Analysis Report https://summary.aquilaiajax.com/v3/summary?ref=email&crId=606c5ec27707d53875dac9da

Overview

General Information

Sample URL:	https://summary.aquilaiajax.com/v3/summary?ref=email&crId=606c5ec27707d53875dac9da
Analysis ID:	383834
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 35.178.120.30:443 -> 192.168.2.6:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.178.120.30:443 -> 192.168.2.6:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.153:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.153:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.30:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.30:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.178.120.30:443 -> 192.168.2.6:49721 version: TLS 1.2

Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x69559cf6,0x01d72c9f</date><accdate>0x69559cf6,0x01d72c9f</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x69559cf6,0x01d72c9f</date><accdate>0x69559cf6,0x01d72c9f</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x6976fdd8,0x01d72c9f</date><accdate>0x6976fdd8,0x01d72c9f</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x6976fdd8,0x01d72c9f</date><accdate>0x6976fdd8,0x01d72c9f</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x6976fdd8,0x01d72c9f</date><accdate>0x6976fdd8,0x01d72c9f</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x6976fdd8,0x01d72c9f</date><accdate>0x69796033,0x01d72c9f</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: summary.aquilaiajax.com

Source: msapplication.xml.1.dr	String found in binary or memory: http://www.amazon.com/
Source: msapplication.xml1.1.dr	String found in binary or memory: http://www.google.com/
Source: msapplication.xml2.1.dr	String found in binary or memory: http://www.live.com/
Source: msapplication.xml3.1.dr	String found in binary or memory: http://www.nytimes.com/
Source: msapplication.xml4.1.dr	String found in binary or memory: http://www.reddit.com/
Source: msapplication.xml5.1.dr	String found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.1.dr	String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.1.dr	String found in binary or memory: http://www.youtube.com/
Source: js[1].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: summary[1].htm.2.dr	String found in binary or memory: https://bernii.github.io/gauge.js/dist/gauge.min.js
Source: js[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: summary[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.5.1.min.js
Source: d3.v5.min[1].js.2.dr	String found in binary or memory: https://d3js.org
Source: summary[1].htm.2.dr	String found in binary or memory: https://d3js.org/d3.v5.min.js
Source: summary[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:regular
Source: summary[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: icon[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v83/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOjCnqEu92Fr1Mu51TzBic6CsI.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOkCnqEu92Fr1MmgVxIIzQ.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOkCnqEu92Fr1Mu51xIIzQ.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmEU9fBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmYUtfBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: ~DF03EBC80C459E6306.TMP.1.dr	String found in binary or memory: https://summary.aquilaiajax.com/v3/summary?ref=email&crId=606c5ec27707d53875dac9da
Source: {92EDE2C2-9892-11EB-90E5-ECF4BB2D2496}.dat.1.dr	String found in binary or memory: https://summary.aquilaiajax.com/v3/summary?ref=email&crId=606c5ec27707d53875dac9daRoot
Source: analytics[1].js.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: js[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: summary[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-165596162-2

Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705

Source: unknown	HTTPS traffic detected: 35.178.120.30:443 -> 192.168.2.6:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.178.120.30:443 -> 192.168.2.6:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.153:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.153:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.30:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.30:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.178.120.30:443 -> 192.168.2.6:49721 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@3/25@5/3

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{92EDE2C0-9892-11EB-90E5-ECF4BB2D2496}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF22D8D2F9858A4A01.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2680 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2680 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.6.30	d3js.org	United States	13335	CLOUDFLARENETUS	false
35.178.120.30	london-sentry-email-summary-1161567812.eu-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.199.108.153	bernii.github.io	Netherlands	54113	FASTLYUS	false

Contacted Domains

Name	IP	Active
bernii.github.io	185.199.108.153	true
london-sentry-email-summary-1161567812.eu-west-2.elb.amazonaws.com	35.178.120.30	true
d3js.org	104.26.6.30	true
summary.aquilaiajax.com	unknown	unknown
code.jquery.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://summary.aquilaiajax.com/v3/summary?ref=email&crId=606c5ec27707d53875dac9da	false		unknown

