Analysis Overview
SHA256
aa14c91f12c6f44b7800a4b9e8c1733f2f01ac220116dd43d009f0a7a0a8630c
Threat Level: Known bad
The file ed747913ab380285ee0a6d18604e2ad5_JaffaCakes118 was found to be: Known bad.
Malicious Activity Summary
SocGholish
Socgholish family
Browser Information Discovery
System Location Discovery: System Language Discovery
Modifies Internet Explorer settings
Suspicious use of FindShellTrayWindow
Suspicious use of WriteProcessMemory
Enumerates system info in registry
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-12-14 06:30
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-12-14 06:30
Reported
2024-12-14 06:32
Platform
win7-20241023-en
Max time kernel
131s
Max time network
146s
Command Line
Signatures
SocGholish
Socgholish family
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Zoom | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\SearchScopes | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E5F1FC51-B9E4-11EF-8B45-D6274BF0F910} = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a907cc1344750743988d8bab481dbfbf000000000200000000001066000000010000200000007e43acf6c475b4d052b9df9e30f0acf79f110c7f0cd6962da85675997d5f264b000000000e80000000020000200000008b833ee184aa6a5730c22ce62d72341194b68a05c1e4adc4930d33f85f3fa4eb2000000045e0870b300984101eb98bd5819d45e5d56bd9d16478cd99210d73ebb0de27e440000000fd204bdee270cc68fed9f2899183cc2a57675bfff587201f7063fb5364b96a7c4dcf28ad1eaa03293ae7b8bd6de79d144bc30a1ba5cee996c8ba59a1bab0962c | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\IETld\LowMic | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\GPU | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\LowRegistry | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10665" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10665" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\IntelliForms | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\InternetRegistry | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Toolbar | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0761ad5f14ddb01 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10665" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DomainSuggestion | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "440319691" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\PageSetup | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| N/A | N/A | C:\Program Files\Internet Explorer\iexplore.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 2596 wrote to memory of 2496 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
| PID 2596 wrote to memory of 2496 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
| PID 2596 wrote to memory of 2496 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
| PID 2596 wrote to memory of 2496 | N/A | C:\Program Files\Internet Explorer\iexplore.exe | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE |
Processes
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ed747913ab380285ee0a6d18604e2ad5_JaffaCakes118.html
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2596 CREDAT:275457 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | www.blogger.com | udp |
| US | 8.8.8.8:53 | feedjit.com | udp |
| US | 8.8.8.8:53 | apis.google.com | udp |
| US | 8.8.8.8:53 | resources.blogblog.com | udp |
| US | 8.8.8.8:53 | ajax.googleapis.com | udp |
| US | 8.8.8.8:53 | img2.blogblog.com | udp |
| US | 8.8.8.8:53 | cms.lichngaytot.com | udp |
| US | 8.8.8.8:53 | tuvisomenh.com | udp |
| US | 8.8.8.8:53 | 1.bp.blogspot.com | udp |
| US | 8.8.8.8:53 | 2.bp.blogspot.com | udp |
| US | 8.8.8.8:53 | 4.bp.blogspot.com | udp |
| US | 8.8.8.8:53 | 3.bp.blogspot.com | udp |
| US | 8.8.8.8:53 | www.linkwithin.com | udp |
| US | 8.8.8.8:53 | internetsupervision.com | udp |
| US | 8.8.8.8:53 | www.baokim.vn | udp |
| US | 8.8.8.8:53 | s7.addthis.com | udp |
| US | 8.8.8.8:53 | www.xemngay.com | udp |
| FR | 216.58.214.169:443 | img2.blogblog.com | tcp |
| FR | 216.58.214.169:443 | img2.blogblog.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| FR | 216.58.214.169:443 | img2.blogblog.com | tcp |
| FR | 216.58.214.169:443 | img2.blogblog.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| FR | 216.58.214.169:443 | img2.blogblog.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| FR | 142.250.179.78:80 | apis.google.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| FR | 142.250.179.78:80 | apis.google.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| FR | 142.250.179.78:443 | apis.google.com | tcp |
| FR | 142.250.201.170:80 | fonts.googleapis.com | tcp |
| FR | 142.250.201.170:80 | fonts.googleapis.com | tcp |
| FR | 142.250.75.234:443 | ajax.googleapis.com | tcp |
| FR | 142.250.75.234:443 | ajax.googleapis.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| SG | 118.139.179.30:80 | www.linkwithin.com | tcp |
| SG | 118.139.179.30:80 | www.linkwithin.com | tcp |
| FR | 216.58.214.169:80 | img2.blogblog.com | tcp |
| FR | 216.58.214.169:80 | img2.blogblog.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| VN | 103.131.74.28:80 | www.xemngay.com | tcp |
| VN | 103.131.74.28:80 | www.xemngay.com | tcp |
| US | 12.171.94.43:80 | internetsupervision.com | tcp |
| US | 12.171.94.43:80 | internetsupervision.com | tcp |
| VN | 42.112.31.40:80 | www.baokim.vn | tcp |
| VN | 42.112.31.40:80 | www.baokim.vn | tcp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| US | 8.8.8.8:53 | c.pki.goog | udp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| FR | 142.250.179.67:80 | c.pki.goog | tcp |
| US | 8.8.8.8:53 | o.pki.goog | udp |
| US | 8.8.8.8:53 | xemngay.com | udp |
| US | 8.8.8.8:53 | o.pki.goog | udp |
| US | 8.8.8.8:53 | o.pki.goog | udp |
