Windows Analysis Report
https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBb
Analysis ID:	1523778
Infos:

Errors URL not reachable

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49741 version: TLS 1.0

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49741 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: GET /scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727827925882&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: classification engine

Classification label: unknown1.win@16/39@8/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2020,i,6035491936615944162,2809238674400728017,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2020,i,6035491936615944162,2809238674400728017,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.66.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

Contacted Domains

Name	IP	Active
bg.microsoft.map.fastly.net	199.232.214.172	true
www-env.dropbox-dns.com	162.125.66.18	true
www.google.com	216.58.206.68	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
www.dropbox.com	unknown	unknown
cfl.dropboxstatic.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/scl/fi/ocmxhujczma623yxj6y29/Attention-_-Salary-Amendment-Updated-Employee-Handbook-Benefit-Enrollment-2024_2025.paper?oref=e&r=ACRm_hPlErV40Cd1zIP89wkIlFQF_89rGVAuXk_8bNLVEQBbMWfgZVCOjNPS76aaZwAZfDc4Xo2P176W3am-1A-GKNdfOUMtQ0zcIcJLSeq0d7kmDrWgClTMKZWQ0Y2kzdL-oHmexUWOnpxcurKZ8r9xoLPtk7VkdABI-FkyJQclVoAMLGCloMq4KRb2O2vhFwo&sm=1&dl=0	false		unknown

ID:	1523778
Product:	CloudBasic
Start time:	02:11:30
Start date:	02.10.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 23:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	1A8F881C19A3E37EDDFE920CDDEFB81C	A5CFD93778F9096179FA44C16B6493C18D8AD32F	87E384F88CA75B25479028B7CB107C74A598F8EEB0494E13FD5DEE8789438E28
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 23:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	33A991F4650DCE0158D783FC4531679E	71964B8CE3E5948449C6C86E40D626D026DCB312	6184A9DE96D13AEA48DF289A2A6557FC5A139EAFB3F83A24C72BE9853659B2FC
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	09C05A58EDBB9C2B930A21921DC7AF45	381DE9E901F8515DFE4E5851DA45345EDD5EBC40	8E04570A7B9042262A5CD9CFB26E5A0DE842B0A400A6AD9846E0065E9F6B4FE9
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 23:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	5E6D65F29B492AA0995DF0378370F38E	0167325DFBBC14C35C20F18CEEADCCB33E98E1D9	26622CA052886DFEDF9F13652DA3A423962BD077CA5057B30849B71B77E37223
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 23:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0A8B30E1A7A21E82F325E5F74BB126D6	BCC338EC32D1BE1D96E332F54F3B13F4D053754C	6CD496DB264C5F7B45DA8CC1A5A0CC11661F9DEABB8E77B2AC036339C92A2144
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 23:12:23 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	3D88E2B82A33C300BBCA6AF2D25B0740	2D06270625B1B2B7D1E6B867E61657AB4B8A2029	B7FE274E9377ABA47B25DF8793DDE1BBABE1E5112B546A17F6379643E7531765
Chrome Cache Entry: 53	ASCII text, with very long lines (8531)	A7D5C32C97182AC1736E6B284B8644EC	95CF00944235FC148C6EE596D9DFF5B62C102C7E	BDFA8BCD8F5D4EE3252BC4EB02BB0FEC99BC5587F860562F70CDAA31B8A17C97
Chrome Cache Entry: 54	ASCII text, with very long lines (27280)	AA6CEFBFD8B109D4391B755F877C1F57	806D78A42EAF33677B3F13C0B75D485D2DBB05C6	090175EBFB9296786227534ED6431DE6D7988A3A4ED1CAA2C585BF084B6D11B3
Chrome Cache Entry: 55	ASCII text, with very long lines (1727)	1FAC30C2F785E8257D8E4DB8AE4A2902	955BA8113C4BBE01F42E548E807EA6C33207084C	94B06B7DEAE3398A35DCF272C96E9117693CF18FE4430953FA2721FE8613EEE7
Chrome Cache Entry: 56	ASCII text, with very long lines (3030)	7CD34B579C76D077847E1EB2C086CCAD	CD36C07AC7F488668A7EE34D8BEBEC596C192AF0	A63B0861254D3FFB38AA35BCE52017B3095E5FA5D8A03E085C47A895AB51BAB7
Chrome Cache Entry: 57	ASCII text, with very long lines (654)	80CCDE85B980E138C0AAF5AB227EF54B	534A8883BD9582295FC2B867215944D66F1837E7	407881C9106BEF52F6F4FE354488E31558D4D88F2A3BF2F2E8D919C35F62C9EB
Chrome Cache Entry: 58	ASCII text, with very long lines (55096)	A9C53D99825469261E2396DF2260ECAD	509BA7C7C5931AFE36B940D167B33CC4446243D4	5BCCDCCE2471D5262931B52F89B9D952106C49C849BFDB4FCA5C68F6C29D6725
Chrome Cache Entry: 59	ASCII text, with very long lines (27280)	AA6CEFBFD8B109D4391B755F877C1F57	806D78A42EAF33677B3F13C0B75D485D2DBB05C6	090175EBFB9296786227534ED6431DE6D7988A3A4ED1CAA2C585BF084B6D11B3
Chrome Cache Entry: 60	ASCII text, with very long lines (830)	D2C1CAEAF7D185B462A8D64FD0475932	C9E3EA63E9D3AC4FACC19BBB69A05D1A3076C51F	005ED820758D4C12BEFDF1A3B2E9C30A0FA544038AF790FCC602AF1E3B63A4D1
Chrome Cache Entry: 61	ASCII text, with very long lines (304)	4E2CC091FAC48A36F2EB401FA6ECE06B	AC35B42D5B1FF5B592A44574459A1C6CE6DFBE44	EA511EB41E9199AEC50864F7CD7862DEF7BE3AE5C232DBC066AC353EA56FEC8D
Chrome Cache Entry: 62	ASCII text, with very long lines (3509)	320915DCA4FCC14B76A6609AF3445D98	F51A66AB752668770DE4D50BB87C323EDC1AF699	A2EFE4341FFFAC8BD9F6450113FBAC5B5D96738DCD0AF410E16C8C7055E0B652
Chrome Cache Entry: 63	ASCII text, with very long lines (3482)	307B92102C1C5D4BAB05FFDB09A621F7	FA9D8945782691344FFFA9328B56D541504E1262	6F4FC0817FB1A2199B277A69ED2022C6B0524DE34A2CBA7533536D40B6ABA410
Chrome Cache Entry: 64	ASCII text, with very long lines (684)	E2826FD92D6DCAF79021355095EC49D9	1572DA7F97839408214F18AF79C69611040E2084	2C456C7236EE6F3541118C38AE364CF303F38926BA99C7FD65794802B172ACBD
Chrome Cache Entry: 65	Unicode text, UTF-8 text, with very long lines (40406)	56F24BF65A9DBF2F742B23862202581E	4A3F4D54CF39D4AC5FE022EBBDF205B462A2D30C	CFAC3A2722FCB92E5844C231276C621A1F67285EB7172AB9206C56BA34BA91B8
Chrome Cache Entry: 66	ASCII text, with very long lines (400)	C2FB1E82F7FDBE869652AC175C9D29B1	D85A910ED2E0CF38EDE6DA3285B3440D4031F66A	5EE372C003E43363E596A80D8254C544A5D52A649B656F91A9E8F25B148BC306
Chrome Cache Entry: 67	ASCII text	9067859A55F8C3BA9411E359AEDAEE5A	D0B845A155676462C2D3FF60616E5057B3C6CE0C	998169C92E5A694A77E31ED1866BA8EFF894C2A604ED244C03973876AC1796B6
Chrome Cache Entry: 68	ASCII text, with very long lines (6586)	41DBD41EE50CD1A9BDE0AA789F061DBF	2E641003FD846ED11812B1A480139CF345C9C5E1	1B7CB42B960F9512F0B4BB63A3AFA4F121CE77FFBE83D8935605474F21DD6ABB
Chrome Cache Entry: 69	ASCII text, with very long lines (52632)	26E143CBBB84833EF4F19A1AE556A1DA	DA99FFE748A7A99C53A075DDD1C3BE8E19E9A466	452CBF28FB0CEEFC33F6A97848BB328B8647A5DB7BF7B2063593A3666E3726C9

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs