e8c447a8
SHA256fda81d0b9a28fb16c1bc0d02ccd5a5e46a49e16edd11ccd9cbb9e954c3fdcd5c
SHA5126d09e68104895bd775c8f2ae2850f8ad55fa73fefe914b2ff8c229a8c1c43bda761726ce393464f7cdc87a01c76025a5f7667f888a3f19d348de73900b2ef537
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3513D73A177A2707D910183759B389B_C3CF9847C2CA003AA270AE473C534F74
Filesize472B
MD5a427b323ab9a98c5fc7bbaefddbddd18
SHA1b31f6f35bd7d1d0f05b91e18aab32386dc5cb321
SHA256dbbe5aa58e4bad8d2ae22a584cbefef1c889ed9682cb798523792d64e7b78c19
SHA512223e7ea43aff34ea9e4eb49fe3f5adcdcb8733af01281cbbd37128df2a9f017e9cfbeb443d7a35ad170a88a0235927b47b7ef5fd11fc04a1a96a872eef3bf2a5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_3F16E5B3B3622A859B6D00F85C904C9D
Filesize472B
MD50ad4578a6bc7010d193957cacbf2fa63
SHA141079e1a00ba0c46d0814829f3c094d09a54d90d
SHA25627a3689e73a776e13f2afd1aaf6d82b9ec1f820d35bc19a0eabf24e839d2f134
SHA512220246b865c0214d079f3ec6329bb44854a31dd295b7a4de14a18719c428c31ba333b19cb2ecc26b3b2b647c5dcfcdcae26460d94217d380a6b890483acb1ed4
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD545b1c192b04535da7ba3c2e1f7babfa2
SHA1e7a912e3aaa2a173681482e885b875f098cfc719
SHA256fc9c764839290cc5798b6e61d3b6d59379630ff5a038a14523a1f608146fba32
SHA5125d4b899b1c7a53d37882387601a83e3c5c88d66bd543fc22a8c7d32efa5d7cb1458dd894b3ff3376a53334f6420e4680909911427ef8700a4d3d052acf7689ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD58cd9152f775cfa40f9fe650fdee6d491
SHA1b8c1117cded004b693921a45619ec11a6a8060b0
SHA25630663a99e54d4156ef7888c9dfb8f427328a844273a35bdaa53d0fed3c62ab32
SHA51284335facf01f35ef03fdbd50639f86f5304fc46f30e954589942009787f472d282961b0f95bd32d3beef0de178c3bbfbb7326a60a6176643392ab6e7063ae8f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD51d3b12cf17e53b5dab634b2e1ac08c9e
SHA1055f264ba44681090c3262ca619eb2b53807cc8b
SHA2564ff0a9f5e59c39169079400208716315accdf0e475f161c937b4e02ed7d57db7
SHA512f50e969f0a34fb49c2847cd0d5a043f86a048dc111f0f42aed7f149923675b9acc290c4ece4237500ddc485a1dc85dbc761de832721a55347e6177b3ac276202
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD585f7276e6e47a2a34295a97641e103aa
SHA155fc7e471811c0f4bc131be2243e0571f943b5b3
SHA256f5d73dd3bdb1f3c4b7612a42f4e70a263f96d24f51e077bd30c86ec593120ba2
SHA512d1fb252b1d852ab0187b0648da7a84dffb0c90f242ca1633091bc55e335bd2ba23722e4fbc31e3559a7f94ee6652c1c60c912aac29e6200ede1d74c023be2ce2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53da1d8b1d3c7d734dc44dcfb66388bb9
SHA17f7d8b8621bb6e7f7dcf1bc7a2b4b2186221d565
SHA2565cf8759a2a15183429dbee39b6500d07772f9b64943bd523ac564c4cc46d709a
SHA512ddb21602ecaf9e7922efbaa747fe70ad880e156604a009e1484a412d5aff4dd23fef42e985c4f59d711c71468cbe16d75b7a88ce4c12d86102a9a55c5f0a8bcd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58832a65298c3a76878266d82cb8ce9d3
SHA1be72f2508f651a09d42dbc9cfb21bb9f65fa6a04
SHA256e7dbe6042f1cafd82ac276cbffebb52feda9d1d5c8ed9d18c1a523a15e6998f1
SHA512c43e8002dd82a9f5c61b18de398c7423dbc7a6d188995e4a5fcf7ef7acf87d30febd24011846fd2a878f31be9eadf248d9ddb3866a1b5e802f8b9472ac30a672
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c75c424ad0a4dcfb1ea5cbf2a0886b6
SHA14c99da9bc2941424c77d9d64261eeb0e757f95e6