| US | 8.8.8.8:53 | o.pki.goog | udp |
| US | 8.8.8.8:53 | o.pki.goog | udp |
| VN | 103.131.74.28:443 | xemngay.com | tcp |
| VN | 103.131.74.28:443 | xemngay.com | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| FR | 142.250.179.67:80 | o.pki.goog | tcp |
| VN | 42.112.31.40:443 | www.baokim.vn | tcp |
| US | 8.8.8.8:53 | lh5.googleusercontent.com | udp |
| US | 8.8.8.8:53 | lh4.googleusercontent.com | udp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| US | 8.8.8.8:53 | static.mytour.vn | udp |
| FR | 142.250.179.78:443 | apis.google.com | tcp |
| US | 8.8.8.8:53 | www.phongthuyviet.com.vn | udp |
| US | 12.171.94.43:80 | internetsupervision.com | tcp |
| US | 12.171.94.43:80 | internetsupervision.com | tcp |
| VN | 42.112.31.40:443 | www.baokim.vn | tcp |
| US | 8.8.8.8:53 | widgets.amung.us | udp |
| US | 8.8.8.8:53 | platform.stumbleupon.com | udp |
| US | 104.22.74.171:80 | widgets.amung.us | tcp |
| US | 104.22.74.171:80 | widgets.amung.us | tcp |
| US | 8.8.8.8:53 | www.youtube.com | udp |
| US | 8.8.8.8:53 | embed.tawk.to | udp |
| FR | 142.250.201.174:443 | www.youtube.com | tcp |
| FR | 142.250.201.174:443 | www.youtube.com | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 54.165.207.73:443 | platform.stumbleupon.com | tcp |
| US | 54.165.207.73:443 | platform.stumbleupon.com | tcp |
| US | 8.8.8.8:53 | accounts.google.com | udp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
| FR | 142.250.201.174:443 | www.youtube.com | tcp |
| US | 8.8.8.8:53 | ssl.gstatic.com | udp |
| FR | 142.250.179.99:443 | ssl.gstatic.com | tcp |
| FR | 142.250.179.99:443 | ssl.gstatic.com | tcp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| US | 8.8.8.8:53 | static.doubleclick.net | udp |
| FR | 142.250.179.98:443 | googleads.g.doubleclick.net | tcp |
| FR | 142.250.179.98:443 | googleads.g.doubleclick.net | tcp |
| FR | 172.217.20.198:443 | static.doubleclick.net | tcp |
| FR | 172.217.20.198:443 | static.doubleclick.net | tcp |
| US | 8.8.8.8:53 | jnn-pa.googleapis.com | udp |
| FR | 142.250.179.74:443 | jnn-pa.googleapis.com | tcp |
| US | 8.8.8.8:53 | ocsp.r2m02.amazontrust.com | udp |
| US | 8.8.8.8:53 | ocsp.r2m02.amazontrust.com | udp |
| NL | 18.238.246.206:80 | ocsp.r2m02.amazontrust.com | tcp |
| NL | 18.238.246.206:80 | ocsp.r2m02.amazontrust.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| US | 8.8.8.8:53 | www.microsoft.com | udp |
| GB | 95.100.245.144:80 | www.microsoft.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 8.8.8.8:53 | lh3.googleusercontent.com | udp |
| US | 8.8.8.8:53 | lh6.googleusercontent.com | udp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| US | 104.22.44.142:443 | embed.tawk.to | tcp |
| FR | 142.250.179.65:443 | lh6.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh6.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh6.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh6.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh6.googleusercontent.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
| FR | 142.250.179.98:443 | googleads.g.doubleclick.net | tcp |
| FR | 142.250.179.98:443 | googleads.g.doubleclick.net | tcp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
Files
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
| MD5 | bc7df36308cd73e76c02bcf22b946a84 |
| SHA1 | 6f8888f322ada2c1cde92cc4497a1fba587beef4 |
| SHA256 | 1dc9d7540c0d6d49fe8ada04ba5e75916bc14e2686ac68ac5ef5c80803405ffb |
| SHA512 | c03f69ed19416265f3ccae253cdd92f1f036277a24d8ad71465da440709779da1376130db50f9e59e768106d49fa4f0b0f01134e296b294ce9775e3275bcf728 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
| MD5 | 3810dd33518fc2fbc6ff9269933e2ea2 |
| SHA1 | bf8ab88204f2ff70861b224a7789c9caf12a2ceb |
| SHA256 | e8f358ce73574ce5c466434cfd4896ef9711a70d914480b4d877aea1ce333d5a |
| SHA512 | be3135750c1eda9192f2faa8c096a8a354cdcdd3c1d818002896850f031e0b64385e1790103b24352367f3cc6b4d50599abbea4628ef6dc29182d96411a9a18e |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
| MD5 | ba0e5d2725318e9a8b03608245a7894c |
| SHA1 | 0f8453fde80ec9abf98c2745c10c220011bdb258 |
| SHA256 | 5b3b2e48a9b46a12e2483406b8915d4a403959561558444c983a7cae16f61a93 |
| SHA512 | 883a74fc4ced30e3c815f38636930c5538aa5eb31a4372073da4c758e8be1c47943c2ea92c647370623821fe26e2833c9e5ebdd428daae928d52cfcd8e376da2 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
| MD5 | 67e486b2f148a3fca863728242b6273e |
| SHA1 | 452a84c183d7ea5b7c015b597e94af8eef66d44a |
| SHA256 | facaf1c3a4bf232abce19a2d534e495b0d3adc7dbe3797d336249aa6f70adcfb |
| SHA512 | d3a37da3bb10a9736dc03e8b2b49baceef5d73c026e2077b8ebc1b786f2c9b2f807e0aa13a5866cf3b3cafd2bc506242ef139c423eaffb050bbb87773e53881e |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
| MD5 | b7a21bb1c54d3a3f03a1f7fa057a7ccc |
| SHA1 | e2718cbcacb9fea217d51dd1e8770b8f5e0ba37c |
| SHA256 | c21410a11b709ecc4fe0f915ffcde52f3d97ee2acbe0dafb7089156f69b30774 |
| SHA512 | 6b22937a37a7ed761c7042f03c1561d376113f844ba5097b3cbce7a7de2631a76c0e9dfddf775636d12ca9d2615b6d5fdfc958c9566526d87fce11af33193aa5 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199
| MD5 | e935bc5762068caf3e24a2683b1b8a88 |
| SHA1 | 82b70eb774c0756837fe8d7acbfeec05ecbf5463 |
| SHA256 | a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d |
| SHA512 | bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
| MD5 | bb608a777d800c3b968453e1418b3ab9 |
| SHA1 | 0a3db171f98565da1749d42eb18fc385d6240dc8 |
| SHA256 | 09785705d2e98b0d41a65d2d58d1ecec303c91464a8c47382f168fff0927d8f1 |
| SHA512 | 1cd97bd86e69c4c38c2c25fa42751279d2aab1f44b22dd82a39c7b5c6d77f283fe1169481d05b9e2f8385a413cdb6b4c5c98b84441c50005f5f2288a57ba9416 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
