Windows Analysis Report
https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u

Overview

General Information

Sample URL:	https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u
Analysis ID:	1532975

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

AI detected landing page (webpage, office document or email)

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49764 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Source: global traffic	DNS traffic detected: DNS query: forms.office.com
Source: global traffic	DNS traffic detected: DNS query: cdn.forms.office.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c.office.com

Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49764 version: TLS 1.2

Source: classification engine

Classification label: sus20.win@17/29@14/156

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1912,i,17393432234667170224,8119011546444416373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1912,i,17393432234667170224,8119011546444416373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u

LLM: Page contains button: 'Submit' Source: '0.0.pages.csv'

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.74.202	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
2.21.22.168	unknown	European Union	20940	AKAMAI-ASN1EU	false
20.189.173.9	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
74.125.71.84	unknown	United States	15169	GOOGLEUS	false
13.107.6.194	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.189.173.16	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
13.74.129.1	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
204.79.197.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.16.131	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
www.google.com	142.250.185.164	true
forms.office.com	unknown	unknown
c.office.com	unknown	unknown
cdn.forms.office.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u	true		unknown

ID:	1532975
Product:	CloudBasic
Start time:	08:34:47
Start date:	14.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 05:35:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	41E1D5A894993F1517B4084D0A5E3A5F	8F246EC05D91F47E7FEACFD9FB4669380974230C	72FA52D0E472A00F73D15C54B88795411B1775CA31BC8104A9597B233F92F9DB
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 05:35:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	F5AF6C7A9ECC929842F4E4C7C28C992D	5353DFC2173BD1574BD7A80582EE35C36CB0DF4B	7AFA3B03506575E2D5C4EE079C195786C19F30A84A429CD210A80BE0247DFD0A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	458A23A32C63B5994024C182694B73EB	C376FAF4D8FBA7DAA6A9F81A3B71C4A609ADDD03	258CC74720F56407732C2E95E33A3B4518837680735EEEBA1938A061E43E3979
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 05:35:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CE1AB244F22F56DE29896D9A35CE20E9	D96E73BA248C699898D45332ADBB273554D7DB6F	14CC859B3052F1A94D2B8A9720F716A1C540EE3F4638200043F5FEA5A2CBDD03
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 05:35:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	2B6838CB26A4E40E1286E64826615330	733A2E883ABC9C5A68D56A7570FA004C1B03BD2A	8A9410B3FD24295729B0E0DE037BACE3D7EACEFFAE09B55441E2E2EE53124A5F
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 14 05:35:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	8F087E799188047AFBB7030356C90708	A8424F93C866DEE799DC1D3E4990C401634CA026	A00B180808951BFA4121FC26E23B4E9ED3EBA64EE56728AF1D19ECE8C55B88B6
Chrome Cache Entry: 100	PNG image data, 192 x 192, 8-bit colormap, non-interlaced	4150A5D4F2B0284A9E62D247929DD2AA	97CA2D9ECE8F0855B2A93E6BFDFC4883685C51CB	F058653DCBA7E8B00D4BDB9409E06817F098AB18125CE5A5821520F04030D176
Chrome Cache Entry: 102	ASCII text, with no line terminators	8F54FCE09B68AC5A85FD830B837FC0D6	BB5411FB4FBBA08147AEB6A3F723726A3AD7D2D0	62A39E3942718AE7512B9D85BC43FD906274B9D85818EEF14FCBE5CDAB0461C0
Chrome Cache Entry: 104	Web Open Font Format, TrueType, length 1964, version 1.3277	FC6A627A2D1D410B051C01928180D30F	C7ED08502C1AD2DA413B56BFDFF63873ADF7F7A3	7F77C691D669FC94853C14F76DE8C2665411C899C168E4655A4215D296DE8C3B
Chrome Cache Entry: 105	ASCII text, with very long lines (65536), with no line terminators	DDFF800B8B17672D504D6EE9BDE3B8CF	5B48D7DB7B3BA81467C10507FAE6551C6FC55AF8	DA468988273C8635A284D3EF8B044D688B2F0A36AD7DD9F24694A7E27AD7BFD2
Chrome Cache Entry: 106	ASCII text, with very long lines (918)	19F88A9690395484D35F200B1BD999A9	43033D885678C2E3BDCB23070E018E8BDFB55A7F	600C36C9E419E1410A833B42D3257CFC535395253A8DD9F63D6A6AB1ADEB366C
Chrome Cache Entry: 107	JSON data	4142CD0F539A4C0E1D4459D83198818B	3EB046A9A2DF6D0DFD376E517CA3C47331E09ADC	0BF7A5F75DA0A35CFD311931F3AF30CD14D449B410B6BC2BF2A1EB66A6C912B3
Chrome Cache Entry: 108	ASCII text, with very long lines (43627)	F2EEB2627892E1F965D7E7A001CDCE31	9307F51A4D83B12BE7085BA2E21CA62DD4EE9561	AF697F43BBFB036C4FB0D1076726B90B3E9F1D5A308C6BCC03DBDED3F591E80A
Chrome Cache Entry: 109	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 110	ASCII text, with very long lines (15299)	E0A0FE385F015B2D6B40AD4831291157	083852BCF18048D0B50BBCC90E8EFE4A3FD9BD77	5F0785E9F3222A870CDF1DC6361634DE263C8718D9BD5B708763E40A1AD60770
Chrome Cache Entry: 111	ASCII text, with very long lines (34044)	561B6131C7410D7132743B7772572A24	AA371D4BABC109D1A9741D5F7152B3AE364074B8	2C3106B53F6591DCF6B1D876A75861B0B3C74CD7D85E3FFACC59466354E9256F
Chrome Cache Entry: 112	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	9425D8E9313A692BB3F022E8055FAB82	EDDCF3EA767D4C3042D01AC88594D7E795D8615C	F2A1ABCF12EBD0F329E5B66B811B0BD76C8E954CB283CE3B61E72FBF459EF6F1
Chrome Cache Entry: 116	ASCII text, with no line terminators	6B2EFEE9085D5FDDD69A24C23C621E06	DF0B1CB392694EB9F6BD3E8F579683BA1943FD5E	2ADF60F143667BA8B6B4C477F6F6791897F28C70C30CE5DABCEE1727000F84DF
Chrome Cache Entry: 119	PNG image data, 1366 x 768, 8-bit/color RGB, non-interlaced	34475113548EADB127E7DA6EC3FE596E	AF2F18434016F0687CDEF92D4E259E2F5915FFE6	779781791DCF85B9156F682BFF7B790B166978D3DBB91E2AF6D0B44CE4BC5ED0
Chrome Cache Entry: 122	Unicode text, UTF-8 text, with very long lines (56644)	275685DCC7CC22DB1BE3CB3E2C13C2B6	2998848CD57393FCDE5A1309886AA3FE6F95E3D4	AAAB8186A7773193BACE162A5AF45F7B1BD471D387E514F781F1FFF5A9A8E7E8
Chrome Cache Entry: 124	JSON data	4D945878F36DCBBF35C41B5BB6E5513E	786EDE7740452B1C38B1FFA47C28F4E70140EC5F	19DADB739E9886DBDDC79E9E916B753AC53A2C8C1A9560EF14AF28B400C234E0
Chrome Cache Entry: 125	Java source, ASCII text, with very long lines (17610)	7A1CBAE1C97AD1A1E67F351FAF0F81A4	6F024274F89AFC9319DFE7AD9D0F23A48E279DB1	32859A35E0C0F3BC47CCAF2A01830BF7A8C41702C026D0B74FF7E50BC7E6CD51
Chrome Cache Entry: 88	ASCII text, with very long lines (32289)	5E6842FF0878254063E6C9AC937067D3	0773062E0A3F7478F7B817B24B4B0329ECA0F86E	856BFDF91C9BF623E1C3F542A8828CC1964D4DDE7D9E4E9B9FA48DFD9BC6B1C2
Chrome Cache Entry: 90	ASCII text, with very long lines (22709)	0055D5757DB41BAD929E5C8B9B726180	FBA7C3D94C0FE43AF69BDCFC5186539E1DDE2EFF	37D099733E4901725976E46366372584C0BB88EA5B32D288BAB5F996736725C4
Chrome Cache Entry: 92	ASCII text, with very long lines (65536), with no line terminators	0403F233BF93504715F3AABE0ADA2E6D	197ED5FD6CAF05064320D723AB96E833B66FCD91	28CEFA7AAB4CF389A65BED523E7FC95F191892589BBA1A8AEAF2D64382742A99
Chrome Cache Entry: 93	PNG image data, 490 x 180, 8-bit/color RGBA, non-interlaced	311274C8C9C66E894F5AFA51FACD72CD	386D1FA0B2924DF2C21545CF2FF1DDE2CD985D33	BC3C029408DAB6B5CB676B990B2E21BDD474E4B2E45DAF87E70210539390BF49
Chrome Cache Entry: 97	ASCII text, with very long lines (38722)	506E1863A955ADA913A41B16CE68A31C	0CCD901EF85CCD7FEA212D7BD58D92DC582F31F2	D2030540B8570E7719C0A937C4EBD0A892591B038DC3F0DDEEB7F9365DE19E9D
Chrome Cache Entry: 98	HTML document, ASCII text, with very long lines (5844), with CRLF line terminators	56F9CD8A07135E776326431C8560F8F2	FCFF27C475A9FB014661B045B59C8BB4799A0392	0E1D105D6EE902B7279AEFD9E8AF21AB3E5D0CF058332A2A0E53A351524C75E6
Chrome Cache Entry: 99	Unicode text, UTF-8 text, with very long lines (35053), with no line terminators	2260CFACC25DE59539D0B1D7A50F9270	84FECAFAFF77917530F170A1D3EBF70A51A9B7D1	9F00DFD9D0844DEA7FED92119F0E4149C4D6334169704CE875B14C1AC84E6629

Windows Analysis Report
https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://forms.office.com/Pages/ResponsePage.aspx?id=IFlAaXO2fE-IReEk6dCK8oXJBkKKoBZPtujagCihfl1UNzFaTTZPSkRVSlI2V0ZETUxBNkNCOVhMUy4u