SHA25628a62af90013422523706387cafa3a01b68b08691018d1460f9510513576263d
SHA512ed3c3d4ee815cdf8557b8d5e2fcbf9eb78f02612723d2c9d5f041d01ec881d080e48082015cd0fc2b965e9904615523075a363b74964b6b45b81e383ad80d535
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53e5eae8f01014177305f085988bfd6f9
SHA11fc4f5d01b2d58c76d56c7e04b4a37381005e0d6
SHA256e9b3d9ce3485febc5719af43e1c0e0d7d0a0919798021c18021b190b786a014f
SHA512bf91fff34f5f42a6cd5c690b2da25e57758011b469634ba258b18e3ebed963fb8aabf8f40d00a3c391e380ddae9a08a7189a3c55756ea2aa9dbb8869f8df9273
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5973d266a480f5bb81bb7a1bd1a12efb8
SHA18ea07d844d9dcce75072556346c563d5a76bead2
SHA256abcf72e2fa2a8ebfb1733247b34f3fdb97743f796f0c5361ef130b0463745d17
SHA51257ae047f2506814662b2ae25b96a94587b8dc18edca81ce042a85fbf757c76f6fedf9775610f771007cd356fba9c271933368ab6e0a41e2fb188f7f0f09fd45f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d82306a65783321a12ef60a36f2a553c
SHA19ccc5ab33dd2dbbd261d8d133047ee2e95edda3b
SHA2566dc2b16e1531245e15483d828f629362e55f0f9aede383d8a59f6f078508526a
SHA51230c1fda0ecec30e1e85819d2d6616790bf41a4939b7c9ef110801366da8d15bf2e974c1063c1ee1a3d53a4168cb860bcfb9f2c71aab8efc0080cdc98d66c0a48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9514b18780530d7356927a865fad820
SHA1044fc6281b501c4ca8d3cc310659de384fc1e814
SHA25611845b4f1098cf68c1977365fd7ac0e0fdb934dffae78478c0e3e146f324c968
SHA51248fb6726cee497aa9b9df494300ce243aa54157f5d80ce298c721633e4535707c4bd79b33827bca33133fc98e88f38ff2f766dce064a104ef47f1b953f6b2138
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5699662eb7e8182fa3e1a70f1754c6fd7
SHA163e152023b8de094e6545196d211ccac2992168e
SHA256b1d67880bc7181ede52e9c4f976842c3866b9a92df37481ce2bfbf187500a32a
SHA512d6d5152064b191d54c3551e3dce66f3b34dbcdcaadf9b1b3c8024ee3f62e49a5c2b63fed9f843e59a6d4dbc7b81243b71e60199cf9f83fd9bb19c01dc1f805fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD557f745909e51626b02c6d41210ebbe2b
SHA180125042a47034bea47d989390cfbc456ccde7a4
SHA2565c747ee84fbe1b686c85a916482fe4f48a052fe64680e3517dea41cb831c310d
SHA512fab9e06572e196d963d9aeeec429c5179c9aa8af1029dd83005f55bc5f4c408081c7a0e0bb6aa4dc7b2f12822d35672918a7d923170bf5b8d45f0e07d7444a23
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59539213a861a88a4793f0d7cb7002053
SHA11beb02510f137ef7bcaf642b8ddfb4c1a03174d4
SHA2566926fa4e34ddc609c33950a74dcaa0e270e3509c23c05d9d3a1257d21b7dfeee
SHA512bbabf498aa99043137548551aeb853792542d81d61637067f8c31f1f6ee7f87c0eb00133ffef6cb7ee441596c36431e4a88139c280954804007cd3f64e1610da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53eb6e43f2f83c46521bcaeb4f4208321
SHA13729bfc37ccf050248b79c94c4736182dcccd1b5
SHA256d238c865cdbd16f220bb89c0b6f267c4ca19ad8e152d39ced6c3f968efbb304c
SHA5127bb5383062f184d0d16402c0934ade298c2bbee513967b35365376c4c92468b271c8e6b607737db9ae624aa5e9b0c7563b631cadd71b07a86c40553427b82048
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5535190efb750286b64987faf5ab2f89e
SHA112021ed936e3d8b2abbf18ef864fd29ba360f640
SHA2561a779a5de0a821856970b8757f3fc319fa7440452eaf7a221aa56a4644db5a8d
SHA5122984c3adc0dfe45cbb46aa2346cd1493c0bae3e317c09459cad0d030fa77e504407f7958dc2be0b060fb2ab8605463458a27b2d1cb08f1d098e8b5b4df7f1998
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56f427fe951cc42d39904aa51bd989feb
SHA1ac35963fe53bf5706b242d1a967966ab8d363ad0
SHA256f580d4446d90c98ca2fe8f3fca2bdd703f93e51071a38b51fa25332a04ae4127
SHA512bdf2387fb07753bbc61a29f6572ad170b9ae456bd0a1abf13ac5f512fb60b27da642201778f0d3f65ded4e41a1551331032044b4d81c687e1ab2d4296c50470b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ce422d3ef9ca19bbbb5c410c148a7218
SHA1b8e4fb0314e37fe6ba332b3d5c8647e3ce691ce3
SHA256293ffc5de5c50acaf368b3657d0af5c6e913a8de4c41819a670e7cf488c91641
SHA5129d40be1c0822cd9eb8d22bc75c48a808340528e1e83f68afa289b7065322bb78b3febc10f500400f20d9e422c70f0b2b7acac578e3c77c9613baa2c973d11997
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f1619a48bec41ed4effc2544957f9629
SHA1517825f8ab93d2a3670b7e3eec05941e5be479a0
SHA256e4f55e6defaac33099399f8f189d9e86720aab0ee085834e6baae56b0aed7cfa
SHA5121d5bb30e7d522683ee2f85c261a6781ee3a8bd8e145ebdef7f19ebce427715b2ee8505c01c81000e1e954409d09f404ec81023c93b6aeeedc59970b876d20f0f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ee69e1a4bbf7c2fe460a4042647f5aec
SHA12987d93fb151ff86f7de26553ab25a1a8fd8e6f6
SHA256da80796e80d0c8f498cc9b05453f15c58a4bc4b77c13a2f5ca9c01318eb363d8
SHA5125dc1172a9dba71a9de1bbe59edfb6446275cd7688d883abe0cd8a8f3a6d4283d6562cdbda38df3134b8bef2697a143cdb63afe892b68c5c2d90e909dc69cdcc4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c6a6eb09a3e84915aea57053c6a7921f
SHA1e5d1ee1d5f5b940ca16c63a6f844edb131c01b2c
SHA25661bf37bad696efc23fc9a82a731ec5cbacddd34ece6058f2761c9f450024ee48
SHA512eee49db168c2b47b6c02f9958bd93cfe24ee587bc462455a519273f001c22d5e861f62b493734d2c45b8a5d2ea5f5b4ade6cf2598b592f1df5e901e28ef49c13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5567b12ecda1b697a66f207fd804019a1
SHA1dd4e5666b7867db017e1a9c3947c958f4426991a
SHA256e4da3972f89ca1b6e306b417311a114a86a6b1c56817d13fc5caee379a03e172
SHA512e17f0f3315daa085f939d0444d35a03a0d6bb3a76f0aba6713c816bfb2639b201f894c1a0826d558381c133b78e8e3092a92b81bc2685650c174c8ac2eefeb43
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58bf618040f54ea952ec3b739b9212e5f
SHA1473d0d026d8151676e251981529bc46387e1bb35
SHA2568982163a2529421d9337cdb00cafde8a666ceadbd3fdbf0aa472959679781192
SHA512162ef226fd85a2b0bc0bf0a667d6d378b6e009d45f3d907b296ba96317c4c59edb5cdcff18923a2377336e5c195888c3d00ba65a231be54acdd48b34da75f4ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd788e13e1e3cdaf45eb96d77dbe4d87
SHA1e3cd5bbf494fe4ebe0a9cad948f7b1d4177e1055
SHA256b444b34e80c22e4e2b818debaf344f11de339016d94fb672f226dea2384d15a3
SHA512799de4a8764c43c14d67479cb76a3c5901cd71288c016237a9acfdd0664e3a75a80069072dc3fea1bad244068a4136dd1adeb099bd87e42b52104f5da7ae675e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a90a7c0ffc929590985a2a34a31dd24b
SHA1ca0995ae0e20329f6bd62572738c27c26497123f
SHA256b093b9b9611f5d2d4f6a32e91387e8cf344f6dc66da47e0a23e3ab421f383ff6
SHA512c9fe2f70b759eae0a34977cbc3abe54556819bad82da6ddfba353e392f588b75e5badba7e96be5f65f942629a1a8badd74f5c172b811dc0a5b6e05eaea6e46b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e78f6a44c44807a1b8ac6251bb438b74
