Windows Analysis Report
https://respond.bbb.org/respond

Overview

General Information

Sample URL:	https://respond.bbb.org/respond
Analysis ID:	1428768

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML title does not match URL

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

Signatures

HTML title does not match URL

Source: https://respond.bbb.org/respond

HTTP Parser: Title: BBB: Response Portal does not match URL

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM: 0.0

ML Model on OCR Text: Matched 94.0% probability on "BBB. BBB Response Portal Enter the received with the emall/letter sent by EBS to access the complaint detells onllne. Login using e BBB Username/Pessword "

Source: https://respond.bbb.org/respond

HTTP Parser: No favicon

Source: https://respond.bbb.org/respond

HTTP Parser: No <meta name="author".. found

Source: https://respond.bbb.org/respond

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.17:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.14:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49762 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: unknown

DNS traffic detected: queries for: respond.bbb.org

Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.17:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.14:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49762 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@14/38@28/204

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://respond.bbb.org/respond
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,3821777240068884564,6045341517814324874,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,3821777240068884564,6045341517814324874,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.64.147.188	unknown	United States	13335	CLOUDFLARENETUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
172.253.124.99	www.google.com	United States	15169	GOOGLEUS	false
74.125.136.84	unknown	United States	15169	GOOGLEUS	false
104.18.40.68	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.105.113	unknown	United States	15169	GOOGLEUS	false
152.199.4.33	unknown	United States	15133	EDGECASTUS	false
104.21.79.176	unknown	United States	13335	CLOUDFLARENETUS	false
108.156.149.66	d2i2wahzwrm1n5.cloudfront.net	United States	16509	AMAZON-02US	false
54.230.139.137	unknown	United States	16509	AMAZON-02US	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.160.0.94	d35islomi5rx1v.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
64.233.177.101	unknown	United States	15169	GOOGLEUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
64.233.185.95	unknown	United States	15169	GOOGLEUS	false
74.125.138.94	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17

Contacted Domains

Name	IP	Active
d35islomi5rx1v.cloudfront.net	18.160.0.94	true
static.cloudflareinsights.com	104.16.80.73	true
d2i2wahzwrm1n5.cloudfront.net	108.156.149.66	true
code.jquery.com	151.101.66.137	true
cdnjs.cloudflare.com	104.17.25.14	true
maxcdn.bootstrapcdn.com	104.18.10.207	true
www.google.com	172.253.124.99	true
respond.bbb.org	unknown	unknown
kit.fontawesome.com	unknown	unknown
ajax.aspnetcdn.com	unknown	unknown
ka-p.fontawesome.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://respond.bbb.org/respond	false		high

ID:	1428768
Product:	CloudBasic
Start time:	15:40:06
Start date:	19.04.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:40:38 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	A8E7120FF098EFEB1A006015C7BA9A5F	2ADF6FE607301A8F83B27CBBD46538147B1521A7	D8D4C6BE4EAF40E5037DA82689402A15B025AEF42DBA01145080A60C7ABAA8BF
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:40:38 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	27F191B830014E2399CAC34E66E8F891	5989B2CC6F1334C28D9FA290E35AF62B436A078E	7974F07A08FB0F113BFDA08F32A31DADDCEB97EC72CDB8102976E349DED3CFEA
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	AAF57AD726ACE87099945E1AA3B385B4	575E2488A3F26DCB2E80AF57EB899075E30001D4	6176FF55F47534C0F5CEDAD12E708C635E90AEBC13D0FD47FB1912230A27F880
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:40:38 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	B865AC35A23E9F42DC44024E9C998A59	6EB6BE25BE9CB5D5F12F1B954523A4F07B42FEA7	16B22870775B7B42C22CE32D198778C9404378F98ED22472F3DD76CB2568BB81
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:40:38 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	02993396EA08B860E748D8E5A3822E50	3CB86B3AB07EBC5C4FB1C9705B9562D847FCF5AA	C158E511A5A57C1A8E0C522585D51E2D341E056176D0803DA81B546AA9A5B58A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 12:40:38 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	59FC968E69AEC6D810559AA7D6CE9BFD	8D15C84083273D7F586C5D8D0AAC5CA6E207D48C	4F25A371570D9FE961661A678D2277C5482909B4C8C83E4DCC41DA889779EA54
Chrome Cache Entry: 100	ASCII text, with CRLF line terminators	A3F3EEB2D768DEBC3941274ECD2691A2	18E51C8A02A6E4F02F939B479C4DB68D8C8DB7BE	A7A3951011CBFB48BD3C899291BF82FCA2542246983EEE6418C1258E9C4D85FF
Chrome Cache Entry: 102	gzip compressed data, last modified: Tue Jun 6 08:43:41 2023, original size modulo 2^32 61808	026F9FE02F0A71305A863F2710AE263F	1A2BE27684EAE260260425A30975101ED5BE8ACA	317224C499947E573EA64EBEB3B982791AEF8CBEEF67304FF421A9B0BCBD739A
Chrome Cache Entry: 104	gzip compressed data, last modified: Tue Jun 6 08:45:37 2023, original size modulo 2^32 1406	801E3D501E6E9B9F106299D3343A3B5E	0D0D37BA05F4F2BDDD67FDA08B1E50B7E97D95F2	F4F81DFD874A4B13196C411E5F698C06C5BD7B5BB732B7F18645D955C3CDB41E
Chrome Cache Entry: 105	HTML document, ASCII text, with very long lines (2064), with CRLF, LF line terminators	59D4C2E68A69CE7EC0F970426A14E53E	72C599FAFF5F6E3750C8DAC61CE99033DD716243	5BC2699FB47E89FC6E122C844022E0236ACC02E8E40F39302941BF3786CA71A3
Chrome Cache Entry: 106	HTML document, ASCII text, with CRLF line terminators	94E327960AEC24D7E466C4BB81FF43A8	B465F9053BAD92A5261C5831F524A9BAE7C3B7AA	7CFBE4DDE40CD6ECA90EB76B5B19E9DFAF4714615221F24CD58A4C000D4421F2
Chrome Cache Entry: 107	ASCII text, with very long lines (19261), with no line terminators	3BE93FD15D2F7DEE2FC0C8981C6FA5C6	8CD88C36FAD3E96641DBC4D781F5DDBE5123312F	17106BF803D42BCF2F2BDF778ECE084D3F91C68E7EA41DAE7BFF61FEFA573DEE
Chrome Cache Entry: 108	gzip compressed data, last modified: Tue Jun 6 08:43:56 2023, original size modulo 2^32 4242	B0DB0A779A5BB7616B5343F177E87815	4225CDC9C12EE23803E675D2270D636EF3809DCC	1D2C805747E17C553C583631230B07207686DB2D48AC6789C07BBF230565C738
Chrome Cache Entry: 109	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 110	Web Open Font Format, TrueType, length 130412, version 1.6	53D4CC6D9CF4C83E07BCD40E8699FDC6	F5973720E0C0F64C9B30E0E91FBBB1F2B62B8639	29A57ADD63B53B32219C0842237DC5C4E86F22F17E62F23C00E5BC58AD8AF2D8
Chrome Cache Entry: 111	Unicode text, UTF-8 (with BOM) text, with very long lines (65326), with CRLF line terminators	8DFBF332EC8B3E02896F2E1EFCDA12BD	4B076F4EB794B3A0F88EB25F22E813B9DAE3255A	09F3CC04FBDB6B22B74A9696E617B658255191001872872362A125D63ED4F795
Chrome Cache Entry: 112	ASCII text, with very long lines (27832)	1CB05A2F9541200E1FA0A2CD0ABC7663	FDF3292A6DB22945EB79E08D847834205B749C6F	A8A00B576CC9FAD532A52ECDF8024724DDAA83CB0F5CA5D1B1D6EB8841103D60
Chrome Cache Entry: 113	gzip compressed data, last modified: Tue Jun 6 08:43:40 2023, original size modulo 2^32 41183	9FB5422E957879233DC14CE085033DFB	A16A0859A1693654FF788B0FC8F93BDD412C94E1	864F01DFCAB7E8398930545A3430F2121C99E7A5D066D929734B9A208E2B9D8B
Chrome Cache Entry: 114	ASCII text, with very long lines (65325)	450FC463B8B1A349DF717056FBB3E078	895125A4522A3B10EE7ADA06EE6503587CBF95C5	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