| MD5 | 27af039e4673415241b7fb00e3a64c2a |
| SHA1 | a8e7aa1ece69e808921f2f240c173b9655b44bf6 |
| SHA256 | b197e4e96529e76b18bdd35bcce106fd3ecce1573631afa649fb9b6288e45225 |
| SHA512 | 8e7c05c5b3a7a302650c02a95e5a2713a587da4681dbaccc2c1aa502a0cf19a57abd1c6005344891ebb26f677324a3795e434d184c662b3d81b2293a1a24fe82 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
| MD5 | 971c514f84bba0785f80aa1c23edfd79 |
| SHA1 | 732acea710a87530c6b08ecdf32a110d254a54c8 |
| SHA256 | f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895 |
| SHA512 | 43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_86F2A83F54EA52E2D59C5D2EE00149B8
| MD5 | 9e8b40381ec852178cb50de55d344ab2 |
| SHA1 | 595a2844594746cd98bc894158242434731fee4f |
| SHA256 | 56249d3daa7058f5deb832266726551c8173097161b7233cee27579088d7412d |
| SHA512 | afcc1af245bea35522258d2e17b4eae05ba3de5685438fa12a051d459947ac9645fd969e18b8d5a9d7d69a0138e2e03d8fcede62f7735aa41c263a402caeaa00 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C02877841121CC45139CB51404116B25_1866E19A9EA470E8F26D259D51C89BDC
| MD5 | b79bf72aea3415c8235ecb1219907d35 |
| SHA1 | d553a276bcc63b9cbdf5dd1f11c0762bb755e8a6 |
| SHA256 | d1f3968cb8ff822e9f881770393f9ec439d4be75c081b41afa0848af56a0713c |
| SHA512 | 0198d459a62bf72fb4fbfdf7b0d37feafa67d3a1e203df6926e1640bd125c9dc2da4e74fed89c368e6183cb38754463c8c7fa84a0a90052c5e234ab069f1c6f2 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_1866E19A9EA470E8F26D259D51C89BDC
| MD5 | 309825480198111ff53be041837e2b1e |
| SHA1 | 6ab37f6840a7fab0dc4b126e6c1a5d5f2ca0b028 |
| SHA256 | 65df77ab4de13e3c62a153e9d105878fcb5faef619194a4bea127a55000d8c52 |
| SHA512 | 22051aff8da4af08c2f746c925a4457119835a538a8a6b5bfeb52dd61143bdbdeb47a671a3ae68a53f28ce4b4a1abd69f7b9eb32a9f6f2c20f50f619e142c40e |
C:\Users\Admin\AppData\Local\Temp\CabB8A7.tmp
| MD5 | 49aebf8cbd62d92ac215b2923fb1b9f5 |
| SHA1 | 1723be06719828dda65ad804298d0431f6aff976 |
| SHA256 | b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f |
| SHA512 | bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b |
C:\Users\Admin\AppData\Local\Temp\TarB917.tmp
| MD5 | 4ea6026cf93ec6338144661bf1202cd1 |
| SHA1 | a1dec9044f750ad887935a01430bf49322fbdcb7 |
| SHA256 | 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8 |
| SHA512 | 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 625059d391e88c5318289ef561d18929 |
| SHA1 | 946393d5951537fbb0723cfe7df0aafed5ab7174 |
| SHA256 | de39406b24202238563807bd7ed34a9bebf1aa359f47e408858a06436bdcef2c |
| SHA512 | cf242715e263f8ab8d31ae78a16f4b867c7583a10701b327ef092042bef9c808aa2af70f5f5ccf047ce9b5ce174b9962f48373196b5034419801c356aeb4274f |
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BQ20K5D\plusone[1].js
| MD5 | 2693cd35d818b48f4cd562c6abe0db29 |
| SHA1 | 131c844eb658219966c722b60cc12c8a542ebe06 |
| SHA256 | 911fa262008c6ef2bcf8448ad83a5aa8129c39355b98d957f5c7dde2babf9b7c |
| SHA512 | 4f692bd49811addfe89d14b156fed6513f04ec4be2629086a8b66ddcd6e7b8b7df149fa017173824c30f7492c2320a3d7b9c0344d5e1f7074742558125654f1f |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 93f6d0b9361072fc66e70546b2c8062f |
| SHA1 | 214a063faaea85e633a0b8e9ad1e9cbbf5b412ff |
| SHA256 | 3b402c835a8b064da94b72b9bd1b33e25956da27eb829f06e02a1183bbe0cc05 |
| SHA512 | b6fd1a96e2352290cb5e162b166153bd34b0a8e17389ca9b07443efeea9ad9b012059a4f60143fe3b37ad8f935a3b9cd33dd0963626f551c87c4f96010522d46 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 845748f21c58f5612b126d38889c2f92 |
| SHA1 | 28731d9127740554dafa01d1b99385e202c0471e |
| SHA256 | 8a1dc353916def32b53b2fe0ee2847d138d3a8c856fa1cc64b4a73ea9e1e640c |
| SHA512 | 19a8b3a7c0f4da5d7ffb0d2774fee2d57e58898386411feeb7a4077f44ee5f1fb1d9c6510e6f86a057683ae1b542a845ec6011a34d021350b3a6f66e74c370fb |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7cc2b6d81ab34ac370a4f8a1f4dfb00f |
| SHA1 | c0b3aec716fd26743fc5705858b7fbab494621dc |
| SHA256 | a27388e2bd66dfb0054ea06df57877a7bba5cf3c051477014cd8b14aa7dc7de4 |
| SHA512 | b14701e42d90a1eb7d50d29182a7782c30992d461d5bff3696929faf5531f3be82fea8be2869645804a0220a51fc157291ac12b35f3e2c750d07475e23773878 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416
| MD5 | 55540a230bdab55187a841cfe1aa1545 |
| SHA1 | 363e4734f757bdeb89868efe94907774a327695e |
| SHA256 | d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb |
| SHA512 | c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 6eeaeaa1f1e4870ea72eab4dfd94ba4f |
| SHA1 | 6118f35449cfc66b731627b2e01e0ab23f30ea9c |
| SHA256 | 49152e791b142ffae2f180e2cf1bd0f190df852fa520887f93c847739ece2cb6 |
| SHA512 | 5e610ab71f142fad65d547c9cc6c19e9e72ff0e4f3e9ec0abebcef948aaa3783931caa055fa5a5c512f9b8c5547155d900bf7ecda9f19ffe4c14346b4fd5bedb |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
| MD5 | ec4fd258a312ec918fbcb0101b834ece |
| SHA1 | cd00eafa5126e18f456d2ea5e0429590524f1e2a |
| SHA256 | 3bd3ab203b1ae8d96fe4678e8a58959984219ac6b0fbab083ff785c976d128f5 |
| SHA512 | 1d561f91178dd3525724c9217a84a386f1b16f7cc9461cf8dd960b3cadf10db96b9c4ce698063ddb157d36a03717789f3d570c5569f10239979be26a8d12b9aa |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 33c17e3581fc770b69a81fec4908b4ba |
| SHA1 | 069557448982ea68bebcaeef61712027cde1ffb9 |
| SHA256 | 3dcd66997904ea51b11f3845b34d5e52aae3b31aa90a2e5cf479a1936121724e |
| SHA512 | 5e9bf883fa879fac10ea56fe387d426cae7d40958f7546b761d7d9a871a784a5c1452d51271c139678547a5faf7259cb477a90566e753ffbc093f9368b092ea4 |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | c1ddea3ef6bbef3e7060a1a9ad89e4c5 |
| SHA1 | 35e3224fcbd3e1af306f2b6a2c6bbea9b0867966 |
| SHA256 | b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db |
| SHA512 | 6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | a0547029d8e2d214409932a1380d7ef2 |
| SHA1 | 78e5ab2585ef2387771772d45322eebad2d6ce4a |
| SHA256 | b84e1dec0300cba8976879de908ae9b4dd71c47a94678db32bb4f0df9a0581da |
| SHA512 | dc6716524c0bc863ba544d3ee2e493ee59ca058cd6d98243f1d6628c87e31f27b42922fe11c09c38b2ab93f305b3addc0f3e6231b423ec2b757774ef2718ee0b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | d6fbc818d6382dbc3803cf5876562e8d |
| SHA1 | fd2c1202bd83fbf945516c6a8671a6353783e656 |
| SHA256 | 6cccdaf37cd49cfc04835ae75df8dd5688d4dc33143f1df888f74426261e8d58 |
| SHA512 | 00091d5167930e78cb03fc64beff463ba1adca394e7efce1c264206405a094a7c14be7aa41ccce26fd9d88faa627ca5aabd65bc8b5aa1b3df4beb7910fbc1ad7 |
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9GP4P3HF\cb=gapi[2].js
| MD5 | 84e3d54be3ffd25a24bf3a514490b86c |
| SHA1 | 490f4a059114c7704703a7c67d193083f551ea1a |
| SHA256 | dbae2441d55a51b1d10c5591a2ab27141b3aebff8e75816a3a4b107fcde4b6f5 |
| SHA512 | 718ddb866adab289ea6ed942b18ee9d74c185d5739c642340b6ee827265e3fce63b768021aa182a8fd540b4a1f82f555dc9e668c4cd187566fe19336bc3464e5 |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | 4e9911357efc388e31a7df961c8a56da |
| SHA1 | 42d8fb272b6481176049febdd3a5292e7e463d74 |
| SHA256 | 36fa418d17cd643e67c722851ff3a5d660a792167695990f5150252bec031235 |
| SHA512 | 4675235c2a2bd3e9c18535e8e985dfddb5c528f1af36e0ccae721153b5ed6ac31c98308a66c51527e76e2a42c8d9ab2b524a5a5f27ac57547d3186e85d67fa80 |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | ff34db59ee8db28cf0794fd79c9fb6b2 |
| SHA1 | 20f3cee4f9c80d4958d62135900ea2d6376ce20d |
| SHA256 | 87a6bf6185e5cb73fdcbb405da729273cc4959ba37f34ed98a112c02f6c990b2 |
| SHA512 | eb082cae68fecd359459517a7ab4228f79294e0fcba2bd4e656f9875963bbfe6064f021f0466a34fe683960fb7cbbdbdf47c5b5f6904580f3fdd113540e75835 |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | c45a2c30d0e74d94adddaff1eebe1894 |
| SHA1 | f881f49cee53c5d3d7759e9145355cc4d18f418a |
| SHA256 | ac2a812de5cc98458ed9cda05a655eb7aa1932b2ccbfdb92785a7566424c1e4f |
| SHA512 | 0bd10f69442e7150eb14e19267814ef58cc27ccb0a4a6f2f4213c405d67df2e0624bbe607673dc521746ac2b77b27f54b5d21188ce00695b7df4dcb614a0f32f |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | 2775d25c94f6ec10c46dc1757240c5df |
| SHA1 | a8fa42f693d50968c35d56b8a5d44b8e35b05042 |
| SHA256 | 9077db8c68395cda071db2ab9f35df0aac761648edad3359c66913fba8e14423 |
| SHA512 | 8aa62f983ee23b8b54ccdd90b8c5aa807928c871472b5b38a6ec5cf74a5a9086563251986bb2786b24ba89490c50d822e76ba60b87e0d86efb5519a36cfb0c0e |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | a7b59650df0654083694376cb13c0e70 |
| SHA1 | 2484cb4cd46ae31e923bdf1774e5c0f6bc526cf3 |
| SHA256 | e1ea43bbbe8a1b040da4ddd158446680702599237d81e40065f57683b4a13bba |
| SHA512 | 3143cdce5918e795215175bcc54cc6e1f9ab9cbf486bce225823ad307ffeefc5780455eeb224326c5a3224d94d3af9523947cee9b3facebcce65ab8ca03774f9 |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | 0dd99d0fb3bcdcb8cc3edab4eb706cd6 |
| SHA1 | 6adb6ecd596a0005ef6e2d53eb1b251a680700ff |
| SHA256 | 89a5cebd2582a4602eb05242347f54e4fc05572a1459c5f22942027d0c4065a0 |
| SHA512 | 74eb32bf87c66da39916bff3fb82fa5db9bab114db29d737bed6c5859b17ecce2c606e20b4e61d7a6f5999fcb76f8f970f2df470fb593a67a68df2574b70be82 |
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\3KFYFO2V\www.youtube[1].xml
| MD5 | 3d60e5f7ad0b3cfd33901fb54e1cefa8 |
| SHA1 | 028aa1021aafadda9502496f8bec06a79560e31a |
| SHA256 | 74c00b292ebce60b48336b78292b280df615db81e4b534a4f7caa2978e189807 |
| SHA512 | 1ce2d2bf1872c5e568222ca2790ae5b335e9f79e1a1ab22806c03565cfacf1cb6d72cda3f0369815229d4a727d17ceba309002a0273fdab2146563bd55a59e74 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 9dcb3280a77d08a2b44482544f17ab46 |
| SHA1 | 076d04bd3b5b6032581d39678e0fc8ae0563b856 |
| SHA256 | cfebc08ac9db63482be07c0dfcd5b6574a164180ab3e8be402d24700cfe272b3 |
| SHA512 | d8cfe5d8069beb6b4b2f031df8d4b6fd2d5e6189947b8bb5fdca338481173074d470a2da19151a7b3d811c09390b23c0c738f4d1c8ae73844366d7f080547be9 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
| MD5 | 5c2508bf69a3e0fe92650615192c1ab6 |
| SHA1 | 3964e58ce435b5121bc8ae9fc102def96f850878 |
| SHA256 | 5abbe3c36cc32cdf469387125387ba88b658e772c73cee4a22cd6084289fde6b |
| SHA512 | 3af93c14ec01589b012a28904571aa509865b55aa72a2b50a4a9105b9e3877614f713ed5408ba0f0027290cb470665459c5b1e1fe946a34f92fc48de6078899f |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
| MD5 | a266bb7dcc38a562631361bbf61dd11b |
| SHA1 | 3b1efd3a66ea28b16697394703a72ca340a05bd5 |
| SHA256 | df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e |
| SHA512 | 0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ecf4ac7c6bdff2daaf10de80acb22f6e |
| SHA1 | 398c170582a51a039b77fe35477be8645850f109 |
| SHA256 | 9f78000f9e0437835f9ef1e74b8b80d766bd7e6dbc7b17c4c57a9b06ca1c55a7 |
| SHA512 | 5eda6d4ee4ad2d2aadb780e3df20d40a89651e1470d5ce94d86c57ae24b8a440206234b96ab8a4c96390b30e6061376ffa6cfaebfdfcd12bbc2c9725a3b5751c |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 9fb5258823193e959d82c09414290a69 |
| SHA1 | b6f65da06771ffcadc70f2e3758c97b0e8299f18 |
| SHA256 | 1f7e28551f1ff246ded329e1022c41b69f0a35a967a548ebef97ddef92b6d41d |
| SHA512 | b1bf383bf8a364e453bacae2b0981999d626972a6080c7e7c7963ea6b697f299fb36cbc7722ca8370bb1b0ab92d0a40992d20b6d786a4150d4f4c979a3cc5754 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | f78d22c9ddcd6d72cf1c8a6f34c67136 |
| SHA1 | 5c63ef381f89695a834ec8f9c5b6186dcec98cb6 |
| SHA256 | d99063ebb08b1e3fcb594171e8c5f680226fc5107aaaa250363893c4bc016185 |
