Windows Analysis Report
https://u43352250.ct.sendgrid.net/ls/click?upn=u001.2TkyzlsQCUugGXuDl-2F-2FHUvoM2ETHNpRvqhUsgZ-2FkMBtQax4rppmJj4bCIHTqvH0YHRnRsXf8CGGu4YpLTNZpZ76bC1bPYcH-2Fs7lPN4w9U413Pp7cIHNkwBCX6uL3j2eBHwg-2BebWrg1KUa82t5ZICcmYo0WQM2kZFkD7HpWk75aUnWOlObXQnYMQDVVFJBSIyJTz-2FcgyQYpE1U8MTbTj4og-3D-3DqsOa_iRxCSnIo8RQ

Overview

General Information

Sample URL:	https://u43352250.ct.sendgrid.net/ls/click?upn=u001.2TkyzlsQCUugGXuDl-2F-2FHUvoM2ETHNpRvqhUsgZ-2FkMBtQax4rppmJj4bCIHTqvH0YHRnRsXf8CGGu4YpLTNZpZ76bC1bPYcH-2Fs7lPN4w9U413Pp7cIHNkwBCX6uL3j2eBHwg-2BebWrg1
Analysis ID:	1417268
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/standaloneforms/1c65701d-0ded-ee11-a1ff-00224834daca	HTTP Parser: No favicon
Source: https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/standaloneforms/1c65701d-0ded-ee11-a1ff-00224834daca	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 162.222.105.40
Source: unknown	TCP traffic detected without corresponding DNS query: 162.222.105.40
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.2TkyzlsQCUugGXuDl-2F-2FHUvoM2ETHNpRvqhUsgZ-2FkMBtQax4rppmJj4bCIHTqvH0YHRnRsXf8CGGu4YpLTNZpZ76bC1bPYcH-2Fs7lPN4w9U413Pp7cIHNkwBCX6uL3j2eBHwg-2BebWrg1KUa82t5ZICcmYo0WQM2kZFkD7HpWk75aUnWOlObXQnYMQDVVFJBSIyJTz-2FcgyQYpE1U8MTbTj4og-3D-3DqsOa_iRxCSnIo8RQB7YNudZaC4Ihhi4-2FeFgLLl2lTQIvavZl96L2C56utm-2Bw7ouDj9FEttxzNo52FQOke1iBijoQooSyWq-2FRY6V54aNK82S-2Bkuf-2BN5nHiy67Pr8M73AscSF4EoUq-2BIyu-2B-2F2VMHADSvnRqwUV3Wv5sOhaz4r56562Hs-2F-2FpAGvb5tdJEMLjsqfOaqTe81fKRLd3TCw-2FD9bJpyEXSA-3D-3D HTTP/1.1Host: u43352250.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/standaloneforms/1c65701d-0ded-ee11-a1ff-00224834daca HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/forms/1c65701d-0ded-ee11-a1ff-00224834daca HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/standaloneforms/1c65701d-0ded-ee11-a1ff-00224834dacaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/standaloneforms/1c65701d-0ded-ee11-a1ff-00224834dacaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/forms/1c65701d-0ded-ee11-a1ff-00224834daca HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/landingpageforms/forms/1c65701d-0ded-ee11-a1ff-00224834daca/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: u43352250.ct.sendgrid.net

Source: unknown

HTTP traffic detected: POST /api/v1.0/orgs/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/landingpageforms/forms/1c65701d-0ded-ee11-a1ff-00224834daca/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveContent-Length: 153sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 28 Mar 2024 19:29:46 GMTContent-Type: text/htmlContent-Length: 548Connection: closeStrict-Transport-Security: max-age=2592000; preloadx-azure-ref: 20240328T192946Z-va93t229q121v133m8ee9hqat800000001m000000000w206x-fd-int-roxy-purgeid: 67853739X-Cache: TCP_MISS
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Thu, 28 Mar 2024 19:29:48 GMTContent-Length: 0Connection: closex-ms-trace-id: 8d8f20fa44fb0145dd94e8b6423696f1Strict-Transport-Security: max-age=2592000; preload

Source: chromecache_50.2.dr, chromecache_46.2.dr	String found in binary or memory: https://96f1a48d.8dbf5d03b92582d2caf4ee06.workers.dev
Source: chromecache_49.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/forms/1c65701
Source: chromecache_49.2.dr	String found in binary or memory: https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Source: chromecache_49.2.dr	String found in binary or memory: https://public-usa.mkt.dynamics.com/api/v1.0/orgs/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/landingpagefo

