Windows Analysis Report
Jones junction_SKM_U78WWW333.pdf.pdf

Overview

General Information

Sample name:	Jones junction_SKM_U78WWW333.pdf.pdf
Analysis ID:	1501912
MD5:	4097ac8785b2bf28a32c585eade9c5ae
SHA1:	8d743e47545de5d632d6a0d66d63dca20adcf2ec
SHA256:	df6943d73d42bce8dfaa0e3852cff5080ab28329ba71435e9a44023e2633ab1b

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	TCP traffic detected without corresponding DNS query: 23.200.196.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: classification engine

Classification label: clean0.winPDF@58/64@6/106

Source: Jones junction_SKM_U78WWW333.pdf.pdf

Initial sample: \040\150\164\164\160\163\072\057\057\164\162\153\056\153\154\143\154\151\143\153\063\056\143\157\155\057\154\163\057\143\154\151\143\153\077\165\160\156\075\045\067\065\060\060\061\045\062\145\143\060\071\121\060\111\141\141\065\112\102\113\141\115\167\114\103\071\143\115\152\106\115\171\110\131\156\055\062\102\066\105\132\170\142\124\130\055\062\106\141\170\130\120\141\107\162\147\065\144\142\145\106\110\064\146\104\063\105\165\121\106\102\111\111\130\114\122\105\107\132\055\062\106\143\117\113\103\063\064\155\156\170\132\120\170\111\121\170\067\130\147\150\106\111\161\107\141\130\131\066\141\154\156\141\143\154\157\145\070\170\122\157\055\063\104\147\103\154\105\137\120\163\113\171\161\063\123\104\165\115\106\144\062\102\166\167\156\155\067\055\062\102\143\155\120\146\123\060\141\132\162\142\111\107\146\063\063\061\147\130\116\110\125\123\145\055\062\102\150\121\147\161\125\160\106\151\130\063\167\067\150\065\152\125\156\122\144\066\156\055\062\106\105\070\110\105\122\116\126\156\172\066\102\117\166\113\163\055\062\106\066\165\154\162\102\101\120\150\161\161\064\171\067\102\170\107\055\062\102\144\066\153\107\067\164\114\125\170\143\117\165\110\151\106\127\160\124\110\145\104\107\132\125\156\166\104\132\166\120\066\106\115\065\062\126\062\153\110\121\066\127\112\101\132\163\066\113\121\114\170\146\161\132\110\130\146\123\060\067\115\124\132\144\160\107\071\166\152\055\062\106\171\150\162\105\120\163\154\062\117\161\132\147\065\154\172\105\163\162\166\125\122\116\163\113\126\166\104\152\066\101\155\106\066\123\143\061\132\064\154\132\101\127\067\103\107\144\164\103\162\111\107\172\144\156\157\144\172\130\110\112\147\062\153\164\155\067\160\164\101\125\123\166\061\062\065\166\141\107\113\130\160\122\130\150\142\172\155\101\165\065\154\105\055\062\102\166\147\123\143\130\160\157\126\156\124\163\167\154\142\157\164\062\130\161\107\055\062\106\112\111\062\061\116\165\105\103\110\114\112\131\117\164\124\061\063\155\165\154\114\147\063\114\171\103\064\063\151\157\123\160\111\167\163\164\161\172\101\124\125\104\116\157\163\154\066\160\142\063\113\116\116\146\063\111\055\062\106\060\067\144\104\117\062\116\153\132\143\162\132\164\055\062\102\062\107\065\165\162\141\170\145\121\055\063\104\043\057\077\057\143\063\160\154\142\107\170\101\141\155\071\165\132\130\116\161\144\127\065\152\144\107\154\166\142\151\065\152\142\062\060\075\040\000

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-08-30 12-24-48-530.log

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Jones junction_SKM_U78WWW333.pdf.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2144 --field-trial-handle=1564,i,14506439620689761188,4526234094623745758,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\System32\msiexec.exe C:\Windows\System32\MsiExec.exe -Embedding 3D3215BD06A869A57A8013997F658258
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2144 --field-trial-handle=1564,i,14506439620689761188,4526234094623745758,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Jones junction_SKM_U78WWW333.pdf.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2164 --field-trial-handle=1632,i,8005144182979918003,2810163456647013345,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1992,i,9549984474951649099,4000194092925133157,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2164 --field-trial-handle=1632,i,8005144182979918003,2810163456647013345,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1992,i,9549984474951649099,4000194092925133157,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Jones junction_SKM_U78WWW333.pdf.pdf	Initial sample: PDF keyword /JS count = 0
Source: Jones junction_SKM_U78WWW333.pdf.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Jones junction_SKM_U78WWW333.pdf.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.99	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
52.202.204.11	unknown	United States	14618	AMAZON-AESUS	false
172.217.16.138	unknown	United States	15169	GOOGLEUS	false
74.125.133.84	unknown	United States	15169	GOOGLEUS	false
184.28.88.176	unknown	United States	16625	AKAMAI-ASUS	false
95.101.54.195	unknown	European Union	34164	AKAMAI-LONGB	false
216.58.206.67	unknown	United States	15169	GOOGLEUS	false
142.250.185.138	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.174	plus.l.google.com	United States	15169	GOOGLEUS	false
23.200.196.138	unknown	United States	2860	NOS_COMUNICACOESPT	false
216.58.212.174	play.google.com	United States	15169	GOOGLEUS	false
199.232.210.172	unknown	United States	54113	FASTLYUS	false
172.64.41.3	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
plus.l.google.com	142.250.185.174	true
play.google.com	216.58.212.174	true
www.google.com	142.250.186.68	true
apis.google.com	unknown	unknown

ID:	1501912
Product:	CloudBasic
Start time:	18:24:17
Start date:	30.08.2024
Sample:	Jones junction_SKM_U78WWW333.pdf.pdf
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	4097ac8785b2bf28a32c585eade9c5ae
SHA1:	8d743e47545de5d632d6a0d66d63dca20adcf2ec
SHA256:	df6943d73d42bce8dfaa0e3852cff5080ab28329ba71435e9a44023e2633ab1b
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	99C2B717AF235F3BBD07D20B3516446F	CAF465572710E86D90F841B21060F13BA661F8EA	7FBCFF92B62C9EB7AC8E8FDFCE6A14E2A9111DAE19BC5E8FDDA6D073DFD50C7D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	99C2B717AF235F3BBD07D20B3516446F	CAF465572710E86D90F841B21060F13BA661F8EA	7FBCFF92B62C9EB7AC8E8FDFCE6A14E2A9111DAE19BC5E8FDDA6D073DFD50C7D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	59F150F50AA7E1BD3E6629B7BE26A108	1F330A2122947540528B3CF26AC89FB5179B8F88	BFC2DDD567CDE24B304C5382F540DA66BA8B69974076F3D72AB31D53A46F3F80
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	59F150F50AA7E1BD3E6629B7BE26A108	1F330A2122947540528B3CF26AC89FB5179B8F88	BFC2DDD567CDE24B304C5382F540DA66BA8B69974076F3D72AB31D53A46F3F80
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\206fcf85-af0a-4fbf-8899-9f98a0128568.tmp	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF6c81f4.TMP (copy)	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c61d57a3-a38f-4794-ad47-00abac576656.tmp	JSON data	00727DE3D5D1B8994A648A31044F952E	E2AF7AEDE1C950EF14C8E37ED1C0BAA5138C5765	B3325432809A7DF5406CFD57F031558222672A85E3B7E6F6D894892FCFE7C974
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	6A5E54480253AD91FFF004F1DD679A04	EFE282551310FF7609B1B9FBD34AA718BF07430B	B84B4CC715999407A4A1BAEBA2BBBD6C82D58A69ABB4F5CCA929E82DCE7E212B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	3A4A15CC34C0D8F80CBBDEF30D5A924C	3E4DB63C821ED9DBE2932987C8D21596772F1BD1	140A7534F8B4712FFD57DC34AB192AA16F03A3FB908B73CA60EC8D8505507816
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	3A4A15CC34C0D8F80CBBDEF30D5A924C	3E4DB63C821ED9DBE2932987C8D21596772F1BD1	140A7534F8B4712FFD57DC34AB192AA16F03A3FB908B73CA60EC8D8505507816
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links	data	DE2CA83549438D0D9A8DEA864EABF016	BF50E51A27B58805181FF466752C948E42F1B9D3	743B9469C69F7EF27850A31A9F616733A42758003D8C1C719EC4038FC90A175B
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2	A4D5FECEFE05F21D6F81ACF4D9A788CF	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	E40E3AB566FC01CABBC35BFFF648E56B	5A649D3A7755FBF70707B8832030D4FB14B93109	68A1B8C475E03C6CEE9F81C7675B98734A2ABA453B7B306D0FE9B6657DF4249B
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression	49AEBF8CBD62D92AC215B2923FB1B9F5	1723BE06719828DDA65AD804298D0431F6AFF976	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	D4AE187B4574036C2D76B6DF8A8C1A30	B06F409FA14BAB33CBAF4A37811B8740B624D9E5	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	177485C7CEEC17BC8FE15CE53D0ECDB0	07FD7E530DF9D3D4AC9662320D912DC6C66D4585	36BE8F3B21F994543265A42DE6471714725A0A0266CB2026522771065584320B
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	00AE0A48CE881264BE6510D58789E2EF	5808471BE7AFB72886D621F5182B5C51CB4E2903	1A3915452BED1DCC37AC42C74CDC9B4DF5EED3E4D7622CE7AE5FB91BC03795EA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6984	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	7B372554D3A6C8B32C761EA0B62AB1E5	AE5BB68BE73134D28E1141E31899AC94A1CF9EA3	4D3A13F7465BAF79509EA4E18EDB77C2AA16B79856C1C2E0187D34A63770164D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	25425715373621812E746086902EF150	4055600B4AF03D82B5CA15C412F5977ED0E23935	ACFE7877A65C35F9731513E01DAF19F66486BAC98A7333F80BC425A508577760
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	B1B5528BAB42AD2846FA9389F78A079E	815506DDE96239BF432C259A00E143CAFF9BD087	799D67B5AA6F75A92535CA0076E26BE14334F8C3D3BDB88E127F284F47F4ADB2
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	CCAF0F1D58BF07247025A83B5E90513F	9808FD256560E27809A878794C5A7EC4F0222705	3C31383FE76EF6F11EDA4ADC1B55B4CED06C158782D75926A7BBA4FB8B33C102
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	1D4133D7607F5E7544EC1778FFC5CCC2	0D92B11AB6A9E815245F6ADCF5AF3DAF73157521	8D0B2F3CD3C5DBBDD6FC197BCC630C5C7C997EAF9188301F10EA5F9890B1319E
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	ABE071269750A73C1156AB7EA14638B8	EED45B69DDBEA3615F23952047C2C880932D7582	CFAACF6370376239DB428251D0F8F988EB92F204F8E338D8F9F98EEBD7325072
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	F8098BCF388A4F95A8D3D70CFAD73740	FF4E482B089CD1C6ECC2629F11DF893D4133A650	56B5991A1DDEEAF1C7C20E2DA999A44A45C09B6D045C14EE013520A474C80D0D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	82F83C488C5A1B70E1EDBB9234516ED8	DB6FB15A66D6BD890903E7FC1F403721C5EF58BA	08CDB6C0A2F943A8E037E87E0975B518F677BCD6973AE6D884F5DDB614F3F4B5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	8EEB35CCC60F3115D4786021D58DF72B	E35031C45B8143D1A33C1858FB5B9F5345F4E8CF	A769D8EBAA5EA4C4A6B2E78F1F08DA033E9704812B1DB451C526A2FBEE828726
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	D977C11C1E517DB8B869091E9E0BB3A6	4E3FBB374AB2F41D96B2B58C3E0B330C6DA5DF5D	3659CF29B9D09476A8F0B92C09C11D9C462A16E6ACD7D4BBB10D9DDE56063012
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	C2BB6CD2F76EE20315F11EE6E845F07C	87638C118F4FF9471E27F026B98E3E51EE2D4B4C	80C0CCF78C8DE393B8CC597EC958116D0402B267C20BCC187E8A05C9AE32FC9B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	604C077EC3FB885EA3EB4569989B6BE9	BBD0871AE7225F9834491505B4E35286E72B4ABD	CE99677B563D4A58FEB2A9BF481344870C26EEB5A2DBFA0D08D732042027E0CF
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	3CF5319A9493AE9D786B759FD86D4B64	C6B76C579317E35616D94755767B0AC424B5503F	904D46F5BEFF938CDEBE0DA71CA5EFD869B3506DECB9BFE32886A0623E931E83
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	96B2C7690A0967AD111B9D1B19F07AE9	12855788A6CCD582798C4370D2B823A37642ACAA	613A6CAC6E977C686E303CC3AC05EB1438E73D4C2582EA646B13BE1A32778320
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	15297030ABD8B99E0C5966A0AA411C1A	6AF1FD4733F629BBBD8137B65F22F5174628651B	5ED2E7118A3C0170B04C8616699B35C4A33A1DE79F0CACD08F7B63F078DAD25B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	27C28521CFCF63A08F3FC66AFCE3EFBC	CDB7E819B59C44FD5A9D2D5E64A69321FDEEC504	319DE9874D261A25BC12437B045D8C9574C683BD90E0A548CFC06A4868B5983F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	404F4C773300C5165A95C9E49C9D6791	D202AAB50A233465272DAD7464DEDE3D3AF66D31	7B8B8529A7A84C5593F72A61CE41FDA86C6E10F420B8CB876D6F63ECF44011F2
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	A0F9DF9F59C7C80EC81253A333B75F61	D6C8DE7F0D46495DE70E619D122567D609637CC4	94BD20CA6594C26E5C23C19A9B0920E7F0265FB89CD5E3F37DE397742E986FBE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19	BC2CCBB046340FEE59A693E8D0812F03	A502EACC3C00BE1CA65EAD1CF211D4B65D45B97C	46AAFBFB4A0A7DC155C2E223EA4C68FBF8C77EC9F5DAA43E5C242E3EA93AD5AA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	96D38569B75DD7195B44E83D0BF19C2E	DD6900BFB813D4FEFB9D33459D552FB1B61E5DF7	7EAC3BD504CEE689A6092930BB31686FFBD5EC53A447C25D15FC8A1F4172F2B3
C:\Users\user\AppData\Local\Temp\MSIb7a38.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	52AB2E7DB31D54B740F34D1F05894393	4B60F6D0AC4D16B6E50498CFFD6F43DD3E3A518C	4F4073D614C3FBB479BF1FE6D62AC0D3E457FC7F6674D790742BD9DC634A14E2
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-08-30 12-24-48-530.log	ASCII text, with very long lines (393)	91F06491552FC977E9E8AF47786EE7C1	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-08-30 12-26-12-470.log	ASCII text, with very long lines (393)	8BEF950AF7B62E85F99E7E7BCB640CFD	BDABF832AB03BF0839ADF60750414548E34CF1D2	872C133F2B60E7092FC40999D3E646033BCE654DB850E333F0F92AC5B2F95EAF
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	B872D288DD626606C1894A8C8437E324	9E6CBA3D43E5E2659D333BC6194E2D872DAA5B0B	533F99CEDB1A978CFFF3B3AC43DB1CC6E0AED3E8F1B0CD1BB93DBE47FE892FFE
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	21A7D608D20C9B960CF29D68CB5737F1	56029058C1936D26C9AEC8AB66CA77B14A9633B0	138ADAC9CFE24E0C348B95A973DD0E7C04123ECF729AD70E8741F444E55605FD
C:\Users\user\AppData\Local\Temp\acrocef_low\461cd67a-bfb1-4028-955d-31545bbf222d.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	E1FE9FA2454D30CD849F2060D8FED227	5B5A33E386D7A2254DB5934F688C1F1A72A9D6C9	4B0AD0558FB8C3D63817011FCA33E51A9E9C46A91407B705C4E5150AE4E5A3E4