ID:	383834
Product:	CloudBasic
Start time:	10:46:54
Start date:	08.04.2021
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{92EDE2C0-9892-11EB-90E5-ECF4BB2D2496}.dat	Microsoft Word Document	BA5FEFCA16AC71DA85E0BA4AD3E9C1E4	F91DE99E50DA07D03319AE56CBE3DD2372640260	D40686CB496002E5C42D00F75F6ABA474BBAFE55DE97E574F2E2DA7ADC1D61AE
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{92EDE2C2-9892-11EB-90E5-ECF4BB2D2496}.dat	Microsoft Word Document	73D8E8163694ED73EB58AD6C44FEAE4D	8F020A5436D1517E74CA32376163A36AA0E869AE	BC3E8B2CB60F9963E12C3F9C58F75FE092E005D76DBDB03789D67182AA4C2FBA
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{92EDE2C3-9892-11EB-90E5-ECF4BB2D2496}.dat	Microsoft Word Document	17CF6A159EF400BC6E30EF4211B06A01	1E474B9B8D4D85C9AD1BEEA296BE2B4C49DE31C6	299D90C892187DBEDCFAF2D78FA04087927287114D55E1A824968B183BA75BF4
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	EA066B1FF0D738C4D4795E6D507CB0E9	B0FB2619B5E72F2E3BCDC999D9FB4C9C972AAE79	47CA68E3B3EBD04BC9FEBD2729F0808BEB2F9FD76A86F9341741BCF82A6C7AAC
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	AF8F71CA72C3FB94578B6C070A55D565	C452EE8FE872FE0FA008AB79F5C1E0BF5922C55A	B393502144CCB22C45DB39C6A6B67611E27A84BFBAB209D31496FDEC165611E5
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	374CDA9CF5FD0C68F833B950801611BF	4CC6AF963E2A020D57DFF392F502034CB0875A98	58C0EC7E30BC99E0CE2734126EC9DF80362F298E29DAF45DCEF654B58C0CB073
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	5DD625485C8B2407D5465CD5368615E8	CE52767ADC1CEEA662BB20F6EBAAC317A549FF5A	87DAFB5CA1C7F460C509DD1F80D815A6A6409E27AE3E6170CB0C4FCDB23EDA80
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	9104FCE224F7AFD6CC95E0DEFD68EB05	6CB9369C3E1FF77C29CA991564DCC68C3D619FD8	697ADA40F6DCC2BEC91E0C8346DDF635184CD2D1D75EA8BC69F1FAA89CF2A461
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	8AAFE0CDAA3E4981225126DC1A7E37D9	7F234184369208DD89BBA2D8224D69C2029355F7	9AF3B4A6841265B87F8ACFAF85722645CCC23EF1B7DB9492FC38CDB52C56B24B
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	6879193BEBEA4D56294DA3EECA265771	34B4D6D8C656ED70D45238C6BD0CF2D444076868	5CA9CCFD837B19C7BFADDC797484BE6A9FB24C07A367E40A1C861D95515FECF8
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	680E7D72F53549721855EBF367B211AF	DFDB0CFF6D3975C30307964F5109001ADDF3A88F	052E8034B67A6FB5D507EC5C163EE6CF71EC68DFC8ABB68E3AEFC1C36B327E15
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators	733B48FE76656D2C0A2820A39EC01FD0	A4BEB6198E44B5995D0E4F8B391CDE124462CC1F	9771C4DAEF8D976B69F32ECDA715BF02E665AF946806A21BFDCBFEDB6BBC4A22
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\flUhRq6tzZclQEJ-Vdg-IuiaDsNa[1].woff	Web Open Font Format, TrueType, length 130756, version 1.1	38CCFCEEE9C33469A63D1F9B09A217B3	CBF0D79C08B6D75978B3CF1A1362633ADC0C153D	4E5222EDBA958CB96C5CB0080FBD1506B132304B1B6029768F0C57DDDD95F15A
