Windows Analysis Report
https://app.salesforceiq.com/r?target=6668871d36fd2c590e69738f&t=AFwhZf1FA5UQoPJfZhv0fx01F18fhOllxr31LLKGz8PWgJeYNHYxSGFA1JrUEUUQObQ88teMdqd0o9ZIV8WeyIc-KGkN2-4Kwg3aQDptaBRRW9C5s_w2iMo0-UsKA37NOqreaHz7kZF-&url=https%3A%2F%2Fcmcoutperform.com%2Fsites%2Fdefault%2Ffiles%2FCourse-Guides%2FCMC-Course-Gui

Overview

General Information

Sample URL: https://app.salesforceiq.com/r?target=6668871d36fd2c590e69738f&t=AFwhZf1FA5UQoPJfZhv0fx01F18fhOllxr31LLKGz8PWgJeYNHYxSGFA1JrUEUUQObQ88teMdqd0o9ZIV8WeyIc-KGkN2-4Kwg3aQDptaBRRW9C5s_w2iMo0-UsKA37NOqreaHz
Analysis ID: 1455410

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Detected non-DNS traffic on DNS port
Stores files to the Windows start menu directory

Classification

Source: https://cmcoutperform.com/sites/default/files/Course-Guides/CMC-Course-Guide-Spring-2024.pdf HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf HTTP Parser: No favicon
Source: unknown HTTPS traffic detected: 2.19.85.159:443 -> 192.168.2.16:56739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 2.19.85.159:443 -> 192.168.2.16:56742 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:56743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:56744 version: TLS 1.2
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: global traffic TCP traffic: 192.168.2.16:56738 -> 1.1.1.1:53
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 2.23.209.137
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown TCP traffic detected without corresponding DNS query: 2.19.85.159
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: global traffic DNS traffic detected: DNS query: app.salesforceiq.com
Source: global traffic DNS traffic detected: DNS query: cmcoutperform.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown Network traffic detected: HTTP traffic on port 56743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 56742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 56744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 56746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 56739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 56739
Source: unknown Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 56746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 56742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 56743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 56744
Source: unknown Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown HTTPS traffic detected: 2.19.85.159:443 -> 192.168.2.16:56739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 2.19.85.159:443 -> 192.168.2.16:56742 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:56743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:56744 version: TLS 1.2
Source: classification engine Classification label: clean1.win@25/7@6/122
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.salesforceiq.com/r?target=6668871d36fd2c590e69738f&t=AFwhZf1FA5UQoPJfZhv0fx01F18fhOllxr31LLKGz8PWgJeYNHYxSGFA1JrUEUUQObQ88teMdqd0o9ZIV8WeyIc-KGkN2-4Kwg3aQDptaBRRW9C5s_w2iMo0-UsKA37NOqreaHz7kZF-&url=https%3A%2F%2Fcmcoutperform.com%2Fsites%2Fdefault%2Ffiles%2FCourse-Guides%2FCMC-Course-Guide-Spring-2024.pdf
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1892,i,8974076035582547648,5252766854740829689,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1892,i,8974076035582547648,5252766854740829689,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk