Windows Analysis Report
https://1drv.ms/w/s!AtT7n4sxDprUjw6W1MbI-uZ6uCxh?e=cSk7V8

Overview

General Information

Sample URL:	https://1drv.ms/w/s!AtT7n4sxDprUjw6W1MbI-uZ6uCxh?e=cSk7V8
Analysis ID:	1417007

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49738 version: TLS 1.2

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.21.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: unknown

DNS traffic detected: queries for: 1drv.ms

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49738 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@15/30@10/32

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://1drv.ms/w/s!AtT7n4sxDprUjw6W1MbI-uZ6uCxh?e=cSk7V8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1944,i,17392115233112207964,15943187408854648262,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1944,i,17392115233112207964,15943187408854648262,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.139.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.111.84	unknown	United States	15169	GOOGLEUS	false
20.189.173.6	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.195.19.97	sni1gl.wpc.sigmacdn.net	United States	15133	EDGECASTUS	false
20.42.65.93	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.48.203.201	unknown	United States	24319	AKAMAI-TYO-APAkamaiTechnologiesTokyoASNSG	false
142.251.167.139	unknown	United States	15169	GOOGLEUS	false
172.253.122.103	www.google.com	United States	15169	GOOGLEUS	false
52.108.8.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.9.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.167.94	unknown	United States	15169	GOOGLEUS	false
13.107.42.12	1drv.ms	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.93.4	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.108.78.30	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.53.35.72	unknown	United States	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
dual-spov-0006.spov-msedge.net	13.107.139.11	true
wac-0003.wac-msedge.net	52.108.9.12	true
www.google.com	172.253.122.103	true
1drv.ms	13.107.42.12	true
sni1gl.wpc.sigmacdn.net	152.195.19.97	true
common.online.office.com	unknown	unknown
onedrive.live.com	unknown	unknown
m365cdn.nel.measure.office.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://onedrive.live.com/view.aspx?resid=D49A0E318B9FFBD4%211934&authkey=!AJbUxsj65nq4LGE	false		high

