Analysis
-
max time kernel
129s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
03-01-2025 05:54
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6a9e95ba213b655795e437de999e1df0.html
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6a9e95ba213b655795e437de999e1df0.html
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_6a9e95ba213b655795e437de999e1df0.html
-
Size
279KB
-
MD5
6a9e95ba213b655795e437de999e1df0
-
SHA1
ac50bc21842ab3ce7a60490d57c5b6dedb986ee7
-
SHA256
b9aea4fa05a050454cdf2b78a1b79c16401f1e655a8d854f32478e292436ac3b
-
SHA512
4bed99ff0bcbc36ca31c3d2ccfe582a5d5c10a7c73cc6a6824b54b4f85486396b98b277d600424c7ba57da8d39023f8d5348b22c4055268bc7d3427514ef2b82
-
SSDEEP
3072:1sWv3od2hs559Wxd6wAk+ZbXtDoFVvvkPzVGScoLvxn4pMcC0q14uPG+hNBJZ8EE:UoG+qjRx+bNp
Malware Config
Signatures
-
SocGholish
SocGholish is a JavaScript payload that downloads other malware.
-
Socgholish family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c0dd9a0ba45ddb01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "331" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10220" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "331" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "442045536" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "325" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10220" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "233" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "233" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "325" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10220" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2328 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2328 iexplore.exe 2328 iexplore.exe 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2328 wrote to memory of 2476 2328 iexplore.exe 31 PID 2328 wrote to memory of 2476 2328 iexplore.exe 31 PID 2328 wrote to memory of 2476 2328 iexplore.exe 31 PID 2328 wrote to memory of 2476 2328 iexplore.exe 31
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_6a9e95ba213b655795e437de999e1df0.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2328 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2476
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD540edbc0a40b0476d4700ae90933885c8
SHA10fcb71eaebe18b515e31aef97d6abd81a9b51d20
SHA2561aa9aee54a47bf2ad62b676819ca8e8fb77b5d9c69943eb9f17082968559b74e
SHA512f38a477ea55e92c1a29f6700521a688ff3d532d2d0e72c5ce78cca154f998a9571ece22551738dd3207df4c90ef0716dc5592a59920b7d7c7288691d76900b1e
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3513D73A177A2707D910183759B389B_DFB78462C65FAC2750B89E1A8A1F9A53
Filesize471B
MD53a1dc03acb2d01c988b0d0ca8c708f19
SHA121806c21f17aa7d95f8bb9458f935ee145916d5d
SHA2562bde62b5f5ff689a5175f18bd5718d057c1ba37e60e7f1d16335f51be11220ba
SHA51287cbdd6a9ebbce88bc7fbf2912d209f217627280d4d907bf7c4d73fecf4b45a0c79e1625d36d4a74b9fae8d8d59135e2379d9fbf51b66d146d517f6d461da71c
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD592c84dd15f58360ed7bde9c2de6a5c89
SHA14ee23ff5fd97db450dfc1ad64ad1877eccab40aa
SHA256da75556a762929674408c13d1518baadba05f610055dc8d23576860f50edb62e