| SHA512 | ebccc2d6730549cc20b614fed620b659a0f81546541f6b75e55056caa160fc7a97cf695f805ffe1ba3331d2eb77734f7e049d11f94cd8a4ef91608d52708c5bf |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ebe299d1653e27ba55fe309f27bbf066 |
| SHA1 | b78fd81934fb77ee99cca57a1a0f9ed296f90864 |
| SHA256 | ea45cd9626397c30ae7f10589d74be81f3c801d39006b9f22c3b3720aaefeeb3 |
| SHA512 | 9b658d2e338a4d9e588457bc634b7538fe2ddda284422c2a82b6f771200afbc285e071764cfd9ba4e524aa50ef0996996949150298eb890e1f559a3f41f428c6 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7677dbe91b58f0aa9ec65fe2abfcbba0 |
| SHA1 | 8fd85f41ca287204e5708a6e41a13c62fd2ce79d |
| SHA256 | c3eca556a58f53b1f96c082e6b2effe9d2c5cfe1ffe8f46acf7683da70623c37 |
| SHA512 | 1982ecfed817d47e837b03f4da5e476cdf6d74ac8f777f69c3c8fb20f077977a591d4f5c24c13ccdda8b540f36bbc5b065512b41dcb3fd2402f2a4ee92cc1446 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 0449937e187aa870135b67e61540059b |
| SHA1 | e4d88471ec41752be9ac4c161d778f717b7c1034 |
| SHA256 | ee1e46df52950f019e0b34d94cfe4fbb95ad48844c8a2ac79a3d5c68836a8d6d |
| SHA512 | 9c70a935b07afab8db367d85b256fba02c3c1b8d603d58f79963fdaccb4c4aad95159f294b2bce805738570947d8c8e33db1a88ef1369e1d037606b694cefcc9 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
| MD5 | 3c13ce45683b400f8c742434eb401d3d |
| SHA1 | c2e3e8f4c02bae279e62ce1993fceb85d319918d |
| SHA256 | b751338d9be92ebfb8dfdd0baa64148606bd6c5ad8495829fd63a73202c4e886 |
| SHA512 | f25dcd8c0c72da7e8de0433c2759fcfa55d3e057ca6ac86b23a30118c96e7b27d6ac67eef1cd71147a4be9e075381f95eaba007ebd3a9fc983d49b632a19db3f |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
| MD5 | e4a68ac854ac5242460afd72481b2a44 |
| SHA1 | df3c24f9bfd666761b268073fe06d1cc8d4f82a4 |
| SHA256 | cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f |
| SHA512 | 5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | b168af73d8c9f655b45f5f82f694d2ac |
| SHA1 | 31f913651a5acc43fa11589ef5a433feae93a6f4 |
| SHA256 | 07675308f3eea3f44b37c65cc5ab26a2b02ef5285d5cf764b34113a59b52230f |
| SHA512 | 15ef512032392ab998a91b8555aeb81e4ff1b425236ae323bdfbde826abb77af0067c5507afbc6ecf36b991efeb03b493155c7cf15c491dca45e025b5d528d99 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | daa2d237210481340e95c8ba0670c6e3 |
| SHA1 | 5d328cf8633383634898dbe8535ee848dbd09d6d |
| SHA256 | 0f6f0c940baf8ec7e71d716dabbc0ac7ff9f3a173bab1d49187c61059a42e864 |
| SHA512 | 707199a1268f4ec6bb70a32d5b5494af0f6a68ef07511d61d17a0aa2b17fd4e9c52d4c22a7ca654e3137f7e7874334c1d08789d4f0ba6b8261d100ab2465a7de |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 205095b919f04877c46af207265cdaa2 |
| SHA1 | ec98a75d3ccd0a84d5b70a5df4c7856592a3ea2b |
| SHA256 | 2dbbb54793bfb1dcae0973d744eae695698a1b86fc2f3153dbea3177b7a8a1ba |
| SHA512 | 660510531a36e727cdf7583b147fe2172cb7141aaad8397d1ccd24c61d78f89969b807b72bdebff88e856eef5d052d239100c40666bfb0bd664c9c82b9dda053 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 8a34d2608ccc997630c9107e49d59b8c |
| SHA1 | 972b20f02268452744215e957c6607b1406a9b54 |
| SHA256 | 919c0b1a2ae5f84aa4b9bcde0ef278896397bdb45b38142ff02d807bb13c660a |
| SHA512 | 78a0842f0acfc6786799042f4b670c44dde2c45997edb4e935a83a2ae4dbd46ca25b3d81b2339b6bf0ce46076210caf258d2a7d7a12bc4dd9440c9f177a16735 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 6e3d8b5af9fdf6bdd2dd13c4553eefe3 |
| SHA1 | 6aa2b7915d2b4069bdd6038b81a8b2bc067f917e |
| SHA256 | e375dd47a42babb5ce7d6c70c3cd2672c6bebf00c10d3440eb675b17aef2408a |
| SHA512 | a070816e3ce0ec9644874b2a414a0497e4426094d97a9b9172747cd30eba526be8a5f5893f6774ad91cbbfdfb664b057e865529ac4ad848acec4acc3001bd62e |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7523c12f8dc3dbeca243353fd8372a2c |
| SHA1 | 3f8a81d5bef16744719623b9a1a53fdd80340abe |
| SHA256 | 20447f566911cad96e8c5e84171268c4aaeea25770e12815c3964e2e1ae5e77e |
| SHA512 | 09c5b18ebd760e29919b8130b1e1112eb8afd6ff03309638af4235623844a01b858e6ade5f3e423301162565f24156b2148b2efc370cdc14ca71d5d9cf3c8af0 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 8ebcd8e080640d562051e07350e015e8 |
| SHA1 | 2c4fa1fff174c8bdd3ee6006a4cd56e6aa17a47d |
| SHA256 | cee2525746d300403828ffc9adf7ea5f1fccfcb27999e5a70ce74450b1b6a9af |
| SHA512 | ecee577485c6e31a13c5712365382474cfdb9798c3d21cdb43ebd80ec79f3e926305af3212efd6be16e1447a711bac346ddad80e55418f5b9165b9a38df6de66 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 8904c2157ce154aee227151798130aa5 |
| SHA1 | cf2f46708a15b7a48d61b5b1d7466f3162604a7f |
| SHA256 | 173b277099c362fed9aae567e46d28bdedf173d3249493e1608479fe42c27223 |
| SHA512 | 7f94b5250d877c898cdeed0aafaf72d888b9c74596913035cc83940793a2f0065d21da22a282b1159fb4b1941af671564eab2ec92bd9cadada06c2fbeba7779c |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 2ad363fc57e22a49338d4818698ff3b4 |
| SHA1 | 001906d12b4b11979e9baf7716d8ec2f999e9ddc |
| SHA256 | 480e8708b8965624b1656a1c1dea365445c99b1fbd684a15ff40a6ff2d87d88a |
| SHA512 | 7068390d0e4e41fd4e00a90e7ed4b2fce7e01b3e582641c3cf4a780b75103fb43fe51c888a895cb2d65c0544bb4d99169bddeb9915bb4f4b20fceb1fdd7ae2dd |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | bbf3de455afa78dd894b0058d88cd5ad |
| SHA1 | b1b4ce539550d64dc0014a3b3d605e102ea0d7d3 |
| SHA256 | 4ea3d1f9d7ddfad7bfdacbbe4ee59944aa14f0ef3611f2b7e98e40b117a8e0e2 |
| SHA512 | b41b0ad1de9429c4d2b28a408e2f1c3e8bcc995cd93b27fd139c524e027066ea2c34dce2c956d6bf5a5b71eb12781776fe21dde95888c75ad9d5e6f3c5fb088b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 6009247b3c1741c39ea2930ffab841e3 |
| SHA1 | f2a80ea825ad6f910348369eccf75375235425bc |
| SHA256 | 1a15595a0fc4c863769fd20ab41889063d5f6d09a60e8db1f1e68612820a3222 |
| SHA512 | 143baee7c6e2bea6d8cfecc16281f95040d62c3f0593175e8b75a05a612f86d8de22b02834c211c51df29fbe58872d37800c529b4bbc7b7e0eb653ba54459615 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | aa1a2867f66c0fc9257496fa524357ad |
