Windows Analysis Report
https://gcv.microsoft.us/kgRWagmalJ

Overview

General Information

Sample URL:	https://gcv.microsoft.us/kgRWagmalJ
Analysis ID:	1417073

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90

Source: unknown

DNS traffic detected: queries for: gcv.microsoft.us

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49756 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@14/30@12/136

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcv.microsoft.us/kgRWagmalJ
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1980,i,15349419578848157663,12396089134542083967,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1980,i,15349419578848157663,12396089134542083967,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
20.189.173.8	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.16.100	unknown	United States	15169	GOOGLEUS	false
20.141.12.34	eafd-3p-profile.usgovtrafficmanager.net	United States	8070	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.182.143.213	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.111.94	unknown	United States	15169	GOOGLEUS	false
142.251.167.104	www.google.com	United States	15169	GOOGLEUS	false
142.251.163.113	unknown	United States	15169	GOOGLEUS	false
52.127.240.65	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net	United States	8070	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.127.240.59	unknown	United States	8070	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.16.94	unknown	United States	15169	GOOGLEUS	false
172.253.115.84	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.4

Contacted Domains

Name	IP	Active
eafd-3p-profile.usgovtrafficmanager.net	20.141.12.34	true
osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net	52.127.240.65	true
www.google.com	142.251.167.104	true
customervoice.microsoft.us	unknown	unknown
lists.gcc.osi.office365.us	unknown	unknown
gcv.microsoft.us	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D	false		unknown