SHA14bcd9ecf86a9b3f13b370f7b039910614d52c5ee
SHA256bf6d42bc6120f3562b9e7abd66d78916bc32f2a48d89af0b7428aea82210e697
SHA512940346e48adf251ea518bef11edf6b479477f071f0e59fadd46451161933e2b411972853a6eb5b9fc13f25d1ee22dc678baa138bd5083a7df4149e75abf61243
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ebdf5c7355079239ecac60b0bb211a87
SHA1dfa9f1864402d57e13c4f7bcd97345ca6e890840
SHA256dacc8d78265b2a64fa402bd7471962fdc3d7cac5e7aeaa5168fa75509de1e929
SHA512b1fd956454d916661e19f840439dd8ec7eb394e0d652b7af560352cc085c956d498c89477ee7a6eb2907baea0e6b090eacf6ded197ed0825f789a7e73aa02118
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dc69efde0f2af3316d5b6a49c014f314
SHA1e9166d197cf07568c74758289c4e9bd430229e7d
SHA256bd889874b9584e539f02452e26580ad001ac3000f66bcefe19a33710ceba3cf5
SHA51239202262432958359cdc1c3d26a28c03e542735fc27f6b3a57e8e794f4d6e880fd264e292cd0b86c834ea9d97d1d90a259a4f5641ca080d14417d450199a68bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e2c519dfce288d6741176c14f3bc16b2
SHA1447da40fdd2ed2964a7b26893f971409e7ca29eb
SHA25614e56fad7d7f35670ec419fa6d36e9d90e50ee0509b1536a37ba9d012255a306
SHA512cea1cb8655b395df09514072569a5b6310e4e0e0c7a6a599ba05cb5b4488f269f8024f5252ebe456201741e6b3267d86a130c3f7590931d8909b63f1237d57e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b010b5dec320b0165b8f8b746e15cb51
SHA14c1be143ca6ce367c53629cf9fe8c21dbaaf84f7
SHA25600da28248238a798470e3fdcefd55d823a052b627951fac08c566ee47de1f5f2
SHA512df0e8a9569bd3bd6835cf8d690b49253ff478d26b158ddf1340f46865315f9313c540ad72e457f1725298e4e647f561c1a14eb3e7f83726f71e8566f7994e6e5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DDE8B1B7E253A9758EC380BD648952AF_3F16E5B3B3622A859B6D00F85C904C9D
Filesize398B
MD53539017a3ed87da4ff0ec877c4dca677
SHA1d78557501b75ce15170024df6e05e24a33d75331
SHA256cbdb324821505bc814e16f6683dee7069a6c0982684ec333f74b37a86eecabb7
SHA512e009d2800d47cda07ef13fb3ab365b945283170427f3d06c39a49042f754afadaa82a261e8f63757b03258924cb83a153bef032d47331cc20947c2b3b5133d95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD55eebdca1bd81e8c263e5ecd535d75c21
SHA1ea26ddf15af4ac467e1a658bfd87ed068b1a7118
SHA256bd7733ee57c8017cda17136522a67e2c7a62d3de2eebf1d0fd7c377be1252db9
SHA5124ce4d64b8a889afa2c43285af94a95b01ebe7a3352eb98a6636e0e8be037645b913889f32988769c5f1493b72b4963533a6ff78400c4ceae735921b2d5bbff57
-
Filesize
578B
MD5b5ffa107f3c3d9d294a79f567b8a1d0a
SHA1371b9c86f22d2a88d59aad3fad36e428ebd059b7
SHA256b975403460ef3a878a86e1c6fd92662ebd3efcaf52fc83b6376cac384083007f
SHA512573ac9b07b207c7e62f63e2c537a49cc9c3219c63d5e934b04ae5e95e4f1b0d876d10fe9080e6e074680b602b4bca3b201865b16e9ad1747ad0e8f4aed4431da
-
Filesize
578B
MD512491dbeb4c0572487323a144d196196
SHA1764e54733c33407d9d4ab39b8f15268fe7b7af9e
SHA256fd38271da3146b79a9eb3b660d5632d7b95c709cb3ef87e554086ad69521f1be
SHA5127a8e57ef0ad0dfe8e5a31c56636a2db088d52c7a917a03af14a0791562fbfb4d430b395c5db2387fcd35931c28ed93be4e2f0107346eeea7d421309756ed4477
-
Filesize
578B
MD5470e16d4a6cbc57526b28917ad568a66
SHA12f53bb9df903d742f68acd2a3cc3c59ad8622a6b
SHA2568954c1bb03123c38d2ac113729769f3ac29007acda9ca69faca69357bf2a8b45