SHA5127f2954d66c79318df1d7d1fbd596d74b720565d79f0cf0b7bf857e73929b6dfd6a10f34d361f178e9d10e213c97cb5db455aa67805f87568ad21343e6c8f07b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD5ec2111597252a463ecb714963b0905da
SHA16f3d5c93096dfba51ed82ec29035f1a53569bf72
SHA25660becb57605f60aab6ef48049f6c141b50b5b708b91613f69f3a6af3ac3091b2
SHA512edfeb1b2964aad083bd9a2a59aabccaabfa467b5ccda5b8e09b0be01a35bafe2a6c007561120be205b06cfa0b8ba4fbadeb41f6c355ad9c0cdccaf3d08ecf6ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD548e6be29a3915a4b84048319adf36320
SHA108a55a934601631a61ee652c04b35276867ff921
SHA256b6a521efd4b8e412508326b9f3b1c26162227317dab524497a6bce37a8b5cc05
SHA51236c9da8ec1177b897e6b80351d663170aca164f59e0b6cdad452f4fff041e28aeabbe50f73d033fe7e3d6c950bdd0237c6773f8483528997e7788c6832ded8a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD58ced70daf7e24a9c43c137a58d2e5bb1
SHA169f27f3cde747b0515557bcfbb29293b4d267eb3
SHA256ca11c8a5087da1ab89d4c55695c2ee9dac275e6d17a38d16ac8032b3077dd914
SHA5127dce54c273e42f4aa22ad852dc47c934dbe397463cd414066fcbf82ab756ab7c15e2f3c72567f8462a32e740d5d7f7ed1874aa4bb627339cf0bb72d7e43c687b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD539da34bddb0171161f2b56c7c32c2236
SHA1933fa4b7af4710a7f51796c2c63414227e508ec6
SHA256203a69a218829c4498b7c0d3879d3a22bb1f0653d5a7808f9e7ceb0cf63cb8fe
SHA5125630310a52809ac2a97221e2970feab0209308bf63eb85636d27d0c74c285125fb6f706211a267991e4015142b6d4cff7185f8d9346b3c1bf83da91db59e98e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD564ca7ef5ed32952d90b9c5ebc4c0263a
SHA1f3c10175e72542109baf6a4b813898b734a8b4a9
SHA2563c7204675dfe014d385e39e74837d3a3735cfd36efa27461523619b07c62443f
SHA512ea1290ddd11554df7b8ad7e84f51989ab318d11fb5851de0249380a0fa5c28038beee6d9d82c9df04d2061ea438488833c4bd17ccebe569c687f45a18d3e9a90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD51184e73f7c0df7e5f9f307a982b51c48
SHA10c0a72bca5aa2204da52b3ab62fef1919bbe8191
SHA2562fe901a4c7d2833fcca852a17454488b66735907e1377a1e084bf7595eb65a5c
SHA512fe4c18be22bf421c23876b1756d368fba8a2d837c927f9bf3e1127a0bfeb5ae1cb3ef98bfe0d5be84e4935f40732f724a5b7e1be501575477a01feb20c85d557
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5fff20234cc32f2c3b4f470b1d980d3f9
SHA1195ddbbdd73465374f9a6c0d6ca728a7660d06de
SHA2562077721a6c942bf578e54402043233e4ba4a455facb9254148a0b5f730cd6665
SHA5126a226e68170325b6fede2d654a981b2c543e0a2193447ace58fed43d253846bffe9d4353ce17643df1132f1494e24b76bd0de6922caaab4799c3c0d95da93003
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD52bc4362706653737674d3069e2b70622
SHA1a47a309440dacb8d01f1b5facd5af2e0ed0b1cd6
SHA256148e88163e845717810711bbca2390ee9ff638e103a1d92352141f0f641e96ee
SHA512a11a9356eace152b03002f8886dd108b12891c1c41c3ffd8062fc47ff1316eec48eeb6e7a1f09a1cc529848d0c19f7430f5bd7b4a28eeae08574f2b91f588caa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ab21ea334a7c320ff80eacfa5c169cd3
SHA1f78dbf7e70b4dfb8956cf75d2ea7f984264f4641
SHA256c171d207362b5d4eaef18acbec349b03e1ae569ddf11148451e45006a7048b21