Chrome Cache Entry: 117	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	36A0E734AB31F60D9A9D082C37D2C01D	B69B969BE8601B7FE4FD54B69AD356B73DA341F5	641CD17F0715894B8221479096C7E76AC4278DFFC5E39341E4CDD0A527CCEDBF
Chrome Cache Entry: 118	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1423x800, components 3	45BAA0F5446F37FE9D121540CF9A51DB	27B52693898516BE06ED3B33BD234EC02BE44175	17DF21BD3C1B2CB1E8F08188B0E0DD900E6D3E073D2A676F0795CFD0B4A2B439
Chrome Cache Entry: 119	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	E51EFCD4422CECED20BCB4846DB26159	63E4844CE9FA231D0EA374FD60075676AFC67E17	B75BB965D94C4AAB505DD3D4B09D9901A0EB7D6C0C58D7DE9FD84656E62E5462
Chrome Cache Entry: 120	Unicode text, UTF-8 (with BOM) text, with very long lines (39257), with CRLF line terminators	BC9DC7B7AB2308038D6EDB3834033236	5EEA55AF3865D6E43EE9C4BDEF569C2F9F4CD9E1	B3AEF9D00FB23175FB31143FCCE1C9E11EA73B5BC01A9E6B59F213AF15EAC896
Chrome Cache Entry: 121	Web Open Font Format, TrueType, length 23992, version 1.0	FA5E8594023A4291695A33C15534DB73	62AA6B80F0D7AAF82F2763C4D868A4D09DEAC41A	1828DC33F7478F5B56B2449944B86AD6C410B7D9CC4322F87D345BAEA8E79483
Chrome Cache Entry: 122	gzip compressed data, last modified: Tue Jun 6 08:43:36 2023, original size modulo 2^32 68997	47B3288C4BFABDA894CEBD94FC4CDC48	D2F5AE2028D3287CB5B5ACF90C36BCFF1687187B	13D57CDEBF17ECF2DFBCDD495454BC74B0A8C4B6C5571CFBB008917EDE113895
Chrome Cache Entry: 123	Unicode text, UTF-8 text, with very long lines (36452), with no line terminators	82D3DB28A8DDF75B84731D4CAB717AEA	40AA8CE9F815B063456E6029AE80B89B2545437F	348743FA88AD02188F9A7D1D1E82C994E4BC0BAB7219659BA845807CED5A0839
Chrome Cache Entry: 124	ASCII text, with very long lines (26366)	715826D7CEA0F100C00238E5E5DC92B4	EA2A076F73ED3826287A726F35AE5E54136F2CEE	4245ECCA2A4B50D7FD9ADC9A965ED1F9B4EC24E9935E34C80EFAFC0F856D54C6
Chrome Cache Entry: 86	SVG Scalable Vector Graphics image	F9DBD83BFDD4B0FC065D4D1373E5539F	BE9A98336C735E5F39EDAF3EA8858E44F42F27DC	B93D3C7DAECBA7704D5D68D405FD4E38ACCF8563F4296683F90F70AFE3C69CB3
Chrome Cache Entry: 87	ASCII text, with very long lines (65397)	486B13730AAFE2A39CDAF1666679FA5B	AA0F52F048688ADA20D921FEF78CF15684A25F04	37C65071F378CC9582AABDDA3B52979EF901F2925E3F3C3DC597F41EAC0F1B6D
Chrome Cache Entry: 88	Web Open Font Format, TrueType, length 24460, version 1.0	85650A4B13D1AF3126DBAE7424EC2268	A23DE3DCE1E65EE7C6A97DDB0FC53BBB50D3925B	3D7FA1B7224308D80BAAFE214905DEEF0D6A53788423FDBF456E5BE74D8C9638
Chrome Cache Entry: 89	ASCII text, with very long lines (11461)	D6F9281AA5E59D16BA1716E077F7D316	9D871CADD0377C589A0A64EDD39AF8962B335B47	BA9317DADD6D80AEA9AE96C43453A0A71FB25379197AA78DC087A885AEE2D4D9
Chrome Cache Entry: 90	gzip compressed data, last modified: Tue Jun 6 08:45:28 2023, original size modulo 2^32 23754	6D063F846C636FE8515219B880FAC233	B5D73C1E8674D79A3AFF3C1FC66742E126A936C4	505AED4906B355DC7C3C74C524E18566935AF5149D93168BC121E970BAD8FEA7
Chrome Cache Entry: 91	SVG Scalable Vector Graphics image	01DA7322DB1FD366FD9C0C6C1510ADCA	FACCC55F6D90B14060439C77A5827152AC762B24	FD5699F005D113B73BA57732C787079BE01F47E50AF447F0F61AB65C476B14C6
Chrome Cache Entry: 92	ASCII text, with no line terminators	A2FDB762E8FFEB71AF5274BEE280CDE2	46FEAD84E542569AAF68E686EA59E8C061CB1F60	8F23270AFA95EDCCD0FE03D9F05D8736D9E1824EB74706ED797ED9C130D07D64
Chrome Cache Entry: 93	ASCII text, with very long lines (48664)	14D449EB8876FA55E1EF3C2CC52B0C17	A9545831803B1359CFEED47E3B4D6BAE68E40E99	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
Chrome Cache Entry: 94	gzip compressed data, last modified: Tue Jun 6 08:45:26 2023, original size modulo 2^32 2474	B6AD6B2FE69796C5C5E7DA54C76AE739	F3D9C7E5E5D701CA629505A35C4143F79A32ACB0	248951B812F07BEC92B989597D8292899BF353CB296EEAC4717E94DDC35FE00A
Chrome Cache Entry: 97	gzip compressed data, last modified: Tue Jun 6 08:43:43 2023, original size modulo 2^32 12256	96231F30C3AA63E9007FF05ADF8239CF	3B3D08AFE674F7A5CE130960D94C205EA757EC32	B807799A2F267CC1BFA4FEE26FF614E7C163CD09C0BA03D0D28D0E47F1CD45CC
Chrome Cache Entry: 99	ASCII text, with very long lines (19015)	70D3FDA195602FE8B75E0097EED74DDE	C3B977AA4B8DFB69D651E07015031D385DED964B	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66

Windows Analysis Report
https://respond.bbb.org/respond

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://respond.bbb.org/respond

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://respond.bbb.org/respond