Windows Analysis Report
http://www.higgsproductionservices.com

Overview

General Information

Sample URL:	http://www.higgsproductionservices.com
Analysis ID:	1467201

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:52659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.16:52660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.16:52661 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:52662 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:52640 -> 1.1.1.1:53

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: www.higgsproductionservices.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.higgsproductionservices.com
Source: global traffic	DNS traffic detected: DNS query: cdn.gtranslate.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52646
Source: unknown	Network traffic detected: HTTP traffic on port 52650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52647
Source: unknown	Network traffic detected: HTTP traffic on port 52648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52641
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52643
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52659
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52651
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52652
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52650
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52653
Source: unknown	Network traffic detected: HTTP traffic on port 52664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 52652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52662
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52660
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52664
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:52659 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.16:52660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.16:52661 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:52662 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@20/27@10/115

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.higgsproductionservices.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1948,i,15190370097038132531,15861380563715753945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1948,i,15190370097038132531,15861380563715753945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.181.227	unknown	United States	15169	GOOGLEUS	false
34.104.35.123	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.26.13.42	cdn.gtranslate.net	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
64.233.184.84	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	unknown	United States	15169	GOOGLEUS	false
3.225.20.255	higgsproductionservices.com	United States	14618	AMAZON-AESUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

Contacted Domains

Name	IP	Active
higgsproductionservices.com	3.225.20.255	true
www.google.com	172.217.18.4	true
cdn.gtranslate.net	104.26.13.42	true
www.higgsproductionservices.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.higgsproductionservices.com/	false	Avira URL Cloud: safe	unknown

ID:	1467201
Product:	CloudBasic
Start time:	20:59:17
Start date:	03.07.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 17:59:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	D07815E01612E6BBC5BB33E9B811A5E4	718DDCBBFF47AADC75874F9680E49F438A65B83D	2D88161E040BFF53958D536C6F2D1ECB649FEB8593F34600A97C47216DAD821A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 17:59:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	1673208E290DA3515A7E73B9A8AAC9A9	FFCE4580C7BDEF84C3E666A826690BB06AA453CF	115D007EF6FE5A7B7769F70056C14E73F947A60FFEFF3F7100FDD1B2A2ED9B81
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	8A90B282A2675D7064C8512DC3D3B998	BFE97712CC87A5B456FC09A98BE70D4E23AC4DF5	6115311233847D1F260BFF69E8D1210C3B2292DF0A5335E3764ED14B76B88995
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 17:59:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AB4A1EE001E360454D7ED9605E769FDE	6C8B4D868FAF9ACAA75579B75F584C1544D5EE34	7629929B187F7C6A455E49BE60651527579EF675E96BB4C937A1DDEFFB73066E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 17:59:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0A29E6E09EF2C20B6496651A2A7ABE56	471B58F1E3858D037E98ECEB633CF05F6D4A34C7	F92D1D6D6ECBF56E2B33C96B94F0E84943C78D9D217A1DE68DBD9C82FCD77BA1
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 17:59:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CADCF9C1B813AAA936F2CD705C752577	BBF5BC9C1B3A4E766FC3222A730C3B5A029086AF	582571487EE77322C62ED7209850935DC10DD7DB505A52A58BE1817EF6E4F16A
Chrome Cache Entry: 131	ASCII text, with very long lines (3973), with no line terminators	E3218DE72735239F5FFCC82ED15BBBE4	244EC6786F61DCBF6505F2AC93005C9067B2D776	1EF79B2072A9D3A6C2199DA997B413AEC7253BA10BBA96A0E2ABA96375AED28E
Chrome Cache Entry: 133	RIFF (little-endian) data, Web/P image	1A65ACA813254754A5CE6EC627A6DD93	D0166D206507D0FFED1D56BFE419474F5D97B220	8392FC617382613BEB0B2B0BAF7BFEDD404BF0540CF097DCE1E41BBF8A1944A0
Chrome Cache Entry: 136	ASCII text, with very long lines (7659)	83F2C90A1BC4C508EF4EEFD77F349A3A	31D0DCA380CBE56AD668C122489879BA8225D9A0	507276C7E9FAC25912525081ED364FA1DDAFA8FD3DF8BE517AC8EA749DCBF06A
Chrome Cache Entry: 137	ASCII text, with very long lines (3934)	7A516911B85FDAB5112F9684D8B6046D	7F7AA28AC8E8D42145850E8B45B3BC82FF9A6411	251B55C8DBD66154C2163EE5E53808C394678405276D6AD5758E848CCD1D37BE
Chrome Cache Entry: 140	RIFF (little-endian) data, Web/P image, VP8 encoding, 150x100, Suserng: [none]x[none], YUV color, decoders should clamp	0695311B1FDA53F52FDCF584C5DC7486	F794FD13D1F1B56F024E7E7146C73EC6FA1D5836	BE8E7D6A24D70C77B1C133EABF3905E96726237F26340EB0F41CFB4A02AC14F3
Chrome Cache Entry: 141	RIFF (little-endian) data, Web/P image, VP8 encoding, 150x100, Suserng: [none]x[none], YUV color, decoders should clamp	EF0C809CB3B825AB1C492FAB29CEDE48	93C945E39A293018A67D072C34EF6394F986C9AC	EBB5CE2AF2BC8D7D26699020E5E223B97305FB02EF4EBF0B6BA8A0E5319E51DE
Chrome Cache Entry: 142	RIFF (little-endian) data, Web/P image, VP8 encoding, 150x100, Suserng: [none]x[none], YUV color, decoders should clamp	4CB59F3F1E309D49A1D9F19957FE7E55	A963FDAA1A39E53E2575481AA628F6EC404F9549	03EE5C7C5F00FD7B7A309584CE942947F811D2B06C3F9BB98D74234CC09ED56A
Chrome Cache Entry: 146	ASCII text, with very long lines (65536), with no line terminators	1A20887E5A03A3B4F2BC022B4B2093AE	DAA0FFEA010238B6B5D21623031FA7698B467985	1A93CD401023529D2E62A3590ABD3634BCE5B0428023B66E34373F4BB2EE3CE3
Chrome Cache Entry: 147	PNG image data, 170 x 30, 8-bit/color RGBA, non-interlaced	378ACE51BCDDB2367AB66F5E3C4C9DAC	D83DCA4DD6168D473EEDD9796C1B033418C8D802	4A3FB45101B18554DD2F0E6D2D5BFCAB9A738E198C7CC74EF32CCD3CCF444CE6
Chrome Cache Entry: 148	RIFF (little-endian) data, Web/P image, VP8 encoding, 150x100, Suserng: [none]x[none], YUV color, decoders should clamp	8476AD771658986B386D1366EEEA8D66	C62E6D4CDCDB57306DD4342FE7785CF60AD1EF76	C4CE3F61C983947FD7099444BBE6A42E14D6BA897E23A3239EC4482CFEC12479
Chrome Cache Entry: 151	Unicode text, UTF-8 text, with very long lines (60771)	63216CE0714BC57A5C9EBFB95DA24117	8C9FD7CF0E6ED743FFC9DE06972A3A3C1A77B102	FF3D1BA093789EC2BCE14014D800147849690AFFE382CCD75B37186BB99CB34F
Chrome Cache Entry: 152	RIFF (little-endian) data, Web/P image	3D162D72178818946ABF7E5A3F4FD150	919392491FBCFF74EF8D03B85F41F28058898FF2	8E104A3DE55D86A591C40E8A227F8C2B960C974D0C55EB37BB8880DAE5884F93
Chrome Cache Entry: 153	ASCII text, with very long lines (6062)	BB40C34EBD8E61AABC75B77D89D8E3BA	8DD3E0D256B2581CF1C29109B8659AEF876667C3	088D5EDAB48BF8865B33D6AFA8000EDB94A4FBCD67E7737E0A151A6989C8CAD8
Chrome Cache Entry: 154	ASCII text, with very long lines (1537)	4D3138C6FDEE5F6F304F6A2A535E8A25	AF6574AF4A6C31B1A887143CA540D96A5AA5F436	407C2CFED9D00C70A2107D1680E5A5D7FBECCAFDE7E290EAF99C3BE29BEA09C6
Chrome Cache Entry: 155	RIFF (little-endian) data, Web/P image	F647427F06BB3069A475C5B5D1AD0630	2D93116C880FE69D37D3DCD73CB0527B0B093E23	9DBE762EE79CBA2069E4F0E44E90B70EF70E9976BC0C0F8F2FE7E976143AFE84
Chrome Cache Entry: 156	Unicode text, UTF-8 text, with very long lines (63106), with no line terminators	A20B32D2D0D0F2FC10F5834AE6E04D3D	67F4FB9A894CB95D7BA2FD9F90291C2222B3D7B8	01B57DF2819777B302FB1FCABD9E4C8CD6D72443F950D47314DF62CB1C0D59F7
Chrome Cache Entry: 157	ASCII text, with very long lines (65536), with no line terminators	9A534D34E9BFC649D8B97EDF865F1653	D01F38D8C7C503FB64D471C8E854B24C5724C034	10B67B120B82A80ED88D69CEBC00955A094AEDE9922057BC5FB094D86B3FA09A
Chrome Cache Entry: 158	RIFF (little-endian) data, Web/P image, VP8 encoding, 1366x911, Suserng: [none]x[none], YUV color, decoders should clamp	F6807E14C122277F207F34A263421A89	9FBBFB0F4FFC10C0A4F218A9F31BB0FD347DC741	74930F36D010B892D6BC0191D53C1A4C0FA0BCE7FEB02D3755AB611B002CF3C6
Chrome Cache Entry: 159	RIFF (little-endian) data, Web/P image	06B148A36DFF22B8A37D986D5DDE4CF2	AFFA67F893CFDDB7553811012349CC4142F449A8	6955227AD59BFA58CC575A34CAE6048292D565D144EF9EC5404319F156D2AE11
Chrome Cache Entry: 160	RIFF (little-endian) data, Web/P image	91C0F87685ABABAD9AE66A85DE0BBCBA	6A89C7C632764CCE526BDE522A349A06BB366B04	6D46C4C9977CB6F33E5DAB2CD214E83922EF16F3CC562634F29C79BAA6F2ABD4
Chrome Cache Entry: 161	RIFF (little-endian) data, Web/P image	72C6BF089709FAE96EFF38F5D0A5E8C0	192ADC0E796BEDC89D6FA2B3A57FD11EAFD7A9EF	67EB6C7B04A74DF87DE9DA41BC7B421ACDB272D8AFB80B0FFB4D4466D4B2AF35

Windows Analysis Report
http://www.higgsproductionservices.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://www.higgsproductionservices.com

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://www.higgsproductionservices.com