| SHA1 | dd11f9ef0d6784b17b242147ba0364bd04858d31 |
| SHA256 | bfedf1fbd7754368678e8e72948db02b29443d6bb505c187f77f98d6884bdd03 |
| SHA512 | 0b109d922e35cbceb750e276586db3b2ef7d2d8b9a923bb4f9db426272cd20e34896212331e38a2e3a399a383ee6a0ed7e77a7b4d728e9ca5f67589c55567f08 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 91a5fbb5aa1ce7c970cc1ae3be83c329 |
| SHA1 | da1b39ebdb086aa988bac4a00779117761673e9c |
| SHA256 | b9150ac80513f7d9ce2f705a8406de4b4777e4dd3289890f4f35ec92cf67058c |
| SHA512 | c5c5e5dca6d3eb1065a7bde7b796e4c13ab0101c0bb9f31e43419b7d7103036f41d43cbdd9d5f4bfe0c14d7ee71f03d926966ed558e5c85e535aa3f9f48a8952 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | b51d829cf37b353d219d388f7c91ac34 |
| SHA1 | 2262746ac91427b9b8375b1356f26386fe3483fc |
| SHA256 | dee426210ca1058848272791833f31d58e7b41ec00157ab757e25f1fed635f01 |
| SHA512 | 8b74476d28d3054a47a8edc88929bd4d1e4293e9d4201c7758d0f4a28f620a7792f5ad935d38fa72b22303def66fb3fa825cf09e8cd8216a6dc69b52d10a54d1 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 7a9fa3012acb64ebf1f74e654571f702 |
| SHA1 | de8d67e0bf4fcaaa03ce76d85726ab7a613b49cc |
| SHA256 | 103ee6acd46fbbfd68c49ab34a0b7de49bbcc7269d7a885d107a936a88c10624 |
| SHA512 | 0d17f50392458cacbdcd08bab332ae3112c198f9c052c836ccab8be314b7611408d4cf5c885a4fb08cb5adf4b3736700f755ced97f4d666c7a38c747c895db16 |
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9GP4P3HF\2254111616-postmessagerelay[1].js
| MD5 | c264799bac4a96a4cd63eb09f0476a74 |
| SHA1 | d8a1077bf625dac9611a37bfb4e6c0cd07978f4c |
| SHA256 | 17dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d |
| SHA512 | 6acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9 |
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7BQ20K5D\rpc_shindig_random[1].js
| MD5 | 45cbe9a36a384fe9273d25ef64ef8691 |
| SHA1 | 325026cc1cb9022ccd8c9c2089597251419201cf |
| SHA256 | d9959cd6fb35fa6a7aef91a5bb9bb5358e7f91271d84130de6d06910076c5c5c |
| SHA512 | 0a70b1b12658418caf529a01ddc4d7fd6c59276c4658028ce2b5f7dcea64ef91f353fce7e67349c8534b68fc53c0ff23c36a7260337dcd307b836e55bec43dc6 |
Analysis: behavioral2
Detonation Overview
Submitted
2024-12-14 06:30
Reported
2024-12-14 06:32
Platform
win10v2004-20241007-en
Max time kernel
145s
Max time network
146s
Command Line
Signatures
Browser Information Discovery
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\ed747913ab380285ee0a6d18604e2ad5_JaffaCakes118.html
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ff93b0346f8,0x7ff93b034708,0x7ff93b034718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3992 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6236 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5128 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,10792248458666174701,5273502080134965253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.blogger.com | udp |
| US | 8.8.8.8:53 | ajax.googleapis.com | udp |
| US | 8.8.8.8:53 | apis.google.com | udp |
| FR | 142.250.179.78:80 | apis.google.com | tcp |
| FR | 142.250.201.170:80 | fonts.googleapis.com | tcp |
| FR | 142.250.201.170:80 | fonts.googleapis.com | tcp |
| FR | 142.250.179.98:445 | pagead2.googlesyndication.com | tcp |
| FR | 216.58.214.169:443 | www.blogger.com | tcp |
| FR | 142.250.178.138:443 | ajax.googleapis.com | tcp |
| FR | 142.250.179.78:443 | apis.google.com | tcp |
| FR | 142.250.201.170:80 | fonts.googleapis.com | tcp |
| US | 8.8.8.8:53 | feedjit.com | udp |
| FR | 216.58.214.169:443 | www.blogger.com | udp |
| FR | 142.250.201.170:80 | fonts.googleapis.com | tcp |
| US | 8.8.8.8:53 | www.linkwithin.com | udp |
| US | 8.8.8.8:53 | s7.addthis.com | udp |
| US | 8.8.8.8:53 | www.xemngay.com | udp |
| US | 8.8.8.8:53 | resources.blogblog.com | udp |
| US | 8.8.8.8:53 | img2.blogblog.com | udp |
| US | 8.8.8.8:53 | cms.lichngaytot.com | udp |
| US | 8.8.8.8:53 | lh5.googleusercontent.com | udp |
| US | 8.8.8.8:53 | lh4.googleusercontent.com | udp |
| US | 8.8.8.8:53 | static.mytour.vn | udp |
| SG | 118.139.179.30:80 | www.linkwithin.com | tcp |
| FR | 216.58.214.169:80 | img2.blogblog.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| US | 104.18.25.243:443 | cms.lichngaytot.com | tcp |
| VN | 103.131.74.28:80 | www.xemngay.com | tcp |
| FR | 216.58.214.169:443 | img2.blogblog.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| FR | 142.250.179.65:443 | lh4.googleusercontent.com | tcp |
| US | 8.8.8.8:53 | www.phongthuyviet.com.vn | udp |
| US | 8.8.8.8:53 | tuvisomenh.com | udp |
| SG | 118.139.179.30:80 | www.linkwithin.com | tcp |
| US | 8.8.8.8:53 | 22.160.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 78.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 170.201.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 169.214.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 138.178.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| VN | 103.131.74.28:80 | www.xemngay.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| US | 8.8.8.8:53 | 1.bp.blogspot.com | udp |
| FR | 216.58.215.33:80 | 1.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 1.bp.blogspot.com | tcp |
| US | 8.8.8.8:53 | xemngay.com | udp |
| VN | 103.131.74.28:443 | xemngay.com | tcp |
| FR | 216.58.215.33:80 | 1.bp.blogspot.com | tcp |
| FR | 142.250.179.78:443 | apis.google.com | udp |
| FR | 216.58.215.33:80 | 1.bp.blogspot.com | tcp |
| US | 8.8.8.8:53 | 2.bp.blogspot.com | udp |
| FR | 172.217.20.162:139 | pagead2.googlesyndication.com | tcp |
| US | 8.8.8.8:53 | 4.bp.blogspot.com | udp |
| FR | 216.58.215.33:80 | 4.bp.blogspot.com | tcp |
