Windows Analysis Report
https://forms.office.com/e/DXEauFZHZH

Overview

General Information

Sample URL:	https://forms.office.com/e/DXEauFZHZH
Analysis ID:	1541913

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49779 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	DNS traffic detected: DNS query: forms.office.com
Source: global traffic	DNS traffic detected: DNS query: cdn.forms.office.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lists.office.com
Source: global traffic	DNS traffic detected: DNS query: c.office.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.16:49779 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/31@18/79

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1972,i,16208679402743826994,936784943334901894,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.office.com/e/DXEauFZHZH"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1972,i,16208679402743826994,936784943334901894,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.69.116.104	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
2.21.22.168	unknown	European Union	20940	AKAMAI-ASN1EU	false
52.111.243.107	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.21.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.125.133.84	unknown	United States	15169	GOOGLEUS	false
13.107.6.194	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.138	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.131	unknown	United States	15169	GOOGLEUS	false
13.74.129.1	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
13.69.239.72	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
www.google.com	142.250.184.228	true
forms.office.com	unknown	unknown
c.office.com	unknown	unknown
cdn.forms.office.net	unknown	unknown
lists.office.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://forms.office.com/pages/responsepage.aspx?id=LpxU6C4NYEWVkTGGdV_Fh7Vl0TyGg49KpN60kKRUvmJUNThGNkNLMklDNDhIVFMxRjMwT0E5SFNTViQlQCN0PWcu&route=shorturl	false		unknown

ID:	1541913
Product:	CloudBasic
Start time:	10:10:34
Start date:	25.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 07:11:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	F6B023B2BF184AF4FC17243C774D4167	A679397786CC7BDA68C7AB5F01A121FAFC33F9B6	671F573A5A7FDD638FEC953D7F5921DCD14A74922460ECA0BC734DFFB0EA97E8
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 07:11:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	38B7C9D00B17D6AD9B99044A96238010	3427A17AB78928F93432F821B572C0CDA2E61DB1	B0EF53F7C92319D88C2F2232BDF8C37E2AD6F2BF2411D24692FA6701E09AA78D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EAF48C1766BF82CB9222A07C4F0BB997	1B9B0EDD53B399D9D6673E52CF40EF252F710B4D	87DC211805EF7D9C76A62F77FA9FC1E3057626B0292E61A67715CD9E8253D892
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 07:11:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	5E3A76F4A2A57FD80BAA1AE3998A4327	E30EC14F7772EBEEB36E90C887C0A3A606EFB42A	F9E6CA5118EF33F409334D0D8E019659A4B23BF5600FFF2878AF7069599FF374
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 07:11:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EB42A36E5AFBA1E1BAB1BAD08AD22027	2040DF69E0613CFF0F3C84EF2A6EB3F1814D9EC0	75850625FC76EF9B3A4E1C8108FF0088435FE56F312C6A0A17A09D60D2382656
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 25 07:11:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	A9105F0C73564F4F909688A0DE975316	695DBD831AA089E7135563C853822C504E7412FE	5C4FCD581CF52A26A8330E7ECB22D792B68BE01CF170E2F0C314965B3AECFD6F
Chrome Cache Entry: 106	Unicode text, UTF-8 text, with very long lines (60977)	C22370F1D6095C0349E47D38C76A7E22	FB2EBFA59ED1403E3112DDA37250AA5C20AC14BF	F2989F5E4C60FC8C4F192321376EE85D09F5B35685816031C61420D1A6D50DDA
Chrome Cache Entry: 107	Unicode text, UTF-8 text, with very long lines (56644)	A390E10AD764FF24246B7B1325BBE8E6	5C6B437BAC767BF792807A2D347DE03D23D5CFE9	F9EC4B44827E1211E5DA1DDCE231052F2488904C48DE5B6A05E5D8CA96764509
Chrome Cache Entry: 108	ASCII text, with no line terminators	FCF3FEB4B2AE9F612ABF9D6BEFF77E1C	9CC10A8DE1C67807DC11DB357A009336B8B69417	AAA53B431E925D6783A28B3EC05897DEB1D72B8383CAC308FAC7FB3629550CE8
Chrome Cache Entry: 109	ASCII text, with very long lines (22709)	0055D5757DB41BAD929E5C8B9B726180	FBA7C3D94C0FE43AF69BDCFC5186539E1DDE2EFF	37D099733E4901725976E46366372584C0BB88EA5B32D288BAB5F996736725C4
Chrome Cache Entry: 111	ASCII text, with very long lines (918)	19F88A9690395484D35F200B1BD999A9	43033D885678C2E3BDCB23070E018E8BDFB55A7F	600C36C9E419E1410A833B42D3257CFC535395253A8DD9F63D6A6AB1ADEB366C
Chrome Cache Entry: 112	ASCII text, with very long lines (38722)	B8B7DA7613290C36E59A1519C79667F1	E76EE66610B05488FE9CE04CB2CD18C4E7B84556	CF56316FAE47E55B86235AE87FE6C58D3955292FF0830FAF5C57E58714F82916
Chrome Cache Entry: 113	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 114	ASCII text, with very long lines (65536), with no line terminators	0403F233BF93504715F3AABE0ADA2E6D	197ED5FD6CAF05064320D723AB96E833B66FCD91	28CEFA7AAB4CF389A65BED523E7FC95F191892589BBA1A8AEAF2D64382742A99
Chrome Cache Entry: 116	ASCII text, with very long lines (32289)	63F1E8204E8D1285BD9F9381D726CB6E	69CE73B8CD37D50D473063E390AF7AE5835F00B3	44D94C65118236B49CEADA980FC1E1BE9CB3B90EBC343DB335EB39D80DBC7070
Chrome Cache Entry: 119	Unicode text, UTF-8 text, with very long lines (35053), with no line terminators	2260CFACC25DE59539D0B1D7A50F9270	84FECAFAFF77917530F170A1D3EBF70A51A9B7D1	9F00DFD9D0844DEA7FED92119F0E4149C4D6334169704CE875B14C1AC84E6629
Chrome Cache Entry: 120	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	9425D8E9313A692BB3F022E8055FAB82	EDDCF3EA767D4C3042D01AC88594D7E795D8615C	F2A1ABCF12EBD0F329E5B66B811B0BD76C8E954CB283CE3B61E72FBF459EF6F1
Chrome Cache Entry: 122	ASCII text, with very long lines (34044)	2F518F9978C5E6287299A5EB1CC2FD62	7F0EF0B66D62F779A5F22AE14539F39451E47E2E	931239A6873EDE7C93FE6C3CB436E0B0598AE87967EFB850F50E8165B13E00CA
Chrome Cache Entry: 123	HTML document, ASCII text, with very long lines (5844), with CRLF line terminators	56F9CD8A07135E776326431C8560F8F2	FCFF27C475A9FB014661B045B59C8BB4799A0392	0E1D105D6EE902B7279AEFD9E8AF21AB3E5D0CF058332A2A0E53A351524C75E6
Chrome Cache Entry: 125	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 4000x2249, components 3	7C0CD0C7F3BA7B4C66254738C36B7BBF	21AB8368CDFF683ABD54722E7F89D454D6C9E52A	0DB7FF2869748C19D0B51FDC9AFE1E2D657BC213299503E51103E99FA3DD5EC6
Chrome Cache Entry: 127	PNG image data, 192 x 192, 8-bit colormap, non-interlaced	4150A5D4F2B0284A9E62D247929DD2AA	97CA2D9ECE8F0855B2A93E6BFDFC4883685C51CB	F058653DCBA7E8B00D4BDB9409E06817F098AB18125CE5A5821520F04030D176
Chrome Cache Entry: 130	Web Open Font Format, TrueType, length 1964, version 1.3277	FC6A627A2D1D410B051C01928180D30F	C7ED08502C1AD2DA413B56BFDFF63873ADF7F7A3	7F77C691D669FC94853C14F76DE8C2665411C899C168E4655A4215D296DE8C3B
Chrome Cache Entry: 131	ASCII text, with very long lines (15299)	96BE9765C5BB18D235A596311D3AB49C	120C8C52C3DEE7EE612B868D0E4EDCEC4FC3B1D0	52C294C0743F5261072EB6D021B1B082BA7C32B670C5F6DE9A024AB081BA26B1
Chrome Cache Entry: 135	ASCII text, with very long lines (65536), with no line terminators	BCA1B5F8EF4BC5A1A5B636DC93D6AC9C	0D9F418CDC8846A380922AFD1D1F34AA2073766B	C81802671B32B4603E56C7CD9DE8F30853F058548274164009886BD91EBA7DFE
Chrome Cache Entry: 137	ASCII text, with very long lines (43627)	2A327A21024EF1A4D476123537F319D9	93E7E1C9E913AC41A0BEE9FA1A0592DED87B8B7B	D18E0BDCC5A7806BBA87DEF2C456D7D7625CD5849FD5D4CD58D1D5A0D2C366EB
Chrome Cache Entry: 140	PNG image data, 490 x 180, 8-bit/color RGBA, non-interlaced	311274C8C9C66E894F5AFA51FACD72CD	386D1FA0B2924DF2C21545CF2FF1DDE2CD985D33	BC3C029408DAB6B5CB676B990B2E21BDD474E4B2E45DAF87E70210539390BF49
Chrome Cache Entry: 141	JSON data	69B95B3AFE6F44CA43B688ED03EFDFF7	E15361771FB4D2BE2CA96436D891D96A03BB4BDF	E041BC08192240C9560B58CA4178550E0D22FC5F882B183276B1761B747E4DF0
Chrome Cache Entry: 142	ASCII text, with no line terminators	0E9FBFDA77F4452938698CF7E752CFD4	4E9AFF61BEF645F6F662CDB89ABBEA8E0F427D20	07F2E3BD43F9B4B93604997F27B4DB436A41556E642C4EC71E45238F62475268
Chrome Cache Entry: 145	Unicode text, UTF-8 text, with very long lines (65493), with no line terminators	E337ACC9EC83A4B62A94AFC9CE2E76E0	3FD4FA35FE2230F77A79AC5044747CC3D05CC559	83C522ED4CD6B8241DD3E05E066F58FAA5256E1862D0A33BDE42322B39B848F4
Chrome Cache Entry: 146	JSON data	4D945878F36DCBBF35C41B5BB6E5513E	786EDE7740452B1C38B1FFA47C28F4E70140EC5F	19DADB739E9886DBDDC79E9E916B753AC53A2C8C1A9560EF14AF28B400C234E0
Chrome Cache Entry: 147	Java source, ASCII text, with very long lines (17610)	7A1CBAE1C97AD1A1E67F351FAF0F81A4	6F024274F89AFC9319DFE7AD9D0F23A48E279DB1	32859A35E0C0F3BC47CCAF2A01830BF7A8C41702C026D0B74FF7E50BC7E6CD51

Windows Analysis Report
https://forms.office.com/e/DXEauFZHZH

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://forms.office.com/e/DXEauFZHZH

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://forms.office.com/e/DXEauFZHZH