ID:	1417073
Product:	CloudBasic
Start time:	15:25:53
Start date:	28.03.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:26:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AB117E091586732C86AECE1EB1ED9157	924BBF11C31C68BA64266CD2D6769FC7E6AB7944	E7A4B8884C03722394162A5D731DCF3EFA42F4EC46F1B903A532C944A342C390
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:26:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	882AE387AE3E808E374B1961DBA888A8	452F9F3A62A3EF9549C466A496BF1C03FCDDB99F	AE3427668FD6EBA340D37682E2FC1424218180699768B9A4A4E14A313CAE374F
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	2EF72EBB6F39982CFEF7CF9673555280	DA57451E88EEA4FD0D6524833D650A999782EC01	5E297A3540181F785D695252CF107B554BFBB7F924B6AB60C31B77F565FEB8FC
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:26:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9F3659A175F0A2960BC007E6E3EE556C	489A1759AD602DDE0AB097418300E82B7C88E60E	215F4CA23166248D5C83D27409F7F1751BE3DE77DBB4DFF2C50E2113AEEA85F9
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:26:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	27EC0CBDFFBA85B1B6E4AF157D11B9A7	707618105326448B3EAE99197D4B06E1D6982D2A	01211EDAD081CF18F754AFDD88045A3E4863CC144D684DF2B19DF054BB028397
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:26:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	07B67B9735DFD5C8001E51C6CAD56709	D2B413C4ECA2BF9B1A1978109DD8F43B8D2512BD	D210E882EE8BB77EAC46D8520A3DAFC477731D12F02B4DC04F42323E82160760
Chrome Cache Entry: 101	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel	EE2B357FA5FBA69AF238168E3A1A27E1	B5DD4606BEDBF1D705A01F833802248E03D01518	0FD813BAE48835570858A2508D9C29900B8A4CDDEBFF4A250E79AD12F8ACBDCB
Chrome Cache Entry: 103	ASCII text, with very long lines (2530)	1D91B187A32745D330A2077FDADD872B	055D7BB0CF69E295C06346221B784359FA9199E2	2453F3D239A982DCF75B5DFA55261BC8BF77D04591F331847784AC4982E62F7E
Chrome Cache Entry: 104	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 105	Unicode text, UTF-8 text, with very long lines (64954), with CRLF line terminators	416B512C6FF81B7E3BD675E455905146	9F96EE2E55FDBED40B31BE7C24A97008A044404B	C400728CA705268C42BAFCADB6FD5E3AEA844F950E145C6F7E835D08E4C22259
Chrome Cache Entry: 107	JSON data	AF469AC6ABAAF7DA1ACC59F7292E6671	75ACAD50ED8287D26D5EA2C7380B09B6095DA453	AC8EA734A33366EF42F62398D95B4A9D912043522CF945405FD691F7AA342FED
Chrome Cache Entry: 108	JSON data	9F55861B9708E3CF188D3E5F7BF794B1	15AB48D729C9BCEE6E6FACD0D72893349549234B	1769634A0DB9D0C9411EC0974DBF7F42BDE8C4AD538BCFEDFBB03DB48F89EF57
Chrome Cache Entry: 109	ASCII text, with very long lines (14182)	39FE53EB9274BE422813B6756D3951E8	5E7E1AA6347DD66A7B52BB3AC94EC50BB0BEC9E5	E91EBC90763C7B778FC6FD26FC0524D9D8584DE71A1A6E2ABB6D54492D3472D8
Chrome Cache Entry: 111	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, progressive, precision 8, 1920x1080, components 3	3ED3B2FB3E64AFC87CF38EE4BB74A415	488783638E3D903C1B890876AF57264036B85D22	39E9110E7481C09A6C3DD85AC244848BE1517E17BC109852C12B062BA8F0C881
Chrome Cache Entry: 112	ASCII text, with very long lines (63096)	2F2B6883DF506FA11029D1E46167C453	B0F9C2613CC01C3EE9B10F12E298CC815D149A05	9FFB74A4DFB18D0DD5132133F104C008A15540DA87EF94A41F7B4C542D7F03C5
Chrome Cache Entry: 113	ASCII text, with very long lines (47337)	0627D9EF086A17447095E99090FD9AFA	584B355FA3F176BF0658A87C6267D0B95F3CA34A	B2A2FBED29B3EE7A0BE695ADC0A7C45C7EFAE9F958030D77E0944A9C9C7672D2
Chrome Cache Entry: 82	HTML document, ASCII text, with very long lines (379), with CRLF line terminators	0F7CCE9368A5285559D7EF3E641F18A4	0E25DA9ABEC63112710CAEB14123215D24A84876	BC1832CD33B67E74FE000BDBCADB002EB3B6D47F403CD56972545898474EAF0F
Chrome Cache Entry: 84	JSON data	36E785EAB8C0489434AD4391C962B03B	A99D3AE16972DBCDB95B56DD858E258EA01A63F1	2F48A1A0FEDEDC88FA71774F4F7D6C05A3E082F5892143BAB490C2E4BE9B6A95
Chrome Cache Entry: 87	ASCII text, with very long lines (47421), with CRLF line terminators	6E9386843C22345A256F324692D627F2	FEF7FADB3A27032695AAB726682A340D583BFC51	D40E9F33813211AA5DFABEEBF4A1571D488E56878954DE4D513A25B3525B3988
Chrome Cache Entry: 88	ASCII text, with very long lines (65536), with no line terminators	4D5CEEE45615E16FF9E5B59F07F06782	0117F6F4AAE69E34983830D95B99D240778EE2F0	6FADE40437BEBEE439457D5683A1F6EAD708562697E7AD2F0C7A2148BC73F34E
Chrome Cache Entry: 89	ASCII text, with very long lines (58457)	62D1545FCE12E0397582E4D900A89EFD	D4B3BE160044C01E25B12F76973760386CEE2CA2	8C677EE4A629FA0473A019BBA10B46E8BE2FD926705E2649BC743BD97839C57C
Chrome Cache Entry: 90	ASCII text, with very long lines (65536), with no line terminators	DA69DB81907CC110600C8989D38BB9D5	1CA81D11BCF858BC2774FD6C5414D83F06618406	1D95A437A2BF9545D8B862A9C7CF8E8B9A38D6520258BCBED8BE63EB54455689
Chrome Cache Entry: 91	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 572x233, components 3	E71534E10B1241216874F6C9FAEAD237	55E373F4F85AEC2E48AF6A225D4FD67B42DFBAFD	D38383C47693B251562296E1B8366AF11454BFCA4CCEA558895C946F180DD003
Chrome Cache Entry: 92	JSON data	2544E12C996BF24471362B93F0DA41F3	A86BF135AB32EFD7D71F9D608A6ADF970446E945	5066B03C47885E634492DD13D9D4CD86EBB62D4B6603FA5DD249E0DA603B4F76
Chrome Cache Entry: 93	Unicode text, UTF-8 text, with very long lines (19569), with CRLF line terminators	162890ADA98A5DEF6640BBE57DA52EB9	06A3D551F9718164171E7517F18577B73F13B390	DA599489D3F86D69769A1D310A5E59838D7E72EAD0BCFE94851D0084318FCDC2
Chrome Cache Entry: 94	Unicode text, UTF-8 text, with very long lines (40515)	0C6F020C2EAAA68CA998AA158720EDFD	C5582182A53E63DD95F2B3AA2BE10D37F86078A7	A61962B6B38FBF8A4806E6F476F800520C2D0D184983D226511D180E173FBDEF
Chrome Cache Entry: 95	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 222x125, components 3	EBF3D590FAEEE30CDF81929303672548	30BB5C412260A896CFE7E66FB33878452C3ACEC4	868D4ADAD4D4283F069E47683B80FF579F3B00941739820B74CAF999991FCA6E
Chrome Cache Entry: 96	Unicode text, UTF-8 text, with very long lines (60976)	2F5D48A71CBEE9ABABF1C9B78B8FD892	65141885EE4988A9006E2D8583DBE2EB7DA2AC84	629F4CC6CEA0E185B7315CDAAF59192A34C2F4AC122396C3CCAAC6A2B6A9E0E0
Chrome Cache Entry: 98	ASCII text, with very long lines (23932)	955B3780D94E04954A81D2BACA687D35	B3F3234B6BEB96B1B5E1AD69FA22CE398220D715	9382E22FD7683906612A6416A12ECB81B1318B03CBB3A3E009A5A49687155B81
Chrome Cache Entry: 99	ASCII text, with very long lines (29782)	C84F161AC3232BC00553A19A9043D7A2	7487D80415B1E1EBE3B1454CE6B8EAC1701E4550	E0362CF9EE3665EA471A69CF31D723630899D6CF8F0A907655B32578C690262D

Windows Analysis Report
https://gcv.microsoft.us/kgRWagmalJ

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://gcv.microsoft.us/kgRWagmalJ

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://gcv.microsoft.us/kgRWagmalJ