| US | 8.8.8.8:53 | 3.bp.blogspot.com | udp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| VN | 103.131.74.28:443 | xemngay.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| US | 8.8.8.8:53 | internetsupervision.com | udp |
| US | 8.8.8.8:53 | www.baokim.vn | udp |
| US | 12.171.94.43:80 | internetsupervision.com | tcp |
| VN | 42.112.31.40:80 | www.baokim.vn | tcp |
| US | 8.8.8.8:53 | 243.25.18.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 65.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.179.139.118.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.74.131.103.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 33.215.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | widgets.amung.us | udp |
| US | 12.171.94.43:80 | internetsupervision.com | tcp |
| US | 104.22.74.171:80 | widgets.amung.us | tcp |
| VN | 42.112.31.40:80 | www.baokim.vn | tcp |
| US | 104.22.74.171:80 | widgets.amung.us | tcp |
| VN | 42.112.31.40:443 | www.baokim.vn | tcp |
| US | 8.8.8.8:53 | t.dtscout.com | udp |
| US | 141.101.120.10:443 | t.dtscout.com | tcp |
| US | 8.8.8.8:53 | 110.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.31.112.42.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 171.74.22.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.120.101.141.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 226.20.18.104.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | 241.150.49.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | lh3.googleusercontent.com | udp |
| FR | 216.58.215.33:80 | 3.bp.blogspot.com | tcp |
| FR | 142.250.179.65:445 | lh3.googleusercontent.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| SG | 118.139.179.30:80 | www.linkwithin.com | tcp |
| JP | 45.77.30.210:80 | tuvisomenh.com | tcp |
| SG | 118.139.179.30:80 | www.linkwithin.com | tcp |
| US | 8.8.8.8:53 | platform.stumbleupon.com | udp |
| US | 34.233.27.222:443 | platform.stumbleupon.com | tcp |
| US | 8.8.8.8:53 | developers.google.com | udp |
| FR | 142.250.178.142:80 | developers.google.com | tcp |
| US | 8.8.8.8:53 | lh3.googleusercontent.com | udp |
| FR | 142.250.178.142:443 | developers.google.com | tcp |
| FR | 142.250.179.65:139 | lh3.googleusercontent.com | tcp |
| US | 8.8.8.8:53 | 222.27.233.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 142.178.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.39.65.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 212.20.149.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.google.com | udp |
| FR | 172.217.20.164:445 | www.google.com | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| US | 8.8.8.8:53 | connect.facebook.net | udp |
| NL | 157.240.201.15:445 | connect.facebook.net | tcp |
| US | 8.8.8.8:53 | connect.facebook.net | udp |
| NL | 157.240.201.15:139 | connect.facebook.net | tcp |
| US | 8.8.8.8:53 | platform.twitter.com | udp |
| GB | 151.101.188.157:445 | platform.twitter.com | tcp |
| US | 8.8.8.8:53 | platform.twitter.com | udp |
| GB | 146.75.72.157:139 | platform.twitter.com | tcp |
| US | 8.8.8.8:53 | 21.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.youtube.com | udp |
| US | 8.8.8.8:53 | embed.tawk.to | udp |
| FR | 142.250.179.78:443 | www.youtube.com | udp |
| US | 104.22.45.142:443 | embed.tawk.to | tcp |
| US | 8.8.8.8:53 | whos.amung.us | udp |
| FR | 142.250.178.142:443 | www.youtube.com | udp |
| US | 104.22.75.171:445 | whos.amung.us | tcp |
| US | 8.8.8.8:53 | accounts.google.com | udp |
| US | 8.8.8.8:53 | i.ytimg.com | udp |
| NL | 142.250.27.84:443 | accounts.google.com | tcp |
| FR | 216.58.214.86:443 | i.ytimg.com | tcp |
| US | 8.8.8.8:53 | ssl.gstatic.com | udp |
| FR | 142.250.179.99:443 | ssl.gstatic.com | tcp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| FR | 172.217.18.194:443 | googleads.g.doubleclick.net | tcp |
| US | 8.8.8.8:53 | static.doubleclick.net | udp |
| US | 8.8.8.8:53 | jnn-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | 142.45.22.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 84.27.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 86.214.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 163.20.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 99.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 194.18.217.172.in-addr.arpa | udp |
| FR | 142.250.201.170:443 | jnn-pa.googleapis.com | tcp |
| FR | 172.217.18.194:443 | googleads.g.doubleclick.net | udp |
| FR | 172.217.20.198:443 | static.doubleclick.net | tcp |
| FR | 142.250.201.170:443 | jnn-pa.googleapis.com | udp |
| US | 8.8.8.8:53 | play.google.com | udp |
| FR | 216.58.214.174:443 | play.google.com | tcp |
| FR | 216.58.214.174:443 | play.google.com | tcp |
| US | 172.67.8.141:445 | whos.amung.us | tcp |
| US | 104.22.74.171:445 | whos.amung.us | tcp |
| FR | 216.58.214.174:443 | play.google.com | udp |
| US | 8.8.8.8:53 | 198.20.217.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 174.214.58.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | whos.amung.us | udp |
| FR | 142.250.179.65:443 | lh3.googleusercontent.com | udp |
| FR | 142.250.179.65:443 | lh3.googleusercontent.com | udp |
| FR | 142.250.179.65:443 | lh3.googleusercontent.com | udp |
| US | 8.8.8.8:53 | lh6.googleusercontent.com | udp |
| US | 8.8.8.8:53 | www.phongthuyviet.com.vn | udp |
| FR | 142.250.179.65:443 | lh6.googleusercontent.com | udp |
| US | 8.8.8.8:53 | va.tawk.to | udp |
| US | 172.67.15.14:443 | va.tawk.to | tcp |
| US | 8.8.8.8:53 | 14.15.67.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | vsa25.tawk.to | udp |
| US | 172.67.15.14:443 | vsa25.tawk.to | tcp |
| US | 8.8.8.8:53 | cdn.jsdelivr.net | udp |
| US | 151.101.65.229:443 | cdn.jsdelivr.net | tcp |
| US | 8.8.8.8:53 | vsa14.tawk.to | udp |
