Windows Analysis Report https://sites.google(dot)com/view/settlements213/home

Overview

General Information

Sample URL:	https://sites.google(dot)com/view/settlements213/home
Analysis ID:	438534
Infos:
Most interesting Screenshot:
Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: ~DF680295EA62D7A067.TMP.2.dr	String found in binary or memory: https://sites.google(dot)com/view/settlements213/home
Source: {F529691E-D3BF-11EB-90E4-ECF4BB862DED}.dat.2.dr	String found in binary or memory: https://sites.google(dot)com/view/settlements213/homeRoot

Source: classification engine

Classification label: unknown0.win@3/11@0/0

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF27BF5AC1CCEFB8D5.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5624 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5624 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No contacted IP infos

ID:	438534
Product:	CloudBasic
Start time:	18:10:49
Start date:	22.06.2021
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{F529691C-D3BF-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	878F6E75560A7BCF665E62368F78DD52	D521D2562C35D68C3F41DD2B30D7095FEE2181D0	EDA61623F2DC58E113C0199D68DEF0BF1F154447EFE77693F5DC91A1DA68E8B9
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F529691E-D3BF-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	46345BF1E5C465D00EDB255BCE937172	201389B59CF4245D6C1128400E92D8FC8A0E78D7	1A3B87E496FDBD76C5A5EC3042B459BB73D46E4C34F1AF3ECC1D68451C3D10DE
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F529691F-D3BF-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	78DB92FCD8D7B4451753742A858B6AE2	5A7A49326FBD8B710013C2E70EC8A2CE3A289513	4F043D952F80067378AD85AC0F17DFB8DCE27EA96655AAB75C0573DF8D730585
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\errorPageStrings[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	D65EC06F21C379C87040B83CC1ABAC6B	208D0A0BB775661758394BE7E4AFB18357E46C8B	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\NewErrorPageTemplate[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	DFEABDE84792228093A5A270352395B6	E41258C9576721025926326F76063C2305586F76	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\httpErrorPagesScripts[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	9234071287E637F85D721463C488704C	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\dnserror[1]	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators	2DC61EB461DA1436F5D22BCE51425660	E1B79BCAB0F073868079D807FAEC669596DC46C1	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\down[1]	PNG image data, 15 x 15, 8-bit colormap, non-interlaced	C4F558C4C8B56858F15C09037CD6625A	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
C:\Users\user\AppData\Local\Temp\~DF27BF5AC1CCEFB8D5.TMP	data	2F46CFB490CCBDBCFBD28792D005A077	A56897CEDC5A1DB503A461A5FF44372A7EBB659A	44976D52E7929422BC3823922CAF0E45C98B3E08E635E88189458D081C6D094D
C:\Users\user\AppData\Local\Temp\~DF511CF6694F723CC1.TMP	data	AB889A32AB9ACD33E816C2422337C69A	1190C6B34DED2D295827C2A88310D10A8B90B59B	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
C:\Users\user\AppData\Local\Temp\~DF680295EA62D7A067.TMP	data	FD15FB28C638EE20D913FFFFAE826077	8C0DE9E86AAF0AE7AB5084457630854A3A8B4DFA	67246C462856CE3B97289FB2F5828FE0B5056D1CAFD3DC77F8831ED0CCBF1DD3

Windows Analysis Report https://sites.google(dot)com/view/settlements213/home

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance:

Networking:

System Summary:

Screenshots

Behavior Graph

Network Map