ID:	1417007
Product:	CloudBasic
Start time:	13:42:37
Start date:	28.03.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:43:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	95F1E65F3BA77D84FF279B6777FA8FCC	457CBF5B5B4D0F2F012C08C7285C6FF8C1FDC16C	1302F562B5B234744DAF2E09A0366905A1A51AC1E009BA21329A4563D9A6042D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:43:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9FB4BDD10C6F65EBEBE64F57DDA7ACB8	0B188AFE43150DE02EBDCE8E4599905DB2A1D04C	8BFD1E7587AA6B5C92B9A39809FFD1A6D4E99AB438E749B89794628C3453FAE4
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	705B0C97064DB9BB5F116B1781E18A84	9FF8AFDA4BE27A592FC1E5841B74554B8E1805FC	D4457A6F28C021BF4A908210684D8733CC055E391E2C26013277663FCB92C01A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:43:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A90B01C9B3E39C72A79696A72D819E28	CF537E4C76CE7BC2D41E84F6FD7FFC0A0B9B853C	268BF5073766A6128CB25E5BFAA0AE817CB6CD15D8A78098ECC5F0CF073468E3
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:43:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	99544F6AB2E273F43B86833A312E81F3	6715D4AF885321370A73DC68CD37F75964ED8BDF	B827739ADB53DDBB52BDEF22ABE1CFC211398067570FDA9E30EE355FA5E4E453
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:43:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E7F99B717902BED4075DF3A008D30FAA	81D6ABC4DD2F1326CB3D944DF43EB94745DC906B	A1A2326F59C7E953337BC6656FEB6A7AB6595C438DF8C39EBC2EFEE6BC2264D1
Chrome Cache Entry: 75	ASCII text, with no line terminators	825644F747BAAB2C00E420DBBC39E4B3	10588307553E766AB3C7D328D948DC6754893CEF	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
Chrome Cache Entry: 76	Java source, Unicode text, UTF-8 text, with very long lines (62392)	125326F9BF793A698B55E511C8E3B15A	4F7F25B412B467FE16D286D1B01ADA9F9DA1D3BD	28D97C7A1D0E034940F6DB0AA0B80372AF9F646AF73B10680DA87F62DE8B1A71
Chrome Cache Entry: 77	ASCII text, with very long lines (35371)	BE73523C970F0BFA1C8F0A8C51F80BFC	B3BC3FD464E0A5766F27F84CA8D0C30993A26275	494AE42932343D70F747F5937271E4BC7B020D53A1A2973876B15AF26DB7B1DC
Chrome Cache Entry: 78	ASCII text	D430811B564774189EAD799B71097A73	5D8ABE2E3C6AF89E8975660A3BF7F89A7B47D3B0	1B95F583AD90711A65C18572F9E592981C23D9FE423F87E83AE10C363FA06C77
Chrome Cache Entry: 79	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (396), with no line terminators	E25E8FAA8476126311D86535FD414584	942230C06874D8E8B3891463F9E789693FAAC8EA	445998AD4E9D6692510AFB85EE4B37E51C27605DD125420366C9C6838A4D2C8E
Chrome Cache Entry: 80	ASCII text, with very long lines (33338)	699FCA76D222A6D58671BA8936498596	227ACD90F7107BE4955B78344C07946029714C89	92FAE43049AD2703F68FD22DE4D2A643DCCE54DF2137DBF789EF44F3C4ED5F91
Chrome Cache Entry: 81	Unicode text, UTF-8 text, with very long lines (56772)	2ABB478A57BB8C4A9647E55DF2E1F67B	DBB4069927D215D346A9EBC6238ADDBCC77EBD5F	93B44F1DDB6CB2E36FDE3018E77296A9BCD5AD9FE4031E5CB655BD68E0F43C85
Chrome Cache Entry: 82	Unicode text, UTF-8 text, with very long lines (65514), with no line terminators	5EAE1DFD59B90A563D2F539B28252957	EAAE1962EA1728C1F6B65B25F25D339AD7C80203	8918E9EDA2E2D69FF7205E6371BFC9532F4660C34BEA72C04578A8C9BF85A8E1
Chrome Cache Entry: 83	Web Open Font Format, TrueType, length 2944, version 4.30147	569A610DF4FD269FAA528A2197DFAA9A	CFC7596B939A341C5DDFFC53CFD607745AF18E8F	09A1411BF361D3D649F4FF5098E0197510232477BF099872F58F5D1EC483E9AF
Chrome Cache Entry: 84	HTML document, ASCII text, with CRLF line terminators	5343C1A8B203C162A3BF3870D9F50FD4	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
Chrome Cache Entry: 85	ASCII text, with very long lines (31533)	4BB463474EC115E3347AF547B6494A41	6ABACE9F7ACE8B41E04BEF1466ED216AFF5B70D4	7DDEB206B915ED1B3B879BC09765705C9ABAC62C38767EBED8297715DD03A73C
Chrome Cache Entry: 86	ASCII text, with very long lines (5962)	DE83A7B3BC0A43A5F4E6BF8E71F5413C	BC3274E5C413EDFA65FB6333E63D7FBEFE1A12A8	A5E36060F6EAB9C2B23DC2724F3758EDC2D38A7336A619BDB463C3B3A81077CF
Chrome Cache Entry: 87	ASCII text, with very long lines (65536), with no line terminators	F419DD51C7626C65C4C2915722AEF709	C9A8BE067764D3C0F8308CC4284A2A93849F6686	301FFC8299A7DFE474EB6A88AF6B8D1B020FA35BC1B5BA21DB8C45BBCFA31241
Chrome Cache Entry: 88	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators	9ABDF1AF6CECCDC2ABBF114766B1FC12	DB73D1174C47C9BCA61F14007DCA32D0B167215F	892E3D437217BF722C9BCC7C7BDEBEDFB4A367815D885C88E0F581D056869F3B
Chrome Cache Entry: 89	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (396), with no line terminators	A31A3018973D87FC999E83223DF8319C	9E67326C27502C39592F995C46C063F4FD844D0D	3DFECA41BFEA1B865C48CCE2CD0F71EAB4536CCB0993175A14D4D8418D03E0A1
Chrome Cache Entry: 90	ASCII text, with very long lines (65449)	1C92CA609EDCAF459D5D303D18D5E01F	70CCFD76663AAD640420AC2641CE8118EB3E7C1F	6B5D0217A768E65A1A185FF11BCE46D35DED75870F2AD0E824F9207C9ED125D7
Chrome Cache Entry: 91	ASCII text, with very long lines (65536), with no line terminators	CC8A4EF6016221EC13A9B2FDF17AC66D	3349028E0961B16E7DC4FDB40D61886EA04E70E5	751BF82C6F339F07D131A90030FB1C6AB02032CF58D99A7E1EDFB26696FA313B
Chrome Cache Entry: 92	ASCII text, with very long lines (12986), with no line terminators	974C06FAF026A4AD6CC2B05335528716	C0AE80B977DF743813215AAE3701C354E141ACF7	058ABF23B6CDA41733853DEF2C69074BBC3C1358D82C10F285E268B35D5E5852
Chrome Cache Entry: 93	ASCII text, with very long lines (2242)	C4C364A3750E2848013E4D45D1A26710	099A7AE0C7D986A27E0952E17E4AE47AB3D98066	8BF7EA6B1A31D3518D97CB5CC117ECF193FD1795BAD92AEC52BBBCA8693C9753
Chrome Cache Entry: 94	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 95	ASCII text, with very long lines (14064), with no line terminators	1521E7461CD93D530811D643EE387E94	9DBCFD942F62467E137B074BE195C2F53902DE04	416C6A230EABF5F12F103678BB52B03DEA0B9C0FC59C179DC695EAA30D57DE38
Chrome Cache Entry: 96	ASCII text, with very long lines (11123)	36CCD431A267CFBF667D5D644D37C3B1	4D278C893F07DE6A6E11622FA2C9B5933098249D	AA6C27F34BFB8C38D95411C30EEF93D6FB0840DBAB8621BB9B9C7824748AD965
Chrome Cache Entry: 97	HTML document, ASCII text, with CRLF line terminators	D29FA9F2AB3A72F2608E8E82C8C3D1C6	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
Chrome Cache Entry: 98	ASCII text, with very long lines (5825)	D3121DEDC203091BE359BED7F3ED0EE3	76B7CBE13565BA9F3364BD6A7C084E8B40330F48	CB733BFAD70A18BE777D66F3C50D96E47DCD01ABECBF103B6220337A3054768F

Windows Analysis Report
https://1drv.ms/w/s!AtT7n4sxDprUjw6W1MbI-uZ6uCxh?e=cSk7V8

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://1drv.ms/w/s!AtT7n4sxDprUjw6W1MbI-uZ6uCxh?e=cSk7V8

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://1drv.ms/w/s!AtT7n4sxDprUjw6W1MbI-uZ6uCxh?e=cSk7V8