| US | 104.22.45.142:443 | vsa14.tawk.to | tcp |
| US | 8.8.8.8:53 | 229.65.101.151.in-addr.arpa | udp |
| US | 8.8.8.8:53 | vsa39.tawk.to | udp |
| US | 104.22.44.142:443 | vsa39.tawk.to | tcp |
| US | 8.8.8.8:53 | 142.44.22.104.in-addr.arpa | udp |
| US | 104.22.44.142:443 | vsa39.tawk.to | tcp |
| US | 8.8.8.8:53 | vsa54.tawk.to | udp |
| US | 172.67.15.14:443 | vsa54.tawk.to | tcp |
| FR | 216.58.214.174:443 | play.google.com | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | f426165d1e5f7df1b7a3758c306cd4ae |
| SHA1 | 59ef728fbbb5c4197600f61daec48556fec651c1 |
| SHA256 | b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841 |
| SHA512 | 8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6 |
\??\pipe\LOCAL\crashpad_1912_IZANZKIBIEEYEZCC
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 6960857d16aadfa79d36df8ebbf0e423 |
| SHA1 | e1db43bd478274366621a8c6497e270d46c6ed4f |
| SHA256 | f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32 |
| SHA512 | 6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | c04b016ea2fe6b5cd680200e9f9508f0 |
| SHA1 | ee99d0a5f2fd8495e603fc82af03163f2680edb1 |
| SHA256 | 045a42cf05dcfb1834e60c6393a42a34e3445298d46b41a9828f177f3dff65cd |
| SHA512 | a12dbf92cb6e1fba49f4b5c84f7b4174013fcccd201d3b4bacceac479a4aac1b21743f9290de7f07864a4630707e6f3ef7313dc038ea4a7c8831b5502ba18bb4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 2c6aca6cc6c5ce192b6f76089cd1f762 |
| SHA1 | 62dc8f1108180f52816c13fbb3274487edc326a5 |
| SHA256 | 0cd4bacccc80ccd787b2b52a36df938f7decb24291cab25ed13fbb8898465a51 |
| SHA512 | 64314701048b3ff6e9449c406ff337e8dfa8d6821cf575b688125c43d7df0e10dcd0b73e837ab989f94998a3ca335e24b2efd321d2d3b03a1bd59718dc66b722 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 781fc898752dfde513b9439014e11343 |
| SHA1 | a5110a5bd700bdd62db9fa95aeb4e1c1f4bc483e |
| SHA256 | b7bdade71887bb8e5e5213fd60c82bb3f3e5157a437096984e4ed57435913b92 |
| SHA512 | b375245e013236cc3bf53ff8f175a24731b49056005b91d03cad4fbf948f56fd8e8af4cf8cc771a2e29f5b666346023d52bc1a39e50642f7246bde81d5261200 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | db3fc7b427713e5c342d93f8e60e2f76 |
| SHA1 | a2b621562242a1b3580e9b9626b36f404036c9f1 |
| SHA256 | 30510843378f196eb6b81c6109fa22a81f68f81627abbc2ba32913925e18725b |
| SHA512 | 1d01de7ef503d86e1afd91e776a5ca58b01616785f5057537865f53cfaec97acffe1a3e75319321841619c8fbd6119408e0b665983be025b856a5bb8c23a3057 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 7a7e78ddf55ad547757e828a22faaddf |
| SHA1 | cac6a1b611e1d0843ca146bbbee724bde0c599f4 |
| SHA256 | b46b86d3e93c5d18cdc7e4079114871f0826a3e0cac5cdc1f049aa90b79c4ea0 |
| SHA512 | fa8869ead79023c23c1f8d1023705fa4bf52c3dd811e491519fa8aade9495c56573cf9e63abacafa40472ed325021c6740da901c061e695b2625015c4303dd40 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f5ca.TMP
| MD5 | 0b25f307ddf5ff2fc70158c109b632cf |
| SHA1 | d4142c04352b3f8902a5054cb017e0438c03858d |
| SHA256 | 1abc27a5c707f694dade2496292f45051e19be7d785cd7615a1adda04ca7afd8 |
| SHA512 | 8237f2c4cf3133969d63567d283b9fe48dec02cae27c9319282fd277926036af50f844a80c7a76c8d3916bb6fcb3043a9410d8c289a76ffbf53df7f78fbd524b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | b6fd7c997ed512bb591d9f00b6e38a02 |
| SHA1 | 813050203d56dbf72ddf5d65157705719da33e82 |
| SHA256 | e6bde660ab81a6ff9cf593762cc038de18e57161dcdbdb367304399d717c9a58 |
| SHA512 | 583fb2d4fa3d442ee6c49c44de42f69a29c461b07d9aa2f7cb30b5c7ff73f99deaba7451e4a0e22758eb48097981408a1d64872738a60026596ed06951ef1fe2 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021
| MD5 | 2ebfdbd309ee762211b4a2ac39708c4d |
| SHA1 | b002922c672dbe1dd4caa02af24d0b1e7da616af |
| SHA256 | 54ae97d445b166859fe3ba6241b97abbac0aa0d158c72352b774d60ba3e81797 |
| SHA512 | d1687b7a6da07a72963c96a1e85661046d3d3c96f88445302afa09721fbe211a5fb8881ff14b346b0ebe8a20f5ced21979e9f58e256427e57b85d565bef17720 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 0ed45e875fd656ceb7a65423d31ceb75 |
| SHA1 | 1e2660fd22cb340484a9dff694f05a4147d6aa96 |
| SHA256 | 928f8078627e3f8f8752d42e0314afd6d633751061fe691377dd88a47c00edc6 |
| SHA512 | df2df37c8782dcf797886922b6bcb72380d108c5bc6b6cc8065c5ed89484df55a8f76b0d49b9021bc81486bc401d3b5399386f448d822fb4cb44a330e12a993b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 6dbb275d638b12561d09f6044737fe9e |
| SHA1 | d45c540829313dceaf8df938c058936daa861d59 |
| SHA256 | b1eb5f36676ba0e6b26c9f39ee74a3b6888e4fecf04c051eafcdaa57e41b1c90 |
| SHA512 | b1a292db6b7a65acc2c61e5172d068878b166941dbe0cc7c234d6a9e794ee238d8084f2a2bef5f8a6076acdcb5142d4549a9ee53668a94a7ad0e396a37123ca6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | c29cc200c54b92b7cb8343bb2e449775 |
| SHA1 | 7a3a30632104254f9735e4ba83b6d97a50c63bd8 |
| SHA256 | 2eee8387e4fb96f44236aa09e0f0452ece0001619636082f32cbbfedf6ecd29a |
| SHA512 | 5d5a405e9995f9402a0a3fb5820091cf098f1a1047889bf609ccba47fba509bf962615d9d9d55f558bbd19647d4db5e0dd0f7e9e9bbe9fb7f2dea57495476161 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 9b9b3ea269f72fae0816bab9ec9c8f6a |
| SHA1 | 226278eb1a3fffe093382d4fcf9b1c5a7a6f2f00 |
| SHA256 | cf63b53c5f1223ecfb0d05aed851faa711a284ea7a8892b21994effff5a00818 |
| SHA512 | a8201fc4a959338ffefcb68f05f40092cc83c39703efdd4238372d63688bf52f55bb8dbf73818f0dc9a9a686734f0f7c3189cb4dda9ccdbb6484e196e01330d9 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | c2cb624e7481be458cdb17a01b14a6f5 |
| SHA1 | 8cc7a21f5e953a64b255b57433380dcd0f8f9ee8 |
| SHA256 | 979c3da819007e106cf1fb03d85bf46ebb3d9a30f95216b7cc297b28cdb80dde |
| SHA512 | 50651e28a467131d459bfecfb4e7bfaa5c3a558732dd0cdc2de44af7d5da0120e706f0e0a5d7d97864cf050a90c6dfaa5d24491d263ce3c1ca708873377589d8 |