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\icon[1].css	ASCII text	66603C52704A5F67A333CE06B65D15F0	398A025E0B63CBACE061C9CC1C763E94ED01D92E	4B764D6D54D7F2FC5A3338D6DAFF53BE424D07B37BC8D201ACA810EE9B18A300
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\analytics[1].js	ASCII text, with very long lines	0A4E309B5F2D7439B4F8876B19F37FC7	7AC30F933A2B889EDBE5D3449F4EC90049B0E2A9	F79723478F4C48501CD49AC52B81D6244A6562B9D3F08CE8AB208A8B8878D4C4
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\js[1].js	ASCII text, with very long lines	81B8F8F72E53CBF7A980FBD3BA43C7D8	F3D3C1DC6884E8E7F37BA37EC4A4CF5A00D69EA9	63176BB7E8E859E3543E42ED3F1A2470B47591918B2E6E0B73A8117D84B52A04
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\css[1].css	ASCII text	FF16F93C81B674B8DB132C6CF46D7312	5C6207ADEDA6D534A7013011DFDA3336181BBA70	DF160F29CF2F62D3AD2946EC734B024B32B1DAC98EF29357D979DA9EA6DB8364
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\lookup[1].txt	ASCII text, with no line terminators	6FF4EF5DAF2C3D533DE7B40338F73323	2910F50834DFAFD708CF46307964EEDA0A419A9F	855D85ADEC2DC9D8CE152B969D2134406199A2365EEB8B510CF82678563D627D
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\d3.v5.min[1].js	C source, UTF-8 Unicode text, with very long lines	F0B2EC5AFC87EB622D86F587DAD23E02	B08505510B7196E07A641962DDA9C0B104EBCA58	5DBE924B3847DF010F0B8572DD6EF42EA87D6370EEFF72B13EA236247412A53C
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\gauge.min[1].js	ASCII text, with very long lines, with no line terminators	9AC9D2D812C59BA801A1036EBB966E54	89595B74EF46BBB298BF2C695CEBF92AD806CA48	1C7D701D8DA3E2C05FB44D8C4A13C13FAE937D6D7CFC3DF17EAD6798819BC5B2
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\jquery-3.5.1.min[1].js	ASCII text, with very long lines	DC5E7F18C8D36AC1D3D4753A87C98D0A	C8E1C8B386DC5B7A9184C763C88D19A346EB3342	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\summary[1].htm	HTML document, ASCII text, with CRLF line terminators	7B0775E7FEFDA016C91007EC0D556E50	8ADD58BE587F5CBE81F4840696C9D38121883D09	34EADCCE2DC55900822CE98B1E2480C9FEB65F5195F107BB698CC18463AE881B
C:\Users\user\AppData\Local\Temp\~DF03EBC80C459E6306.TMP	data	5251FECC1784DCDF66EDF4EC1F49D0E6	4B6B1145EA8AFAA922F445BDDD974936DD563155	15CF53AB94E04C2564538B957A5112724D4DE3A49401464D787797C9888BB326
C:\Users\user\AppData\Local\Temp\~DF22D8D2F9858A4A01.TMP	data	8EF6EB91F54AF9E2FFC05F0D778F90BE	9866CEBBE54DC16A54D492984969AFDC3161FD77	30D2C468E113C4D9150BC93DF987A5BE907F05EE8AFC43175F0D40D5D60DF589
C:\Users\user\AppData\Local\Temp\~DF3C49D9964B8B7017.TMP	data	AB889A32AB9ACD33E816C2422337C69A	1190C6B34DED2D295827C2A88310D10A8B90B59B	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA

Analysis Report https://summary.aquilaiajax.com/v3/summary?ref=email&crId=606c5ec27707d53875dac9da

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance:

Networking:

System Summary:

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Contacted Domains

Contacted URLs