SHA512d8d23ada866ff9b092fcc783a01ede80ab9fdbc4ac2463988e2e4dcd1ba51f3508d30c4695b3f3569471d0a8a59a43860cd3c3d6f04f509b25a02bb1ff1940f8
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
229B
MD520c8d5c3b45d1f32c548c615f34739b8
SHA14233598ff46911f87defa00b589ed27cc511101e
SHA25606cdede9a9071cba65b2a6dc5746edc7e71d8116f41a283fce8f031f925b4ff5
SHA512fe02d7036ea8c1dc661f456404f2a7ba2cbee540dc21f9a91b9d19b2fbb43008ab9546104815216fcdde2f572d3b7075d5ae1de37a22a1dcac05d2a94812fae6
-
Filesize
16KB
MD5b41a14f447d0a2124ab9a614dbed2dcc
SHA1688e711f1306ebaaf5bc0e359f53f1a40754401e
SHA256f5fed2631c11bbe94659b33e29039b2f98d2ed967200cc351111f16f3340cfb2
SHA5129dcacdf0619bfd20d5ece6f12c591242e57f4632752d7a666ac8ffda8f9a482d0e80f08c4a9e37426188f1a8721130ad968d41e04e149c04a3992b4f2a22b776
-
Filesize
578B
MD51612607b3409cdb23214c2757a509e6f
SHA10f3f9cb8cb5e8c29c498e8e3bf0b2442287e5644
SHA256f935e173d37065539addba0c069545e8ccfa8ea7bfd0e11418c76ab19b9fe595
SHA512a8636d643dfd7ed1fd7b868f339c6aeb59bf4611507b291c6e49bf4a77b2f96a29528b889fd30138de5e31029451fb633f595a5edfb4f1287976a37b65602044
-
Filesize
578B
MD5956ead903fda0c3c4dd4bbe9128eced3
SHA194172bdd56797437d4c410e7dfa88d1aa478931f
SHA25629468b61a1973254784f4b5d77d459a41a2ded055e73d5a742f83125faf8ae39
SHA5124bd917d850fff113d7f98e15e49df3b6b35c70099a05ee6586a7863a4a03e366534a8d56ccb1a35e9515d67fc6225f1c0828e3021774f123badb6c42fc20ff35
-
Filesize
578B
MD54bda4834666058108b5a252affdda2d0
SHA1b0d1a457a6b5c29c405fd0141625ba2bf7f26f87
SHA25659a171faafaeebada7e3a51fbff5c95d2508b3297748ebe665ff05095bc2e23a
SHA5122c40ba2519d41c8cc9cfbc5224a2d1f707b63337a581d3a102be5dee4e493aee42acc50763ed0a9a42847837724cc8c9a04d9970f0b8f28817f019489b6f99ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K0PVW9XR\cb=gapi[2].js
Filesize58KB
MD584e3d54be3ffd25a24bf3a514490b86c
SHA1490f4a059114c7704703a7c67d193083f551ea1a
SHA256dbae2441d55a51b1d10c5591a2ab27141b3aebff8e75816a3a4b107fcde4b6f5
SHA512718ddb866adab289ea6ed942b18ee9d74c185d5739c642340b6ee827265e3fce63b768021aa182a8fd540b4a1f82f555dc9e668c4cd187566fe19336bc3464e5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K0PVW9XR\rpc_shindig_random[1].js
Filesize14KB
MD545cbe9a36a384fe9273d25ef64ef8691
SHA1325026cc1cb9022ccd8c9c2089597251419201cf
SHA256d9959cd6fb35fa6a7aef91a5bb9bb5358e7f91271d84130de6d06910076c5c5c
SHA5120a70b1b12658418caf529a01ddc4d7fd6c59276c4658028ce2b5f7dcea64ef91f353fce7e67349c8534b68fc53c0ff23c36a7260337dcd307b836e55bec43dc6
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RLHRIIGD\2254111616-postmessagerelay[1].js
Filesize10KB
MD5c264799bac4a96a4cd63eb09f0476a74
SHA1d8a1077bf625dac9611a37bfb4e6c0cd07978f4c
SHA25617dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d
SHA5126acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RLHRIIGD\plusone[1].js
Filesize62KB
MD52693cd35d818b48f4cd562c6abe0db29
SHA1131c844eb658219966c722b60cc12c8a542ebe06
SHA256911fa262008c6ef2bcf8448ad83a5aa8129c39355b98d957f5c7dde2babf9b7c
SHA5124f692bd49811addfe89d14b156fed6513f04ec4be2629086a8b66ddcd6e7b8b7df149fa017173824c30f7492c2320a3d7b9c0344d5e1f7074742558125654f1f
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b