Edit tour
Windows
Analysis Report
https://app.salesforceiq.com/r?target=6668871d36fd2c590e69738f&t=AFwhZf1FA5UQoPJfZhv0fx01F18fhOllxr31LLKGz8PWgJeYNHYxSGFA1JrUEUUQObQ88teMdqd0o9ZIV8WeyIc-KGkN2-4Kwg3aQDptaBRRW9C5s_w2iMo0-UsKA37NOqreaHz7kZF-&url=https%3A%2F%2Fcmcoutperform.com%2Fsites%2Fdefault%2Ffiles%2FCourse-Guides%2FCMC-Course-Gui
Overview
General Information
| Sample URL: | https://app.salesforceiq.com/r?target=6668871d36fd2c590e69738f&t=AFwhZf1FA5UQoPJfZhv0fx01F18fhOllxr31LLKGz8PWgJeYNHYxSGFA1JrUEUUQObQ88teMdqd0o9ZIV8WeyIc-KGkN2-4Kwg3aQDptaBRRW9C5s_w2iMo0-UsKA37NOqreaHz |
| Analysis ID: | 1455410 |
 | |
Detection
| Score: | 1 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 80% |
Signatures
Detected non-DNS traffic on DNS port
Stores files to the Windows start menu directory
Classification
- System is w10x64_ra
chrome.exe (PID: 7108 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// app.salesf orceiq.com /r?target= 6668871d36 fd2c590e69 738f&t=AFw hZf1FA5UQo PJfZhv0fx0 1F18fhOllx r31LLKGz8P WgJeYNHYxS GFA1JrUEUU QObQ88teMd qd0o9ZIV8W eyIc-KGkN2 -4Kwg3aQDp taBRRW9C5s _w2iMo0-Us KA37NOqrea Hz7kZF-&ur l=https%3A %2F%2Fcmco utperform. com%2Fsite s%2Fdefaul t%2Ffiles% 2FCourse-G uides%2FCM C-Course-G uide-Sprin g-2024.pdf MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 6320 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2176 --fi eld-trial- handle=189 2,i,897407 6035582547 648,525276 6854740829 689,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No yara matches
⊘No Sigma rule has matched
⊘No Snort rule has matched
Click to jump to signature section
Show All Signature Results
There are no malicious signatures, click here to show all signatures.
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||