Windows Analysis Report
https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26o=%252Fphtt%253A%252Fgts.souacozr.igc%252F%26s=z8CAkeos8ozOMyOkyTtC0SiSxhU

Overview

General Information

Sample URL:	https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26
Analysis ID:	1445860
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49730 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Da4bNXP6XnFB7G2&MD=eeLWemgm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: url6.mailanyone.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49730 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@13/31@6/3

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26o=%252Fphtt%253A%252Fgts.souacozr.igc%252F%26s=z8CAkeos8ozOMyOkyTtC0SiSxhU
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1932,i,2749454717074837855,13133428506137073853,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=1932,i,2749454717074837855,13133428506137073853,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.217.18.4	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.17

Contacted Domains

Name	IP	Active
www.google.com	172.217.18.4	true
url6.mailanyone.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26o=%252Fphtt%253A%252Fgts.souacozr.igc%252F%26s=z8CAkeos8ozOMyOkyTtC0SiSxhU	false		unknown

ID:	1445860
Product:	CloudBasic
Start time:	17:23:15
Start date:	22.05.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:23:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	9D0975E169B933251239FE0D6843E976	2D117F72A77CA47079720C322C9A3AFAC9284AB6	55DD948654FF2E6C51B0C3A1481F9BE4AA8E69EEC5E79807A3514E88DB046706
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:23:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	5C372D02AC8B2514574F131777B6BC45	E5E5136CAE5AD9CDBB027CA8D513631500583F7D	478BEA4F4DBF7F6EBDAD3A1870569E7B54C72428519B48E05325A9D13A302069
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	8B6BB901CDB5D6AA5B12D0580DA1864F	6A0ADCBA686467910557B1FFE2941C380B19830F	2B594845F08CE030AB3E56FD8A141B072FB286B1B85A894DE31A63E4C969C8A7
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:23:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	DCF08841E2AC76691EC618BFB2B0BEA3	EA966359E919AAC589383852C6D5B6B3409136F1	796296A68B805755911573172C2902C6BA889F1D4732331A0053FDB57084D84C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:23:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	1471E54F7476F7CDC7E1EC5E8AB03DDA	AC349973B69DDFF2E0329C95891F2FEFA356C844	893EBA2113CB09CB0DEDED8B38861A98A8E31EE84C964142BAD65519AA83E096
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:23:40 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	24A9E20658179D3AA884E2F1BBA8A6CF	FF4CDED713C397874CF570BDABFDB26BA4839D0D	76061D2254A3A2760D10F7AE8F78A49F7109A7F8635D4DBC9ABE6F2518BD3FEF
Chrome Cache Entry: 120	ASCII text, with very long lines (4962)	49864A8E125D378BCB2C452E5F949AB9	16813CF45B19A19293AE85ECC3D7E6E18F95E75C	0ED4CE10806A4CFFBC0A283BEF8AD076EDF2D070A3F72979F825595790966EEE
Chrome Cache Entry: 121	PNG image data, 1722 x 319, 8-bit/color RGBA, non-interlaced	00DA7A0E86DC2B4118D03B7FC6B3306B	2A8C5BDB06DC8A6903FB70EECF00C323D4CAFB06	08810F9F61655B1BE5D696B886A04E6650EB2F529FE003C4F2A677917D8ECB96
Chrome Cache Entry: 122	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	9D62DCC244C0F3D88367A943BA4D4FED	5FC5EC953D4344422EB686B9FC61EA31CAED360E	FDDF75D3376BB911DB3189AA149F508317799B10611438B23D688B89DB208DA7
Chrome Cache Entry: 123	ASCII text, with very long lines (33677)	0A3A58F308CD683A742C13B16D3BC35B	1C175D968B6892D6B431B5F40309C844E654D580	B0DDAAD28F9246458C037B59F4BA5620A8432C6BE41B10B235E36B42B665ECFA
Chrome Cache Entry: 124	ASCII text, with very long lines (65536), with no line terminators	A5AF6842BF26FC8A4BCB71E4FA55C0CA	6D297D38D8291F5BFC5582C6032597449ECC9250	22F86A3F92002829B79768B323C877434B256A0B49C10CF370EA22B3B9336B36
Chrome Cache Entry: 125	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel	9D62DCC244C0F3D88367A943BA4D4FED	5FC5EC953D4344422EB686B9FC61EA31CAED360E	FDDF75D3376BB911DB3189AA149F508317799B10611438B23D688B89DB208DA7
Chrome Cache Entry: 126	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1440x1018, components 3	41DD29DDD14473A2B95F910C8D817473	C241CD5A158E257F6ADBC927B349886497561EDD	126308450DE5137A72687784E6B562811E404A3CF7EF62CF5E7A5986555A5E38
Chrome Cache Entry: 127	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators	5ED8A5EC7C2F3373DAB40F406BE4E1E6	B28BAF01ED6D1017AACF302343E6C0C675D8127D	E3526F688F0037EB9818B78E5096B7ED43AEC8D0A9A1CBEA6C7FEA39D812291D
Chrome Cache Entry: 128	HTML document, ASCII text, with very long lines (3999), with no line terminators	CAB6057F3FB0BD14FDB154C9636F2ACD	DEE42B01B6C0C8C4244309249BED3DAC8A875CAF	48CC5FBCA021072CF7BE4F476DDF522623AA9ABF483623E1722A92F074644324
Chrome Cache Entry: 129	ASCII text, with very long lines (6557)	8C2305C32BD61A9B135A4DCF8586132C	9A62FA2529608706730408FEDC64B61C9678F73C	077674C2AD26D48610CA9886B0DD80373495ED8949965C3CB0D6B6F266162C0E
Chrome Cache Entry: 130	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1440x1018, components 3	41DD29DDD14473A2B95F910C8D817473	C241CD5A158E257F6ADBC927B349886497561EDD	126308450DE5137A72687784E6B562811E404A3CF7EF62CF5E7A5986555A5E38
Chrome Cache Entry: 131	ASCII text, with very long lines (65462)	FED72784CBCB19D9375B283B432D7B3B	3012BE15099BEE5AFC416D150C4616A0A418A8D0	A9DBEF011641348EC3C7A812DD3EB4871E6C971A66870630D8641C56DE39AF69
Chrome Cache Entry: 132	PNG image data, 1722 x 319, 8-bit/color RGBA, non-interlaced	00DA7A0E86DC2B4118D03B7FC6B3306B	2A8C5BDB06DC8A6903FB70EECF00C323D4CAFB06	08810F9F61655B1BE5D696B886A04E6650EB2F529FE003C4F2A677917D8ECB96
Chrome Cache Entry: 133	ASCII text, with very long lines (8127)	131871CE596EE77AA51129C134336F00	9BE571424EA29C4EA834981098C3924B6C19453A	92C546D42EA275C73117FA125AF64A342BAC8E0E921EC11280861D905719BEB8

Windows Analysis Report
https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26o=%252Fphtt%253A%252Fgts.souacozr.igc%252F%26s=z8CAkeos8ozOMyOkyTtC0SiSxhU

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26o=%252Fphtt%253A%252Fgts.souacozr.igc%252F%26s=z8CAkeos8ozOMyOkyTtC0SiSxhU

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://url6.mailanyone.net/scanner?m=1s9UFM-000CiC-67%26d=4%257Cmail%252F90%252F1716316200%252F1s9UFM-000CiC-67%257Cin6e%257C57e1b682%257C26023477%257C10839452%257C664CE828D09A29E749862A491AAAC3E1%26o=%252Fphtt%253A%252Fgts.souacozr.igc%252F%26s=z8CAkeos8ozOMyOkyTtC0SiSxhU