Windows Analysis Report
https://hidrive.ionos.com/lnk/cuMBgdsxt

Overview

General Information

Sample URL:	https://hidrive.ionos.com/lnk/cuMBgdsxt
Analysis ID:	1525123

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Classification

Signatures

HTML body contains low number of good links

Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Downloads/Benchmark%20Business%20Sales%20&%20Valuations%20Shared%20a%20Statement%20Due-230021.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Benchmark%20Business%20Sales%20&%20Valuations%20Shared%20a%20Statement%20Due-230021.pdf	HTTP Parser: No favicon

Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file	HTTP Parser: No <meta name="author".. found
Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file	HTTP Parser: No <meta name="author".. found

Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file	HTTP Parser: No <meta name="copyright".. found
Source: https://hidrive.ionos.com/lnk/cuMBgdsxt#file	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49749 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 18MB later: 31MB

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	DNS traffic detected: DNS query: hidrive.ionos.com
Source: global traffic	DNS traffic detected: DNS query: ce1.uicdn.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gvlrco.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49749 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/23@12/151

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1976,i,13078960306479749762,16380000397126465962,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hidrive.ionos.com/lnk/cuMBgdsxt"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1976,i,13078960306479749762,16380000397126465962,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.186.170	unknown	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
142.250.185.227	unknown	United States	15169	GOOGLEUS	false
85.214.3.95	hidrive.ionos.com	Germany	6724	STRATOSTRATOAGDE	false
64.233.166.84	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
213.165.66.58	ce1.uicdn.net	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
142.250.185.163	unknown	United States	15169	GOOGLEUS	false
147.124.209.117	gvlrco.com	United States	1432	AC-AS-1US	false
142.250.184.234	unknown	United States	15169	GOOGLEUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
ce1.uicdn.net	213.165.66.58	true
hidrive.ionos.com	85.214.3.95	true
www.google.com	142.250.74.196	true
gvlrco.com	147.124.209.117	true

Contacted URLs

Name	Malicious	Reputation
file:///C:/Users/user/Downloads/Benchmark%20Business%20Sales%20&%20Valuations%20Shared%20a%20Statement%20Due-230021.pdf	false	unknown
https://gvlrco.com/m/?c3Y9bzM2NV8xX29uZSZyYW5kPU9YTnNZWGs9JnVpZD1VU0VSMzAwOTIwMjRVMDIwOTMwMjk	false	unknown
https://hidrive.ionos.com/lnk/cuMBgdsxt#file	false	unknown

ID:	1525123
Product:	CloudBasic
Start time:	18:01:49
Start date:	03.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:02:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	255297B381F671E8C9D37AEE75E67588	BEB8C46D91942576AAF90AB72AD8A68514DA8012	0B958D0CD52553D989D0CC9172F364D71F1A18CC345C6341A478AC2E808F7EC7
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:02:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	4F4A32A46775D9FF0A89612C0AF4C4B9	BF54F196223BA4DBD0028FF5EB970A1F782EFE8A	524291DCB21069FC9D3145DAB51DC064A3CD98E43C056FF0FB670C101490B6B9
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	05BCF0164A1E087F65ADDEC97848FCCA	CCB5C0D87C1DD877F569E146C1BAA6AF0D5BF3F7	7319962AF9745611E28FC2533EBEBFB8B245E42653AD89BA78E83AB9BD8BEF09
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:02:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	1D63E46E53099DC02D30479F03A1A2A6	036AEA8A1EF7F64892C2C822B9279CAADFA68978	638A17C0FE7B3BEF1441D5C11CAAD5666BCD10590418799BDB3D6D2ACA511E7D
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:02:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9D1C897608E94A157F1A37AAA8F498CE	1B270FCE143182064C63E27F02F361542EE665D9	9518306BA7B8485123704B8BC53A836EE8AC3A34CD5D895870D9BF77A958BB00
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 15:02:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EED9F77B66C7E225CCCD94EA1E824BAB	1AEEE31433CF67AA5BBEA9252948FFB2DE0FE379	DC3E7865F40B1FC8294C63949EB71FB545E12CE6E0188FA4E3233BCE8E19EE66
C:\Users\user\Downloads\83841383-e388-420d-b9ed-0c92f29398dc.tmp	PDF document, version 1.7	31901941FFC333D4AA510340F680B5ED	6CACF1F2DFD99E862E5607D5EA1ADE58CD5EEA99	1A984D1EBB633B2E5E65EE767C1AFF3F603D4CC26AFBAF156229E7EA301A4780
C:\Users\user\Downloads\Benchmark Business Sales & Valuations Shared a Statement Due-230021.pdf (copy)	PDF document, version 1.7, 1 pages	287AB22BC44F342043395CA6D5E355F5	066853225C11AF46DDE2C3C8F58164C7BCE6FF5F	CF3F7CC5959017AFC9FFA902517E8BCA948B28D9D6E6840ADDD3392BD9C5BB44
C:\Users\user\Downloads\Benchmark Business Sales & Valuations Shared a Statement Due-230021.pdf.crdownload	PDF document, version 1.7, 1 pages	287AB22BC44F342043395CA6D5E355F5	066853225C11AF46DDE2C3C8F58164C7BCE6FF5F	CF3F7CC5959017AFC9FFA902517E8BCA948B28D9D6E6840ADDD3392BD9C5BB44
Chrome Cache Entry: 79	HTML document, Unicode text, UTF-8 text, with very long lines (11384)	B209C82B99DF9397EEBC029F0B8FE1A3	E4CF491574630A694771E53320232C9BE854AE0D	54E6A7E819DAA7ED27BA5F88043892C22BDB60327E648FD897C267696747789D
Chrome Cache Entry: 80	Web Open Font Format, TrueType, length 14192, version 1.1	452638A13F622FC7E06C0768EF41E9F9	77F1DE1DD89C27121ECEC91D529D42177CF7F31B	C4663AA44B0667D4D847A38EE25B1369F97655C3355BAEA54A366943B65BA3A8
Chrome Cache Entry: 81	Unicode text, UTF-8 text, with very long lines (65406)	21B86381AFE823F2D48453A809EDD38A	47F2426C067FBE8762C576B49CA9AE4C1886F242	4A24AAACAA67C7BDD56268B475EC0861FD96441C3B2712C22ED3DDD335A9E6A5
Chrome Cache Entry: 82	ASCII text, with very long lines (44061), with no line terminators	987E7DAAB0A17C6B908ADCB9D2BAA55F	7452873DBE5B30201AFDD0BCA330B9E314CAF363	31DE6BB26AEBFB82FDC42207F4AA27A66872EFE80E03E8257648FAE67D7EB9F8
Chrome Cache Entry: 84	Web Open Font Format, TrueType, length 14344, version 1.1	19453553409B80307B0255BEE10EC189	2482CA1307C1099B935E8B12B2703ECBC0692632	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
Chrome Cache Entry: 87	Unicode text, UTF-8 text, with very long lines (38299)	E8B5247C84254D0A849923C32FBB9D17	9E54222EF5AD61419EA2B1D9659F075FD5185FF0	0B0A5A8E593A8B1E7C4C96BE326B965F03CF6069A01FBBF04F90A43C8EA5CBDF
Chrome Cache Entry: 88	Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280	D5E647388E2415268B700D3DF2E30A0D	97F0942C6627DDD89FB62170E5CAC9A2CBD6C98C	886C86112A804EF1DDD1CB206AF4C8C40E34B73C26652CA231404AA35A6B30D9
Chrome Cache Entry: 89	ASCII text, with very long lines (2863)	9120558DC3A6220F7AFE479C95E360CB	5C0FC9E7CBB704E321A83DB4F988B560FCFE32F9	4BA6228A99115E94EE1442F73B54BC76DAF4E1672E5FEF1F00B379CB2DE7CF86
Chrome Cache Entry: 90	ASCII text, with no line terminators	EFFC96C386C46E6F15F196BFD1DF415C	89683F9281D77F723709C20BAE4577A00F9A93A1	47F7CF467BE7D842473EB5701F483CD387015F14D0F3C9DAC498916BC76C8EA9
Chrome Cache Entry: 92	Web Open Font Format (Version 2), TrueType, length 24488, version 772.1280	747442FA76F1D9A31F9A54A2E8A4B448	07FC0AE14BB3187839082AED3BCA11DFB1E04524	9169D8BE7A8177E5A92A4D04B6DE7F6504B938573BF4DA5889871C4F376D3849
Chrome Cache Entry: 93	MS Windows icon resource - 8 icons, 16x16, 8 bits/pixel, 24x24, 8 bits/pixel	685CDFC4CCEE148B32D8E8A71D856FD7	A09C73B78BE31C4380CB6ECDD29B11D402B66BDF	863EBAE139403B1F99E1D1576AA46DC0CC4CFEF0DB69D745804A28B779F50255
Chrome Cache Entry: 94	Unicode text, UTF-8 text, with very long lines (65322), with no line terminators	382B18A5103288EB9E5F4233C3ECA543	A0AB0E994721C1CEB1373EE88DCA66DCAAC35164	3A31E4D8961B71A5566191ABB65279A230B123D2B6A83E54265EC24714EE0229
Chrome Cache Entry: 95	Web Open Font Format, TrueType, length 43452, version 1.0	A9826C5816E24764B2F3F674255E87BB	35EFC109C923F1FC19A408AFECD98EC6035B8791	73F8CB41EA4FB41E7DD6A99F2F84A564DCE83010F7BBFF2F3EB0884092CC91C5
Chrome Cache Entry: 96	very short file (no magic)	68B329DA9893E34099C7D8AD5CB9C940	ADC83B19E793491B1C6EA0FD8B46CD9F32E592FC	01BA4719C80B6FE911B091A7C05124B64EEECE964E09C058EF8F9805DACA546B
Chrome Cache Entry: 97	Web Open Font Format, TrueType, length 14260, version 1.1	D0BAD741AEFB909E4BE56D188B6F02B9	1547224E0A0BE06E5178815718797BD6607169A4	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393

Windows Analysis Report
https://hidrive.ionos.com/lnk/cuMBgdsxt

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://hidrive.ionos.com/lnk/cuMBgdsxt

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://hidrive.ionos.com/lnk/cuMBgdsxt