Analysis Report http://plpixel?pid=jLO3skWo0D&action=impression&businessids=885914&source=posts

Overview

General Information

Sample URL:	http://plpixel?pid=jLO3skWo0D&action=impression&businessids=885914&source=posts
Analysis ID:	404276
Infos:
Most interesting Screenshot:
Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: classification engine

Classification label: unknown0.win@3/11@0/0

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF614860A3AB4E9802.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5900 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5900 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No contacted IP infos

ID:	404276
Product:	CloudBasic
Start time:	21:23:10
Start date:	04.05.2021
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{32844338-AD5A-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	366DBD8A4B5BD85BD90CFCA0BCEC0A48	D02249B3E98F7590D232E443BC208E884E844C02	F79856316036ABE620BE969668B0DB1100586776A8C8485A33BC4973FCA85DBF
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3284433A-AD5A-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	0BC4A94F2DE948BAA5AAB4DE625A5F0D	E3B8445B6EFC9F44CA600AF2F8FAD126BFF72816	50A267DC7C8B164744D3E3A68C3804466E6A7F685128E5D67B5E696460E96D4E
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3A29ACB8-AD5A-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	A7C4AFE86F47A68CC2D1C2A3C0ED49EA	341BD2E87D9800BC77375AA23C7CDB1415B9F4DC	88D279E0CFC99A6D65198171522C609A15B04A14C93EDE8D579D90ED2A1CF284
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\NewErrorPageTemplate[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	DFEABDE84792228093A5A270352395B6	E41258C9576721025926326F76063C2305586F76	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\down[1]	PNG image data, 15 x 15, 8-bit colormap, non-interlaced	C4F558C4C8B56858F15C09037CD6625A	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\errorPageStrings[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	D65EC06F21C379C87040B83CC1ABAC6B	208D0A0BB775661758394BE7E4AFB18357E46C8B	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\dnserror[1]	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators	2DC61EB461DA1436F5D22BCE51425660	E1B79BCAB0F073868079D807FAEC669596DC46C1	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\httpErrorPagesScripts[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	9234071287E637F85D721463C488704C	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
C:\Users\user\AppData\Local\Temp\~DF1A0CB86F20D3C844.TMP	data	214125EE412DB33C6AC3A3ECD52CAE29	BAD69F3769E63A207257050F81E7964DE9D77FF3	4F7BB2AA9F21BA9944F56786D4C6BB2F08E207EC627348FD0049996374163853
C:\Users\user\AppData\Local\Temp\~DF29084E3036BE319D.TMP	data	9BFD3C1A1F8E663FC6660CB8BE4099E5	BCA71407899674A9D2A45ABF4FBCAD34A02D08A5	1F022713FCA82387A55509E97D48F56E50E5078229E6628AC83C096CDCA101D6
C:\Users\user\AppData\Local\Temp\~DF614860A3AB4E9802.TMP	data	6C88BAB2FA686FC312A54031B610692B	7A223F0384C345D7459CB47F8D4294B81CCAA55B	7EAFC9E089F674C42270FAC20AD5F49BE5BC5CFA9AC850D032E3D6502A4B7EE8

Analysis Report http://plpixel?pid=jLO3skWo0D&action=impression&businessids=885914&source=posts

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance:

System Summary:

Screenshots

Behavior Graph

Network Map