C:\Users\user\AppData\Local\Temp\acrocef_low\91cdd93c-e623-454e-9146-ce9f90ed5dd9.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\977c9e86-edf1-4e9c-a1ea-a77779e498e9.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	1D64D25345DD73F100517644279994E6	DE807F82098D469302955DCBE1A963CD6E887737	0A05C4CE0C4D8527D79A3C9CEE2A8B73475F53E18544622E4656C598BC814DFC
C:\Users\user\AppData\Local\Temp\acrocef_low\b04c442c-21e8-4623-8244-25e808d2e5ab.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	22B260CB8C51C0D68C6550E4B061E25A	DF9A5999C58A8D5ADBB3F8D1111EAB9E4778637E	DAB1231CC22DAB591EBB91C853E3EE41C10D3DA85D2EFAB67E9A52CCB3A3A5A0
C:\Users\user\AppData\Local\Temp\acrocef_low\c537b548-57b3-4385-b403-ebfe0ca480a3.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	408F8BA5ED5014C1E10FA19D75C944A6	87595F69D692B4D785AAFAD71394426879C7980F	FFFE47EBC7E157F63F4BE40AC0B2DCD73A5DCDF57B9D03FEA3EB99212A7EC16F
C:\Users\user\AppData\Local\Temp\acrocef_low\f7ac837f-ec68-480d-85e1-a764b5364078.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav	data	5C6B932A79952B4B27833691305E61DB	09804DB0986A989C2C49CDCEA563567FB4C7B1A0	DEE5A5925227B125F4AC6D9B70A277E6EC8494FFC73D1CCE9E08CC7A78D6208A
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav	data	6A614A7743B0C781AAECA60448E861D6	67B7DF5EBEB4527E4C31F3F9B7E52A0581DC4B6D	9703120DC62C2C3F843BAD5B1E77594682CA7820F0345AE0BBD73021C1427146
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 15:26:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	42F5810495C081AB9249DA7A7AA9C88A	4CD502EC456E1F543ADCEFFFF2DF4FB8DF56FB24	567715F75E02703BAF82047AD006A051480C7BF8DC7517F3D42FE1B5116CE252
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 15:26:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	F9F38E3158F71516CB6F69110132BF26	A8226CD80EC87B928CED9CBA334520EC5CB25582	E8FC626D7F4B0CF0349F5A9A0C3ECBA16A3E18BA04834CB79B40598F684979E2
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	2F6ACDA66679FF36392CD8A5D81DFDF3	D906C56107EDEAA7F67F2FF3B9B70FB4DC686D78	1509602217C07B98CF471D01EB16827577516006EB9E0F4D690ED7CA7C00D6A8
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 15:26:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	4C3C343B0E69FD4E4B681C02D6434F40	FAEBA56782152D01D98507085B139EE37F793F07	BBF63470683BE39BD93B22B06A9E54EC6104C80E18840C2B06AE115314F4118B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 15:26:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	AA5013D4EBACC46A1220192886E9E20D	A2EF2706B6AEC82CF96D1149E54A8CFF7A5DF829	74C89E4625CFE80C753E78EC9C2275C3992AD09A37CBC79450A2FAECFAD1E7EB
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 15:26:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	C897C3E848C1FEFBA4EAD9CAFE211CA9	DA951A6516D54DF890D6FCE4E415BB12F1D37FAF	09CD4451252ABDB0EB0336C115A67ADADA22A5E8A800DE77A0140D4682297EEA
Chrome Cache Entry: 197	ASCII text, with very long lines (2681)	1B556C73C5FC0411A5FA9D71277D8F7C	190D8E5AD5ADB5976211753197BA4B95935B154B	A79A9AC26A3FACC35971D3ECAA13E2A6B12E666FCBC4AEE6ED857039E81E5E48
Chrome Cache Entry: 198	ASCII text, with very long lines (802)	814232F7D9F8043197E66F21AABFF535	5D79653D5EEF28B63875A658D8CB47C5DE4F4F9E	C36D4D3B9B3BDD1340C8401F26C250A37A57BFF18B42C608AD0E7BDB3B96E309
Chrome Cache Entry: 199	ASCII text, with very long lines (2287)	ECD76486E52F2A2B974F9930460DD1EB	D6D255F6C370E6F53FAF1901B6DC9DD0FCF3AA74	2DA9A99A2418659D223A7FD16D05F46A311A05CB89D3A3C949C08D1B612FCB7C
Chrome Cache Entry: 200	ASCII text	6FED308183D5DFC421602548615204AF	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
Chrome Cache Entry: 201	ASCII text, with very long lines (5162), with no line terminators	4730593243135D6B031CC9B22DD81A65	D76A23DEA3B63396BC8E6B6DCE4804BAB49DC143	926D84437727A80C3E9389992FF62B14C757B3836968FEFC64E4ED35E7414CB0
Chrome Cache Entry: 202	ASCII text, with very long lines (65531)	45406472CF656FC5628D2205F3E8AF64	4E2B068FCF55A41EEB3CFADAB0C93218F9372BCD	68E8EF6077D42498346922F3147F141A84910F4CB9E25B20E7FF3B9B2D170FC7
Chrome Cache Entry: 203	SVG Scalable Vector Graphics image	554640F465EB3ED903B543DAE0A1BCAC	E0E6E2C8939008217EB76A3B3282CA75F3DC401A	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52

Windows Analysis Report
Jones junction_SKM_U78WWW333.pdf.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Windows Analysis Report Jones junction_SKM_U78WWW333.pdf.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Windows Analysis Report
Jones junction_SKM_U78WWW333.pdf.pdf