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/12@12/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2056,i,14718616948296286658,1544279549036497326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u43352250.ct.sendgrid.net/ls/click?upn=u001.2TkyzlsQCUugGXuDl-2F-2FHUvoM2ETHNpRvqhUsgZ-2FkMBtQax4rppmJj4bCIHTqvH0YHRnRsXf8CGGu4YpLTNZpZ76bC1bPYcH-2Fs7lPN4w9U413Pp7cIHNkwBCX6uL3j2eBHwg-2BebWrg1KUa82t5ZICcmYo0WQM2kZFkD7HpWk75aUnWOlObXQnYMQDVVFJBSIyJTz-2FcgyQYpE1U8MTbTj4og-3D-3DqsOa_iRxCSnIo8RQB7YNudZaC4Ihhi4-2FeFgLLl2lTQIvavZl96L2C56utm-2Bw7ouDj9FEttxzNo52FQOke1iBijoQooSyWq-2FRY6V54aNK82S-2Bkuf-2BN5nHiy67Pr8M73AscSF4EoUq-2BIyu-2B-2F2VMHADSvnRqwUV3Wv5sOhaz4r56562Hs-2F-2FpAGvb5tdJEMLjsqfOaqTe81fKRLd3TCw-2FD9bJpyEXSA-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2056,i,14718616948296286658,1544279549036497326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
167.89.123.147	u43352250.ct.sendgrid.net	United States	11377	SENDGRIDUS	false
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.253.122.103	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

Contacted Domains

Name	IP	Active
u43352250.ct.sendgrid.net	167.89.123.147	true
www.google.com	172.253.122.103	true
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true
part-0012.t-0009.t-msedge.net	13.107.213.40	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
public-usa.mkt.dynamics.com	unknown	unknown
assets-usa.mkt.dynamics.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://u43352250.ct.sendgrid.net/ls/click?upn=u001.2TkyzlsQCUugGXuDl-2F-2FHUvoM2ETHNpRvqhUsgZ-2FkMBtQax4rppmJj4bCIHTqvH0YHRnRsXf8CGGu4YpLTNZpZ76bC1bPYcH-2Fs7lPN4w9U413Pp7cIHNkwBCX6uL3j2eBHwg-2BebWrg1KUa82t5ZICcmYo0WQM2kZFkD7HpWk75aUnWOlObXQnYMQDVVFJBSIyJTz-2FcgyQYpE1U8MTbTj4og-3D-3DqsOa_iRxCSnIo8RQB7YNudZaC4Ihhi4-2FeFgLLl2lTQIvavZl96L2C56utm-2Bw7ouDj9FEttxzNo52FQOke1iBijoQooSyWq-2FRY6V54aNK82S-2Bkuf-2BN5nHiy67Pr8M73AscSF4EoUq-2BIyu-2B-2F2VMHADSvnRqwUV3Wv5sOhaz4r56562Hs-2F-2FpAGvb5tdJEMLjsqfOaqTe81fKRLd3TCw-2FD9bJpyEXSA-3D-3D	false	high
https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/forms/1c65701d-0ded-ee11-a1ff-00224834daca	false	high
https://assets-usa.mkt.dynamics.com/favicon.ico	false	high
https://assets-usa.mkt.dynamics.com/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/digitalassets/standaloneforms/1c65701d-0ded-ee11-a1ff-00224834daca	false	high
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/d77fb1c7-9ddf-ee11-9046-000d3a98ad1f/landingpageforms/forms/1c65701d-0ded-ee11-a1ff-00224834daca/visits	false	high

ID:	1417268
Product:	CloudBasic
Start time:	20:28:54
Start date:	28.03.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 45	JSON data	DBAC2EBFBE18E8C7CF3830AF4C420E77	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
Chrome Cache Entry: 46	HTML document, Unicode text, UTF-8 text, with very long lines (1048)	3730C9713D2C1934BA3F5D1D8839DDC7	E2583A832025B85197F639FF874A6D4E22924BD6	208F2799AB8029EDC0A9768B60D71DD9B8029A34587CBCA96BBAB5D57CD5544B
Chrome Cache Entry: 47	HTML document, ASCII text, with CRLF line terminators	370E16C3B7DBA286CFF055F93B9A94D8	65F3537C3C798F7DA146C55AEF536F7B5D0CB943	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
Chrome Cache Entry: 48	JSON data	DBAC2EBFBE18E8C7CF3830AF4C420E77	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
Chrome Cache Entry: 49	HTML document, ASCII text	0C29EEBCC3884ADF837E2593C78800E0	15A26F82F54C6B05A046976D437C788FFBE1DE6A	E32C5AABB6FBCCB07F5588423020470F6E756E1B92A4C4DA1ED9700155216EFB
Chrome Cache Entry: 50	HTML document, Unicode text, UTF-8 text, with very long lines (1048)	3730C9713D2C1934BA3F5D1D8839DDC7	E2583A832025B85197F639FF874A6D4E22924BD6	208F2799AB8029EDC0A9768B60D71DD9B8029A34587CBCA96BBAB5D57CD5544B
Chrome Cache Entry: 51	ASCII text, with very long lines (65461)	FDC2BE4EB54FF521EB5F6CA57AEDAE03	580FEFB1274BB5A21E34DC206D3F042512CA2EDC	36C366BC39F4B2EB17CC2EAC87B9B94199CB4DFC0FF9F3D8A2F4C2EADE1BB9C3

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs