Windows Analysis Report
https://mail01.orange.fr/appsuite/INBOX

Overview

General Information

Sample URL:	https://mail01.orange.fr/appsuite/INBOX
Analysis ID:	1571443

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.18:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.18:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.88:443 -> 192.168.2.18:49731 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.177.146
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.158.88
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.158.88

Source: global traffic	DNS traffic detected: DNS query: mail01.orange.fr
Source: global traffic	DNS traffic detected: DNS query: rms.orange.fr
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: r.orange.fr
Source: global traffic	DNS traffic detected: DNS query: login.orange.fr
Source: global traffic	DNS traffic detected: DNS query: captcha.orange.fr
Source: global traffic	DNS traffic detected: DNS query: cdn.woopic.com
Source: global traffic	DNS traffic detected: DNS query: captcha.woopic.com
Source: global traffic	DNS traffic detected: DNS query: c.woopic.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.18:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.18:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.158.88:443 -> 192.168.2.18:49731 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/35@22/192

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1808,i,9256714851681434525,17059103605147304307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail01.orange.fr/appsuite/INBOX"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1808,i,9256714851681434525,17059103605147304307,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.206	unknown	United States	15169	GOOGLEUS	false
80.12.24.2	mail01.orange.fr	France	3215	FranceTelecom-OrangeFR	false
172.217.19.238	unknown	United States	15169	GOOGLEUS	false
193.252.122.137	poole-soi-https.prod.cachehttp.gslb.fti.net	France	24600	WANADOOPORTAILS-ASWanadooPortailsDirectiontechniqueFR	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
172.217.17.35	unknown	United States	15169	GOOGLEUS	false
216.58.208.227	unknown	United States	15169	GOOGLEUS	false
193.252.133.109	unknown	France	8891	FTBGPDMFR	false
193.252.117.141	redirector.prod.redirect.gslb.fti.net	France	24600	WANADOOPORTAILS-ASWanadooPortailsDirectiontechniqueFR	false
81.52.142.239	proxy-captcha.prod.euicaptcha.gslb.fti.net	France	8891	FTBGPDMFR	false
193.252.148.209	proxy-pub-eui.prod.euiidme.gslb.fti.net	France	8891	FTBGPDMFR	false
193.252.117.165	unknown	France	24600	WANADOOPORTAILS-ASWanadooPortailsDirectiontechniqueFR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
173.194.222.84	unknown	United States	15169	GOOGLEUS	false
193.252.148.170	rms-pub-cfy.prod.rms.gslb.fti.net	France	8891	FTBGPDMFR	false

Private

IP
192.168.2.18
192.168.2.24
192.168.2.23

Contacted Domains

Name	IP	Active
redirector.prod.redirect.gslb.fti.net	193.252.117.141	true
mail01.orange.fr	80.12.24.2	true
rms-pub-cfy.prod.rms.gslb.fti.net	193.252.148.170	true
proxy-captcha.prod.euicaptcha.gslb.fti.net	81.52.142.239	true
proxy-pub-eui.prod.euiidme.gslb.fti.net	193.252.148.209	true
www.google.com	172.217.21.36	true
poole-soi-https.prod.cachehttp.gslb.fti.net	193.252.122.137	true
login.orange.fr	unknown	unknown
cdn.woopic.com	unknown	unknown
captcha.woopic.com	unknown	unknown
r.orange.fr	unknown	unknown
captcha.orange.fr	unknown	unknown
c.woopic.com	unknown	unknown
rms.orange.fr	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://captcha.orange.fr/?csid=57a621d1-c75f-4387-aa49-dde55e36a984&captchaService=idme	false		unknown

ID:	1571443
Product:	CloudBasic
Start time:	11:49:35
Start date:	09.12.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:50:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	383A86776D00448622CDBE3C9C8DB1A6	D8B1FA20C6EF5CD9CBEA390161F61CBA07DA5F99	74AF946D5E3140F6E2967D7FCD21EFCEC579809252F4C14B05F577859274591F
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:50:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	C1024498F9BACF118D5096FBEE523B1F	43ACDC32847FF7B700575E43036DF85AC9B5735B	4345FE8E5F1F6BAD71577EAB0DAD4482DF55E25FF655951475E18092C8591852
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	8ED9D9BDEE90A35258F46780FDEFA501	81705070DA941115EC490D44DA6C30E43570FA71	04421BA28F30585F01CE6E0DC32C5B6CD498B834A3F4C0BE9BE786934174CB32
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:50:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	CE9FF58F9EABBDBD16E0484F29AEE9EB	8D3BDC0389A692414828BF4B532A875146D37854	285FFDDC7CA66A7515DAB6247E8BE6CAD2E656AFA8BC23F74BBBAEF7B8AE8963
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:50:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	0EAFE98E01AD6C886C81F9F10DE3314F	5AB368F280453052702EE159BCD70E491E3F94FC	C26CE9B4A518A90678660D14FB9A2186D262089FE93B947B56CEAA3AD3FDBCEB
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 9 09:50:36 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	03BE284A9119556FB7C9DFBF6A1B29AB	DF9846DEDD56ECC03D94FDF8DFCDC49FAC0A505A	98FAC1BE6422EDA055D0B81561F8F25E2FC702909785E3E2FFE5130BD946498B
Chrome Cache Entry: 100	ASCII text, with no line terminators	B6652DF95DB52FEB4DAF4ECA35380933	65451D110137761B318C82D9071C042DB80C4036	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
Chrome Cache Entry: 101	Web Open Font Format (Version 2), TrueType, length 246444, version 1.0	CC12166645528C014085AD9C76E848AF	49E8D87C5B48B0B86202AAB27C1411E93B74FD72	016D77158F078B7C9B4D28B63B770A8A85B731B0C9CB071C8898273D200C3412
Chrome Cache Entry: 103	JPEG image data, baseline, precision 8, 75x75, components 3	89AF57116418EB032450FAB20395096C	F220196CE2262925DF7981D9AA7C94E12EAA78A8	EED867653D6A739022E3D7AE8DDC7277B2723F3D3B5DAE561C7E1D6AD04A35A6
Chrome Cache Entry: 105	Web Open Font Format (Version 2), TrueType, length 18684, version 1.0	7CACF6F3F310565B41C6B3F536419773	B3BFD7DDFE2B3C908B2C25D739BC710D24494CB8	A84CA6B96B545A4DF7413F3BBE30DC209AF87ADFF480EE3A5CD0FF73E94EBBBB
Chrome Cache Entry: 106	SVG Scalable Vector Graphics image	442BA12C28CF3029AEA127BE324F0749	EBDACD225CA8AB14527416BEFBEA78326EF9CE7A	B09EE3FF3AA18162CBCF244AE5C200779FEDC5EAB1AB000D4E8CB71B9BAADE61
Chrome Cache Entry: 107	Unicode text, UTF-8 text, with very long lines (6932), with no line terminators	5B4E1C6C7ADAA64B895E871F173C89A8	C6FC3D254047940793FA12B06E93B7F13D4E0283	AFCCC4EAA340CAF3613A8153ACC9BC48FAA2F108DA066AE24E56AA1895B716AC
Chrome Cache Entry: 108	JPEG image data, baseline, precision 8, 75x75, components 3	AADF51E3914E17F88EA8BA0FEF80DEDB	67CAF85307E25CA5C2F27486E49CCFBD4C92E453	EF13E4F8B4D86796C77672DE71A22501B45FD767158D994CE92A596EBD247BB6
Chrome Cache Entry: 109	JPEG image data, baseline, precision 8, 75x75, components 3	BC3E5547D5A81C2C24C44D9401E629F1	B6BBF259DA75D4ECDE7509AE11BBEE96245C0287	CA8DD2D18FC98D3997B0F19EFE115B70819A4E48F4A138B058CC60B7516794B3
Chrome Cache Entry: 110	JPEG image data, baseline, precision 8, 75x75, components 3	2C68694FB22951C056946ED3A27EA854	95A068316E161C28BB5A49CD8934EC835144A60B	DF736B2C6A0B244FA8B7396EB82B8C2EFA2641538C7ABB197BB6B6BF3BF39D4B
Chrome Cache Entry: 111	JPEG image data, baseline, precision 8, 75x75, components 3	181BF09993F549F4B7222CF7DA0186CE	ECDB5BA6C21173F5D61E64EE1D14B937D14ED0F4	301FF939C1C615E3D8BA5AB1F4C87AA4EA29C48D9163128F6A8E8BE15BD297DE
Chrome Cache Entry: 112	JPEG image data, baseline, precision 8, 75x75, components 3	7F8CDEB04FC0DDD7955DA7635FBEFD1C	5413E7D14AA3D12534728843AADA56A69CD9FE30	D04ECAE43BC2A178D5DEE39E3EA2B5093A1EC6A1ADC162FCC05212BE88074D0A
Chrome Cache Entry: 113	ASCII text, with very long lines (1666), with no line terminators	2A213CEC1B1208089D550200A3821A11	EBDF3EACC82405E8BE6226CFD56C1B1A9B02EE1A	1D270308AA5C20C99421C9D5D6440DF0C3BB224DE552CEABB9F64F084C29EB0D
Chrome Cache Entry: 76	JPEG image data, baseline, precision 8, 75x75, components 3	4E873B2507567E6AB27FAC3127FF133C	A9C7AD55205F80FCB35C4ED9AB7F92C1C487D513	D4135F064822C2D2377078AAEF6F731579A70A5BCD8978F7D0B628A9297D2CFC
Chrome Cache Entry: 77	JPEG image data, baseline, precision 8, 75x75, components 3	90371BE2EAD7C9AEABC199054A21BC19	C65155C11519B1D1C760B75094A68CFDBF56655C	1D034D077127E5B23BCD1398EB6813297E4BA929C0BA7C934ACE955733F5D021
Chrome Cache Entry: 78	JPEG image data, baseline, precision 8, 75x75, components 3	B47AF7C57C02185A19381BF9D0A70787	67AEFF54A4DC2262BA4EE16B62FBA07F353B24C3	FC5791E0CFD8B9A4FB6406025693EDE27623A5E92C4B5D2B522AC0E18661033B
Chrome Cache Entry: 79	ASCII text, with very long lines (2324), with no line terminators	9DFC8AE13E46B7E954202A9E0ED3208F	C119B32E2DF22DDF260E36DAC508F78FEF5F525B	FB2DC14B9F6B1866EC01AA25DFE2153004E08CCBE970496B79CE1FCE2C2E9CB8
Chrome Cache Entry: 80	JPEG image data, baseline, precision 8, 75x75, components 3	9C1371194989EC3DB539F311EA34060E	F84EC3C89CF2D574A860923300B8704C47F52A42	DBE78C34A479CCC9CCC5D510526E4258BDB3E1612B7F6314B62B1959F1B24D2A
Chrome Cache Entry: 81	JPEG image data, baseline, precision 8, 75x75, components 3	734DD0676AA280E08AA4410A628FFE2C	1763239FF99D9A292A55A290CAC6DB64A6F4C0E3	0EB437C962499A85D7D6CAA06A30AF99EAC8837FA50AA11A47E6BF7B61682508
Chrome Cache Entry: 82	ASCII text, with very long lines (65202)	6467A3DBDBF4C598F8E58E4219209026	249BF6933A68D57C9571DFFBF9CC40F5D48C3795	761E9329D5DC491A063F81EA1DEDAEC335826413F3D7A7724D6B9F2ECC5E46F3
Chrome Cache Entry: 84	JPEG image data, baseline, precision 8, 75x75, components 3	187EF43EEF9CB4FF207F322F2B48066D	A041FBC8F5990E77FDF33365750C3F09EF0574EE	BB84530A80CDAA2C39F7A4BE569BF0B5090E0D6EF0CF3762450C1E2F0FDC0040
Chrome Cache Entry: 85	JPEG image data, baseline, precision 8, 75x75, components 3	67F2D51122CAAD0FBFC5C6D361C5B925	FA60A880081AA0F37907153F6C836934431E0320	723C2D35ED9A3B4F89CBA490579FC6A2A7C7D7C147CC0550A0BC88F9F95AFA21
Chrome Cache Entry: 87	JPEG image data, baseline, precision 8, 75x75, components 3	34892A7F1062EB37D579C8BA07F13228	91D284F2AF30B7E7CFA8786F155FA7C2816A22FE	E37079823416FB5265B0C1B7EC0FCC5F70D64D6AEE774C6BF238FD3118B23DB7
Chrome Cache Entry: 88	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced	047ACC5CFF4F047B8AF5585F38F1C851	6D54031FFD6BDA7D95F824D100EEFA0EBD0BAE4F	61C063768271F151D43DECE97DF0BBB7C7544678EBC3BC4CB32203979ABFD7F4
Chrome Cache Entry: 90	ASCII text, with very long lines (64935)	482B32D4A1846A4D9EE1A5B9C2278040	C7562D87A82FFB4FB4662A4C69548E4F65125906	44BAE2EF9A3C7AF89188DA81C1D450F35656B016F4D214A8755455E993B018FF
Chrome Cache Entry: 92	ASCII text, with very long lines (381), with no line terminators	5F3422B5F5715ADA381DA646AF8E4056	3D03F33EE51EEC56FC04C7CBCBCCADE053938AB6	F15BF2BC65946F22D060D612F9DA7E0E8618E7C4EED2662D3D69646850DF3A3D
Chrome Cache Entry: 93	Unicode text, UTF-8 text, with very long lines (47716)	C8BADE8BD5AF221EAA0827E69BE56C27	6A69C8F655E99562D7A18729D0850006A0AF7D45	9A30C97105E441C072B814BAE5C49BE44BD1146DB609B8E7667EA4E0F2653F83
Chrome Cache Entry: 95	ASCII text, with very long lines (65536), with no line terminators	DD50A78829DDC17391AB4AA7F2FA5520	3C44184932CDF716F4BA50A82A6D80D0107183A8	027E0706BED2AF9180A27AF030AEB4BB5CA0ECBEFC25145BE66F0622945BE4DF
Chrome Cache Entry: 98	Web Open Font Format (Version 2), TrueType, length 18520, version 1.0	E54A5770B5F82D8D6D9A1727E440BD79	057464047783BFE4B217C9E81E48B71AAB7B0082	9D091F8AC8F622EF32B06EF1D72E296675B8AC7A0EEDB132E089D8A4D61CE5DD
Chrome Cache Entry: 99	JPEG image data, baseline, precision 8, 75x75, components 3	3BCE963789F0A988FE29D0D3EEFC3316	005D8F071BF9632BDD2A52C063DB86D6110DB4D9	BEF35E74DE53801AEEA10391FA36E6EA016B63D342B93DB6096C4C0B9429548F

Windows Analysis Report
https://mail01.orange.fr/appsuite/INBOX

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://mail01.orange.fr/appsuite/INBOX

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://mail01.orange.fr/appsuite/INBOX