SHA5126d337594bae76c5347df2c19dec47ed450b3947f2475677e27eee3abf05ce8375546a618d9b9d31d94bbd1cfc1165f6086cac9b883d755ddb28e541a9baed7c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5062d42b2105dd50d991177eddd748c59
SHA123d4221f1f350e914a9a46d6b2efc46f53f281b5
SHA256419787e4a35531821ffb1f78c438d03dd15f7bbd3e4d9901e406d714e28b1613
SHA512241ab36e385728e5ef37e52edd596d8bfd4fe66f6a934a7738ece2ca6ed63c924fb50f1ab76a3df6391f38d4d00e2d850002ea97e43c288f57f41dbe8282fa57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD551d1905b615840bb7851eb8972cfa4cc
SHA14168739ac8df9250f4f57357971593a3f534539a
SHA256face47ea1171eaefa4017608dc57293dfeea45e7b78eecc98a63b16dc8d0aa14
SHA5123a20d1d39db15d2fb461e3898d26e6016a42318adf3b6f10703470dbef9e7c3b1a6130f9e5c0a47a6cf2477efc1ecfff056ad20a916605e238c953f22219c898
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e715e3f9f967218543dd798bd24b0eac
SHA18d48628bd034315d952780cc89c805814e22778b
SHA256fedc68d9e6119e8d87ed3c2b2d526d0c3a593b8c027109793473079390adcc99
SHA51272e15274ccb6d1fc1e7876602fceb7459797d3a7d077b3570587a9b772c2f5e754aff33ac4863147bccbaca162771d17bd6a238b4d341b748fd14fe0c2fa139c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd1d2cd04678f5e7c8f53c88a7112a19
SHA165534fac46625f400a224d3ccfdb9c0faa928940
SHA2562bd10d3489a3ba7c8cd3d31253d2a1992a6e07b3788ea45b60862a41d3538126
SHA51206d63c89c4557c80a051bf74b0e30b30cd41bd06a232bc1ace2f7b21194b07ca9e75cc68415f2222381701fb716c2356d73b3a014dbb9632d58be41599bb42d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5828b64e88a4c222e826f781d0a9e35e1
SHA1230db2d11ae9afd984e0b402300fd5d516595f3d
SHA2569e046a6ddea9723361b5f20c56e3e16751be30bb0bc7b0ddd55a08214dc80245
SHA51202693d06508280e0c972242877eeb04cbd09623d3cfbae55b2e8dfe164f0c209c1d9bb8b2864ef4d49b35dd40271ecd1221f9feca28eabb07b88f51bcda3c633
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7fa8de9140e84ef7125b304ccdb3154
SHA1bbb404d1f9d1c62a556c28cd669a4c6adca2f230
SHA256c6f1234fde6674e219be7e180ac39043a93c84baac8832f0d7936815c51ab05b
SHA5122aa86df95347af9eb080192dccb2be5b70973db8561c776eda32bc9cff449234156c6002b4684b5b53a420eb587d88f7345c75e1f3e62ec6b6c36c2b0df188a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ba21f252db870659843d6ba46f59bf18
SHA1e2135a7ed58f940315503274777273c035e69ea7
SHA256f2607234ac8be005c182d204379e5959c280871b8390c832902fe0df070fed19
SHA512c891e314fce751cdb9b62961982c7b1ff536f2fb4ed2c36049e708a2bc157c444aa2756d66fcf2823ae7e0a55916ede13c5ed938dea633f925f37a2df75f3af6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c06bf74450703ae57fd43337e1f9406f
SHA112e207f34a1da7f0ee181fd0d961aff42c9fe1c8
SHA25632ce73e35498f881382bc46afb68dfdce2aa6e967bf5990d5bf4a52b112143b1
SHA512b30f220039d58420d2bdb6d6b3caa848d76a651a083c3f4880b4a222b8555885f47c3e6006a16fc2f06cf9bd602717193bcb5fd0a5714a530c06face11f71f74
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50522809a31e7c6d8907361e458b49112
SHA18d468f633d877da146d8e2ab39e008f27328c25d
SHA2561833b0a431b45def5a6416a82e255d9a994c93121315bf3bbc084196df58bf58
SHA51261916f189ed05668d565b92fa5b929d45a887002b77cbbe204f3ad44daa37772bca718b096d7d5ec21495c022be3db74139f32bcf12a4c90cb683292877ea485
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa3e9ca1d70ee6ddbee33a9218ec36d5
SHA10ab3b18bbd8926dc3b6fa0a53bb8b575b70c54af
SHA25694892ac2319bb6f84c43c10c430bbc1b2660b0af45b40d70e44d6478a0541912
SHA512be0080b0744d731c8ce1250eabb947116c2802716358924025f2a19fe71e3e29b24e9b17852f6fde914b9e3c742e690735b3cd5409b677c542727228760841a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5296a2b632b611ccaab8eb26d2ec54f08
SHA16ca5f62ea0cc1850c7fd9f1f40ddbfb442a8c5e5
SHA256b7cbe2c60e3168918a4c3c0d10e854418355874f1e30458916acdb92e6f41c00
SHA5123728dc483244620bb5546c19b0a78981a6cca4a5c78826063c6baa8fdc9657061f2360cc14ced70c0a384b50c951836ce039c955e586f361c78b91c52919c8d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a85d7e7fbf819fbc8ff9dacd62ad1749
SHA1693bbd6284b182e3f596d3c63ba9ce99b53e3d0f
SHA25662fcd72f67822c84bb0b323edb57e92694498227bebf459063604daa078e9556
SHA512394bf4f80ccd9cca3f3cc3047a434aebde090520aa2d07fc95e4843f2ce7ff471287ae2bf23e3a16c1c40274747644a7178f90b94a1a4de62bbac42dea654581
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ffbff8db69ae5be0ebbc05193528990b
SHA106dc9c463b2025386f9589207bb9d4a079afbd57
SHA256471aadd9ba5c6323b2f01d6e0945a6cb539d684de335b96f37f90615355df1c3
SHA512544fa4d54057197f9909de04054b7d404684bed9d6b55f232f9bdf8e5319b916b2703402817a980a6fbecfa537d87f8937b788853219274bc24b0a0f526ddbcf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a09fe07fefc69b94a253ec1f6c0cc622
SHA190a4e7c395ad7d4da94ed1c684e6c0277672868b
SHA25650a74e366bebc1263e6fce72d2c5ee6fb9757536a93889fbbb84f04d4fd3d99e
SHA51273a88680d2dab75f7d132f802da612a103d5aabacc0a3a6f38ad6d2127280542228fe9feca07a86623e4e9f38efd672ab98555dcb2288f5e5472ab9b0ef51df6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5642fe16125ba0ffe7ff731420d4a19b8
SHA1c3c083707c68895383e5255678b7b98221d14d6c
SHA256cb2cf6836679132979919806dc2b1f827c9e4fca86fd1e689498bcbc1c553ec4
SHA51295ed644504c81c27f449ff795c62f0f60a81a8aa3572ff7b48f626bc68d6354183f2ef4ff3ec5e01d9e6f824909ca629e729569d6c5e1facff4338229fb7eb6a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5deb38946a284ccae1f2913be22cb902e
SHA1edd149dda7b698b6ac0523e7c01f4dec893f797f
SHA25632a5c64c9b8c4d8f181d749bdf1438aeb6d37e738713e98cd60d2156440bd04e
SHA512b33dddd70bbb86245dfc2e17b6b2b4dc4b1a2d965c2c0b710bf5624d69ce5d2b01722b25f2297f44bd2d184b09f6c62730c7a00567edfed7d392cd65c4c74918
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ad38dac8b43349248cb3cf95fd736c66
SHA11970e944976e013cc0919eb444f7849bac62a3cb
SHA25602d0f577d246c3aa8589e92b446db0ed78f995cc0d093107c09d49daee702d7d
SHA512e50e23fce32d7bb1f5da01d02936412df730cad382e9d445544da076647863bcc1d0672deb52eea2d9653b7742444853c763317d79aa0947cd21be6ec8dc5e35
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD512d089bda64d4cf6265153b99a7fcba6
SHA127505bd52f0e6e703dba1e98fdca677a86d16677
SHA256753dd69791888015f7c7c991e458f3307a1a5d3d8dfd38f472102a1dad4156a7
SHA512930a828332feceb6d0d777be812b4edac93296d737a37a4a4b8a33cffa67d1f56c2572138b38c98fc7e44732e33372cee45c7c476d928d34ace15f67fd363da8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_DFB78462C65FAC2750B89E1A8A1F9A53
Filesize406B
MD5fe468af43950793d8ec71587f2bc2b69
SHA1b3b82160b91cda983f97f99858dba4ab90a97af4
SHA2568e68d8b00143880720fc6e4db343d74499df677d012cc86533d0ed73570c78ca
SHA5124a27fef3da1922389672669f35658b3b59a24e4428cb563d02b6faefa5d3394b4d5b976ee58ea777577a219184e8c95bfa222d01a04a04cd80db93de2081a785
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_DFB78462C65FAC2750B89E1A8A1F9A53
Filesize406B
MD5b1ea205be074cff4592a2742185ecb04
SHA1df71fc65178fea5155dd93e51050d96ae17219e5
SHA2560c50d8d0c279cec16dcc3c1d3a21c4b907527edb7da32523b52eaf8cbf41d791
SHA512fba739ae38df6aa483974108924481b67c41bed3bafd87c18f03c7f9ba825bb5a4bdff183d3a33aab8f9d6820fef02d2a50144418872c09aa054f651e73d4a72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_DFB78462C65FAC2750B89E1A8A1F9A53
Filesize406B
MD590871ab1c1a0cc60544273da85e3e82f
SHA1f6d0d76be6351adc0c7b0cb3a1c2e1a4ed41bb28
SHA256439b2b0beea5cdb6a63c8a4700e68dcca4961e23025b818e17ccd6098f204425
SHA5126dc3a5f25bb818cb6b3ff69ff0f48d93c86899bf22130659689187bdd270d1d2e0d983ca28aeec62c6f944c15f9d446ac620f79f2b938e54e8b36705d1afcc6d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD55312618d1b9d554416963f6a9b26689c
SHA10736e2bed6a9fd0f2d35caba55c0eaa838c5ae21
SHA2568fb2d60a23c41e60c4a60853e87b37a0fdaf6791fd6b7bacd705e4328d249bc0
SHA512c7d41d50c887a543798ff6cd73bddfe3342bd766d4a4dd521fc8fa7129259db2ec3dbb1336fac8a78367f57f6fb88e25b9ba728e5c929fd887c5b5845865d8ef
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
229B
MD51ed1caa9eb4917886e5d317e11b73b19
SHA121e7561ec7506c073af6e0af85274393aeccfc01
SHA2560a1dfdc3b7180808e492ef8d6110cf5c33c81223d95e46fd00517a2c8fcf24b9
SHA512a095693b4f316bd84b0bbc7d4a1372a6cb2c64de6abab410bd10c721916db95f5edc74a44aab95e1733f91033c137addc2f4434dc96208f020151e7db2f06c9d
-
Filesize
229B
MD58133df86e16993c0fc5d4cc7d4e1945d
SHA11de8956ff36c4754cafac5c7abf3327f46627b33
SHA25653f4c3b9a9eab03fb7307ca884ff78e53e359f8eb15c95217f9d33bcb088a57c
SHA512324a6428c04619b5d45fde82a66972195129161dd899d249220eb3f7029316415a090552052dd6da1562c6a1f58485a3efd982b0d4b48c360282f99067b4dbeb
-
Filesize
641B
MD5d4bcb9a52888abf04c4f4fddcf2fee87
SHA118804b50a3565729f5ab3c1a3eb720de29a0443d
SHA256bed698388c34871643d59035cb6251234307f73615d837223d98e05eeebe7c50
SHA51290e68b2d1266d5f083fd000b1e28cc9434a0ea475ed283471d5681c6e7f3adf505efccd6cb93d97e439da18a667ba8495a07a5ad208cc99f1fcea2d30a0742b3
-
Filesize
15KB
MD5976e6ae321c09f120d6f5cd1db2f7a15
SHA184fc247993ef57d223dd52c02947fc679dd81936
SHA2569453421534d57f7d4df817ec245fdd96897e3b30c602f8dd90e2d463d91e78c5
SHA512740b7eea224945de284bae49d315087d7ab2d0de25d33ed3d48b722e70713064f6250a566c2c58ecb44096bfb1520705daf3d67fd5ea87dce33396367a37fde4
-
Filesize
990B
MD50c9dbafc673f51cd940bbe25259b2e5d
SHA13423fe830090f711fefc2cd26683497537cbf638
SHA2569a01eaee6417f53a8b5c02acc5e5275f0223c6a21e62f940c7ddf0283d1d8cb4
SHA512c7a5de7b99ab62c534df3d809fb846541674d4b2f6876429500276e6b402e5425c188f3b5252ac2ea11313110602224e61cded6c35f49ca4b1c70f8cd723b9e7
-
Filesize
990B
MD56a84e2d2df8480e8b308563a4d14fc52
SHA14f0da3102fb4806c06d78ec186249951da7bd36a
SHA256f51f82208e7a67fa2d782bb5252f235b6b402643132257a6093f0787aca4808f
