urlquery.net

Artifacts

Extracted files, shortcuts, Telegram observations, PDF documents, and clipboard content

Files1Telegram2

Extracted files

1
FILE

File #01

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

URL

HTTPS
https://diamondbehavioralhealth.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=cook&c=&c=&c=&c=&c=&c=&c=

IP / ASN

United States 15.204.108.68

AS16276 · OVH SAS

Telegram observations

2
TELEGRAM TOKEN

Telegram token #01

Token not recorded as revoked

URL

HTTPS
https://emaycartabogados.com/cgibin/docu.html

IP / ASN

United States 142.214.190.131

AS395111 · KVCNET-2009

TELEGRAM TOKEN

Telegram token #02

Token not recorded as revoked

URL

ABOUT
about://about:srcdoc#212

IP / ASN

Country unknown 0.0.0.0

Unknown

Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot