Windows Analysis Report
http://scare.me

Overview

General Information

Sample URL:	http://scare.me
Analysis ID:	1531681

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Signatures

HTML body contains low number of good links

Source: https://www.scare.me/

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://www.scare.me/

HTTP Parser: Title: ScareMe does not match URL

Invalid T&C link found

Source: https://www.scare.me/	HTTP Parser: Invalid link: Help Center
Source: https://www.scare.me/	HTTP Parser: Invalid link: Terms of Use
Source: https://www.scare.me/	HTTP Parser: Invalid link: Privacy
Source: https://www.scare.me/	HTTP Parser: Invalid link: Legal Notices

Source: https://www.scare.me/

HTTP Parser: No <meta name="author".. found

Source: https://www.scare.me/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scare.meConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/2.679831fc.chunk.css HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2.660b81c6.chunk.js HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.a21bcba0.chunk.js HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2.660b81c6.chunk.js HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.a21bcba0.chunk.js HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/misc/Home_Banner.jpg HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/branding/scare_logo.png HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/misc/home-tv.jpg HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/misc/home-mobile.jpg HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/misc/home-imac.jpg HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://scare.me/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/branding/scare_logo.png HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/misc/home-tv.jpg HTTP/1.1Host: scare.meConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: scare.me
Source: global traffic	DNS traffic detected: DNS query: www.scare.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49749 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@17/29@10/114

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=2000,i,3008722575519205305,8913222086572417486,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scare.me"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=2000,i,3008722575519205305,8913222086572417486,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.99	unknown	United States	15169	GOOGLEUS	false
142.250.186.67	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.67	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
173.194.76.84	unknown	United States	15169	GOOGLEUS	false
142.250.185.234	unknown	United States	15169	GOOGLEUS	false
172.217.18.3	unknown	United States	15169	GOOGLEUS	false
216.58.206.42	unknown	United States	15169	GOOGLEUS	false
142.250.181.234	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.220.57.224	marine-mockingbird-rh8xccb5u2m5r6n6glo766k7.herokudns.com	United States	14618	AMAZON-AESUS	false
52.20.78.240	scare.me	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
marine-mockingbird-rh8xccb5u2m5r6n6glo766k7.herokudns.com	3.220.57.224	true
scare.me	52.20.78.240	true
www.google.com	142.250.186.68	true
www.scare.me	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
http://scare.me/images/branding/scare_logo.png	false	unknown
https://www.scare.me/	false	unknown
http://scare.me/static/js/main.a21bcba0.chunk.js	false	unknown
http://scare.me/images/misc/home-imac.jpg	false	unknown
http://scare.me/static/js/2.660b81c6.chunk.js	false	unknown
http://scare.me/images/misc/home-tv.jpg	false	unknown
http://scare.me/images/misc/home-mobile.jpg	false	unknown
http://scare.me/static/css/2.679831fc.chunk.css	false	unknown
http://scare.me/	false	unknown
http://scare.me/images/misc/Home_Banner.jpg	false	unknown