SHA5123e0a9f1d1848b235955bbce481fa03aa66dd899532657867b13a6ba4b6a986e42e940219c6104287b8ed4a77c9ed8ad52423fbbd28b7ddca65b87e0628f977ad
-
Filesize
990B
MD53d13386da51daf511c88dfbdbd4bbbbc
SHA172b3f10c2f292e2fb8508de04b7f91cbd9994918
SHA2561baca6ca6a177217b4e21cbe47f830fb8e1230c61cae70b7c2ad54c487380d68
SHA512ef4c61361ddc6cf3df978ef6598f7949fcbf3dcb1f4cf9d49456435beffa9de6b867cd6e13059898dc34b90c74d7518789c791e398d3018ad0ff05c63f681fdf
-
Filesize
990B
MD56d340e98590286be80b3cb79ab3574d3
SHA130922e6f39809831a360a082e8bd1bc596c55e4a
SHA2566e876ee16c9b4900b87782530c90de78160f875cf1332bf61789cdb7179c5035
SHA51209f5714a6d975194556666d3b49388ad67ac6a20686b1769c26b9464b2981d5abd78260a506536fbde57241db829bd4313892bd0725370602fc2894533b23cf0
-
Filesize
990B
MD502067c75a384071ef5b09c50badbe32a
SHA199e63282a0dfde467b35c7a14e5ae0a0071c1dc0
SHA2569cf4a25a5d8983cb336232fa56d88faea43f3bc2538cd9cc81a100bfc2a4434c
SHA5121c1a0f1c9b16cecca2e54c0e28cb13ea1c2b5eb0f021d43f21a4dc8d648856e8e8453dac5cece9aad17d4443971ffa6ff2d69fb9b6c9bc41c700a894d2ee01fc
-
Filesize
990B
MD511021f1f1e2f13d9637b010bdcf6415b
SHA1744ee97c18932da5ebb5274f0712ac43421abf66
SHA2563eb368244b4d2da9dc839cffdcc6d43c95f30b4e779e333ac5f4022c82810456
SHA512304034cb5c842473e7ce6d7c04e44f4d2c6af2f44969a12e22fc85bc331ace94a0c276f994a102d902a88553c9f503d9e5c5afa598e03fae1985899ac89a562a
-
Filesize
990B
MD57cdce1927eb2781d5429e25c5b91a8f9
SHA1c67c6ac022feacd504caba11e54191d584df69de
SHA2565d390c37767aa69a1bdc0b2836fbdb5b4bb26d7dd2f28ae92ba2312db7f07b77
SHA512dadf4204e0603ce89cd781844b78c26300dbdae83e3f35e182d3f292557737837c9011dfc33602ac0247ce2547be078b500015886983fb9fcd1b6e62436d8cd5
-
Filesize
990B
MD5a46330ca58787d7efa18ac58e9bcd0f3
SHA1065fbb9e47d48b2af1e1e1c1f33ed7c3cc6991c7
SHA25653c1941a1bbf4da71a34a5d312354129f3031a2bcdb01f7f413f5981199a7f60
SHA5127c2c2ad52a1fabc42f004d7cb6278e7f17ca1d16e246a0a56e893b0042ddd53f7dcd838c8d9990f26f029001224a6e4d74a035e4fcbad80824c253110fce6293
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8B420DKQ\2254111616-postmessagerelay[1].js
Filesize10KB
MD5c264799bac4a96a4cd63eb09f0476a74
SHA1d8a1077bf625dac9611a37bfb4e6c0cd07978f4c
SHA25617dce4003e6a3d958bb8307bffa9c195694881f549943a7bdb2769b082f9326d
SHA5126acd83dfd3db93f1f999d524b8828b64c8c0731567c3c0b8a77c6ddcf03d0e74ee20d23171e6ceac0c9f099dce03f8e5d68e78c374da2c055973f6ac2db4e4f9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8B420DKQ\cb=gapi[1].js
Filesize58KB
MD5b103bb58d9e7cecaa60bdf377d328918
SHA10f094c307bceef833a64f408d2f749a10f79de44
SHA25681dcd274347bd909cf132d3c8bcc9924e41921c33eca07fd6fe5e2a59ca4f5b7
SHA512b1a4fa329b76df7c861771e1dc36749155895dff623cd916811f2af8c95f3bcf9fe75a3b9a56833f066a227444982ff4883459e24f7eead79b521c2ffdcaa844
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LW44N8OS\rpc_shindig_random[1].js
Filesize14KB
MD525879c1792060210aabb2cc664498542
SHA1349848a5e88088b22fb4762ca2a619d1a7f40d97
SHA2561c0dff80b0111b04f387f0c39fe8d199e909c285f5471da80d6da78c79f9fc79
SHA512845cb435d102d39b001e7f00d7528dbc3f8505809f5fbca039587ed82d9790b16c9179de8877fd48f2fdab11e7308ad003303821217213a2b99e60d9915a9c88
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b