ID:	1531681
Product:	CloudBasic
Start time:	15:55:18
Start date:	11.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:55:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CC09CD75C3B5CEA9096AF7A705C290F9	7DA75C08AA59838E68BC15CED2897DF8744948B6	30247827BC2D5C8ECE46E9422278F6FC95AF8B5C934EC6E5287AB413F5BA185C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:55:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	FAF0EE5967C5E00280DEA171EDC21682	F3D56BAA9D1D07B4E3E23DEBE05D7E45CF74F3DA	226EA0772AF26C310413BCC2E2F793E6F277B2F03EADC321BA7E4CC9247170D3
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	977056EC1314B28B3B61CF11289A434D	C54175C79D5D831137D278C63253259D16B817C7	CBC17E0B4B7924CB00DEAECB75846511FE082A0F54A66F0347C47D756BA1C4DD
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:55:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	13A6B273BE8D509F5D6C597E0BEA59D3	F2DE1F83816C3EB441D7AED5C006FFD398305142	137E2437BE79B6B9CAFE91CB175EAE5FD2585C9E9D7312E7016029F24BAD7868
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:55:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	B90A942DF0FDA663A28DFED65BE0615B	AF5D87A8C74802C1218BEEB9369213B0E21A3AE2	5EB5D1416396B80E9BA4AF4665B0D9BFDB8800F537366483D31B78FC402A0D21
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:55:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	6827AA9DB784797505557EA454839488	052BFE2AF6BD5C54074AEE4FE1EFE2E0CC01F5B7	F1A6A261DE681FB142D1E69BD2D5C667A733D55E04385206D5AAA6A2DDA9F767
Chrome Cache Entry: 100	HTML document, ASCII text, with very long lines (2860), with no line terminators	8E3BE7DAE6C5E2D5C67DFDA1CAB25AF2	751092747FA4A224BDC570D7481F4D232F5FFB5C	C8B1CA980A59249FF4759C5775A54DF67A2C74493F26FBBFAE9BA6B14EECE9E0
Chrome Cache Entry: 101	ASCII text, with very long lines (65536), with no line terminators	33198D56C285081628DAE479A5B29902	37227CAD93B737ED09B3DB0E5098A32E09AE745F	EF4684DD59F20C4ED0D4123A567DB3E2979274485545B4DC37563537AE5E3361
Chrome Cache Entry: 102	Web Open Font Format (Version 2), TrueType, length 20040, version 1.0	469EAAA01299C1F212BCA76E00ABD2E6	749195D8A040F5A963DDCD4BA66CFFB662C5818B	1E22E5CA1E8049A54AD941B20982E0567E62A32820C4CED13A5EDFB3AB2768C2
Chrome Cache Entry: 104	PNG image data, 27 x 61, 16-bit/color RGBA, non-interlaced	B70C5CF4CF553E89487241D176CC7E9E	3D66DDA610D708C4161E7DC51133CD22934C84EE	325DC82A84043860A5310D5950CA6D4341D005A9D81F1A95211618C1E744A71B
Chrome Cache Entry: 105	gzip compressed data, from Unix, original size modulo 2^32 1932345	E83C9ED130C33147F0508BFF8A1990ED	91E53BBB70AFA4AFC47F874AC0F47B0AB0A0DE31	88AC94E753A429217E61053A58CED1DB7914C5B5E55225F1FD07F32109336AF8
Chrome Cache Entry: 106	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=479, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=301], progressive, precision 8, 301x479, components 3	7B2EE0F82101E3FE7D7292B23D19C2AB	D7F88EB8E9CE28BF3C73A92B6C3AC363B6E12BC6	FD7DFF93AEA7D01717B6E167D560534F621C233A05CFB266D6F373FA37FBA646
Chrome Cache Entry: 107	gzip compressed data, from Unix, original size modulo 2^32 229204	64A821BEF64AF22CDBB2FBED19C130D2	A779DFF292C99108BBEAC3C92025B4F32834D5FE	9E5A97C60F683B813B098BE528B80075BB2F87A5ADB30DC89694A1430C4A2C9B
Chrome Cache Entry: 108	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 640x480, components 3	193C9A7AF024FB5427CB55E768AB51E0	B4C50D30B9C9BF7F80DAD2066B8611E0067B6914	74532D6C42455AEA0FD5D917982F3245C22A066CE8F42AE0257F22223F5DF854
Chrome Cache Entry: 109	ASCII text, with very long lines (1843)	7F1B6EF037F9DFB914322DB4DD473480	10405D6810B10143041BC12567B194B7C8DEF320	99CDF7734B9BAEC74E3C53BDDFDA3C002DED5FC082BF6E8851CB6261C8B8C307
Chrome Cache Entry: 112	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=434, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 640x434, components 3	913D5EF8B39F7855B9A2BB59293DB2E9	AB40569016B31A13294B265F4DA7CE82EEA7E6C6	F3526C4E7CED7AD724AE242ED6B8AD09E7D27857D20AC7C255657633597A0A6A
Chrome Cache Entry: 113	PNG image data, 625 x 225, 8-bit/color RGBA, non-interlaced	098DC8A7E75EF73B2D006561CEA85039	646E38895B0DC631E04261002445A03B42D9B2B0	238FEFB0207F880EBD3EDE83E84C19C9D3E951E68D6373B248FC88CC3826C158
Chrome Cache Entry: 114	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1125, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2000], progressive, precision 8, 2000x1125, components 3	F2775AADB3C6B70E08FC76DC620E7D52	4F7EBACAE8F1B1E70D2BA54441A89EBC7F3F3361	28B4B8792F251F2FB13E56DC94866131D5428919858916BE5F82C6A3262BE9C5
Chrome Cache Entry: 116	ASCII text, with no line terminators	C3F64CB2A8B00CBBC30CE2908208A29D	E4AA7CAB67F4CF5FA52371DDC25A75AAFD4D0CCC	391601283994BCD9486160BF8A5637410D280E1BDDD3AEF5428454976E193E81
Chrome Cache Entry: 117	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=479, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=301], progressive, precision 8, 301x479, components 3	121ADB58CE9BDC68784ABB72C3946181	DD44BD5940B4DE6C31117C427B03950EEA55FEAA	73A8E43DF0E74440D63D4D31DE15BE4596F169D7525DDBD7665918B64239D5D4
Chrome Cache Entry: 84	gzip compressed data, from Unix, original size modulo 2^32 1892	388BC91EA7F11061A3809C1927C7F1C0	837C90D39ED36F38ACB38185DE06DBFC810DFC45	1CFBCB36A203026FDFB614FA07E49C097C237CD6FF8194755EE26B7287242C4A
Chrome Cache Entry: 87	PNG image data, 192 x 192, 4-bit colormap, non-interlaced	964FB6E004654A3E21E1AFC7481FC075	BEEB04E064D73D89BE16BE7D85B12723C31AA4F8	335453ACB79D462F303EEE7AA274C21E8CAA78102223A675A55FE8339950984D
Chrome Cache Entry: 88	ASCII text, with very long lines (65462)	478ED86510B51B36EF4E1A79D3F64C3A	B5364E3BB6C089EF1B34413623D5409C7BFD13DF	A836D73283CCB63AF2573B6F2A86771804BD73EB64D48B78916C4F81F4DBCE15
Chrome Cache Entry: 89	Web Open Font Format (Version 2), TrueType, length 20040, version 1.0	A61C670A24D6794A95A9712F0D12B656	C9B3114B27790109EC51508F51F1A033CCFE0812	A4F5230D39A7A21971FE62CCDE2443345638D2BEAA369B752820390A687B91B6
Chrome Cache Entry: 91	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1125, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2000], progressive, precision 8, 2000x1125, components 3	3FB72CDB263F88244466302884EAB20F	7FD07FFBB6FD6834D3DDE361A4AB983B6DF4C986	5B95C1763906B7FC24289D9D0C615F47D1C29B0D1AB7154E40235306C1B818C1
Chrome Cache Entry: 92	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 640x480, components 3	EED3EEF1843D1DE16ED6CCC2E267338F	7A99BB1C706AC0FD393E50C4EFAFA381C7FA198B	4B4D93CF4A8BC6068151D507A457CEE08EE1873F42284EFF0CEA149D1CAB9E50
Chrome Cache Entry: 95	ASCII text	D3B37B27DA986B575A4B90BC4F873EB5	FEBC777F50553A666DB53CA00BB1590CC0E86166	06584FCC763C562A4FB53C7B44991101BB615F5C29EDA64D33FE71F101DC5E3D
Chrome Cache Entry: 98	gzip compressed data, from Unix, original size modulo 2^32 2860	014D766EE1398F18AE8DF36FE75996D9	E495B76F1372E55472EC9491926F200ADD5C456A	A4793CDEC1C19304A48E13443E5A30341497BCD90B1F9BB96E2C0E8161EF652E
Chrome Cache Entry: 99	JSON data	20311258AC4BAD70650D685DC0C52B61	740F729E63E4912E778D921E7D80640007E30CA1	482067A696C68E2F84A8F0CA9AD25354D38A380DC0C62140846424CA3F9E90CC

Windows Analysis Report
http://scare.me

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report http://scare.me

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
http://scare.me