Edit tour

Windows Analysis Report
https://netflix-xfree-watch.blogspot.com/

Overview

General Information

Sample URL:	https://netflix-xfree-watch.blogspot.com/
Analysis ID:	1348994
Infos:

Detection

HTMLPhisher

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Yara detected HtmlPhish10

Multi AV Scanner detection for submitted file

Antivirus detection for URL or domain

Phishing site detected (based on image similarity)

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1544 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1760 --field-trial-handle=1948,i,2334875612637150644,6145546944937312437,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://netflix-xfree-watch.blogspot.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 3 entries

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: https://netflix-xfree-watch.blogspot.com/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://netflix-xfree-watch.blogspot.com/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.5.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Source: https://netflix-xfree-watch.blogspot.com/	HTTP Parser: <input type="password" .../> found
Source: https://netflix-xfree-watch.blogspot.com/#LoginHelp	HTTP Parser: <input type="password" .../> found
Source: https://netflix-xfree-watch.blogspot.com/#contactus	HTTP Parser: <input type="password" .../> found

Source: unknown	HTTPS traffic detected: 23.210.0.112:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.210.0.112:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49810 version: TLS 1.2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 67.26.247.254
Source: unknown	TCP traffic detected without corresponding DNS query: 67.26.247.254
Source: unknown	TCP traffic detected without corresponding DNS query: 67.26.247.254
Source: unknown	TCP traffic detected without corresponding DNS query: 67.26.247.254
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_78.2.dr	String found in binary or memory: https://netflix-xfree-watch.blogspot.com/
Source: chromecache_78.2.dr	String found in binary or memory: https://netflix-xfree-watch.blogspot.com/favicon.ico
Source: chromecache_78.2.dr	String found in binary or memory: https://netflix-xfree-watch.blogspot.com/feeds/posts/default
Source: chromecache_78.2.dr	String found in binary or memory: https://netflix-xfree-watch.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_78.2.dr	String found in binary or memory: https://netflix-xfree-watch.blogspot.com/search
Source: chromecache_78.2.dr	String found in binary or memory: https://raviral.com/host_style/style/js-track/track.js
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com/feeds/173120118117304425/posts/default
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com/go/report-abuse
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com/profile/11127650429295498458
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/2584298328-lbx__en_gb.js
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css
Source: chromecache_78.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/325989852-widgets.js

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1760 --field-trial-handle=1948,i,2334875612637150644,6145546944937312437,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://netflix-xfree-watch.blogspot.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1760 --field-trial-handle=1948,i,2334875612637150644,6145546944937312437,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Source	Detection	Scanner	Label	Link
https://netflix-xfree-watch.blogspot.com/	100%	Avira URL Cloud	phishing
https://netflix-xfree-watch.blogspot.com/	8%	Virustotal		Browse
https://netflix-xfree-watch.blogspot.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Antivirus Detection	Reputation
accounts.google.com	142.251.163.84	true	false		high
blogspot.l.googleusercontent.com	172.253.63.132	true	false		high
s4.histats.com	54.39.128.117	true	false		high
raviral.com	172.67.161.164	true	false	6%, Virustotal, Browse	unknown
www.google.com	172.253.63.103	true	false		high
clients.l.google.com	142.251.167.139	true	false		high
assets.nflxext.com	45.57.90.1	true	false		high
ipv4.imgur.map.fastly.net	146.75.28.193	true	false	0%, Virustotal, Browse	unknown
clients2.google.com	unknown	unknown	false		high
i.imgur.com	unknown	unknown	false		high
s10.histats.com	unknown	unknown	false		high
netflix-xfree-watch.blogspot.com	unknown	unknown	false		high

Name	Malicious	Antivirus Detection	Reputation
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h6&@i1&@j1701132994658&@k737&@l6&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-178272808&@b3:1701132995&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://netflix-xfree-watch.blogspot.com/#LoginHelp	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g1&@h1&@i1&@j1701132977538&@k0&@l1&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-173856995&@b3:1701132978&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h8&@i1&@j1701133007048&@k475&@l8&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:67868316&@b3:1701133007&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h10&@i1&@j1701133019254&@k675&@l10&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:168388793&@b3:1701133019&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://netflix-xfree-watch.blogspot.com/	false		high
https://netflix-xfree-watch.blogspot.com/favicon.ico	false		high
https://raviral.com/host_style/style/js-track/track.js	false	4%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h8&@i1&@j1701133007048&@k475&@l8&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-165220228&@b3:1701133007&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h9&@i1&@j1701133018579&@k11531&@l9&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-166967521&@b3:1701133019&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://netflix-xfree-watch.blogspot.com/#contactus	false		high
https://netflix-xfree-watch.blogspot.com/responsive/sprite_v1_6.css.svg	false		high
https://s4.histats.com/stats/e.php?4583272&@Ab&@R3502&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h12&@i1&@j1701133030403&@k473&@l12&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:145147838&@b3:1701133030&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h13&@i1&@j1701133043138&@k12735&@l13&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-150278040&@b3:1701133043&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h3&@i1&@j1701132988727&@k11173&@l3&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:41284647&@b3:1701132989&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h2&@i1&@j1701132977554&@k16&@l2&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:146905653&@b3:1701132978&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h6&@i1&@j1701132994658&@k737&@l6&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-67318420&@b3:1701132995&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://assets.nflxext.com/ffe/siteui/fonts/nf-icon-v1-93.ttf	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h11&@i1&@j1701133029930&@k10676&@l11&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-54552379&@b3:1701133030&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h4&@i1&@j1701132989653&@k926&@l4&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-159392483&@b3:1701132990&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://assets.nflxext.com/ffe/siteui/vlv3/bd27b60f-02db-41da-8f5c-1558b01b44d0/17a20159-6c8b-4e60-be30-becbc0268684/DZ-en-20180813-popsignuptwoweeks-perspective_alpha_website_large.jpg	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h14&@i1&@j1701133043858&@k720&@l14&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:20413437&@b3:1701133044&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h7&@i1&@j1701133006573&@k11915&@l7&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-85789003&@b3:1701133007&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://netflix-xfree-watch.blogspot.com/Netflix_files/jquery.placeholder.label.js.download	false		high
https://netflix-xfree-watch.blogspot.com/	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g1&@h1&@i1&@j1701132977538&@k0&@l1&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-7906361&@b3:1701132978&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h12&@i1&@j1701133030403&@k473&@l12&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-199309320&@b3:1701133030&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h2&@i1&@j1701132977554&@k16&@l2&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-45679358&@b3:1701132978&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F&@w	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h10&@i1&@j1701133019254&@k675&@l10&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:161811219&@b3:1701133019&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high
https://netflix-xfree-watch.blogspot.com/Netflix_files/jquery.min.js.download	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h5&@i1&@j1701132993921&@k4268&@l5&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-104969920&@b3:1701132994&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://i.imgur.com/OabVP5H.png	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h14&@i1&@j1701133043858&@k720&@l14&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-192646182&@b3:1701133044&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23contactus&@w	false		high
https://netflix-xfree-watch.blogspot.com/nf-icon-v1-93.woff	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://netflix-xfree-watch.blogspot.com/Netflix_files/jquery.bootstrap.js.download	false		high
https://s4.histats.com/stats/0.php?4583272&@f16&@g0&@h4&@i1&@j1701132989653&@k926&@l4&@mNetflix%20Free%20Watch&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:79300969&@b3:1701132990&@b4:js15_as.js&@b5:60&@a-_0.2.1&@vhttps%3A%2F%2Fnetflix-xfree-watch.blogspot.com%2F%23LoginHelp&@w	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.161.164	raviral.com	United States	13335	CLOUDFLARENETUS	false
45.57.91.1	unknown	United States	40027	NETFLIX-ASNUS	false
45.57.90.1	assets.nflxext.com	United States	40027	NETFLIX-ASNUS	false
142.251.167.139	clients.l.google.com	United States	15169	GOOGLEUS	false
172.253.63.103	www.google.com	United States	15169	GOOGLEUS	false
172.253.63.132	blogspot.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.179.132	unknown	United States	15169	GOOGLEUS	false
54.39.128.117	s4.histats.com	Canada	16276	OVHFR	false
142.251.163.84	accounts.google.com	United States	15169	GOOGLEUS	false
146.75.28.193	ipv4.imgur.map.fastly.net	Sweden	30051	SCCGOVUS	false

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1348994
Start date and time:	2023-11-28 01:55:27 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://netflix-xfree-watch.blogspot.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.phis.win@22/36@28/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://netflix-xfree-watch.blogspot.com/#LoginHelp Browse: https://netflix-xfree-watch.blogspot.com/#contactus Browse: https://netflix-xfree-watch.blogspot.com/#contactus Browse: https://netflix-xfree-watch.blogspot.com/#LoginHelp Browse: https://netflix-xfree-watch.blogspot.com/#LoginHelp Browse: https://netflix-xfree-watch.blogspot.com/#contactus

Name	Source	Malicious	Reputation
https://www.blogger.com	chromecache_78.2.dr	false	high
https://www.blogger.com/feeds/173120118117304425/posts/default	chromecache_78.2.dr	false	high
https://www.blogger.com/go/report-abuse	chromecache_78.2.dr	false	high
https://www.blogger.com/profile/11127650429295498458	chromecache_78.2.dr	false	high
https://www.blogger.com/static/v1/widgets/325989852-widgets.js	chromecache_78.2.dr	false	high
https://netflix-xfree-watch.blogspot.com/search	chromecache_78.2.dr	false	high
https://netflix-xfree-watch.blogspot.com/feeds/posts/default	chromecache_78.2.dr	false	high
https://www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css	chromecache_78.2.dr	false	high
https://netflix-xfree-watch.blogspot.com/feeds/posts/default?alt=rss	chromecache_78.2.dr	false	high
https://www.blogger.com/static/v1/jsbin/2584298328-lbx__en_gb.js	chromecache_78.2.dr	false	high

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 12 tables, 1st "DSIG", 14 names, Macintosh, Copyright \251 2017 NETFLIXnf-iconRegular1.092;UKWN;nf-icon-Regularnf-icon RegularVersion 1.092n
Category:	downloaded
Size (bytes):	93944
Entropy (8bit):	6.5958696380719495
Encrypted:	false
SSDEEP:	1536:1YDHTf5xKlBR9mb9Z2ir+TLXJM4XIgALrFgOvudRtvai420DMvH1uoYtEtqw1jVF:1YDHTf5+BRsb9Z2i+TLXJM4XGlvuZvBH
MD5:	F6261A53A3FB19BD8B4AF3D954A8ED3C
SHA1:	0F65C7A4B13464470C52392B4FBE14731E14DBD3
SHA-256:	DF9A8B117A4FD266818DEE3D12D7080EBDC7D1E1802445D3584D2C7D78BD9725
SHA-512:	8D0ACBF5B1EA9A1B140CF9E9DAC7391C43D14C52CA568C897C27C17BEF36C354A635BB5DAAB784EC0A76DAC03819520A61191EFDDC4C7A3343560151078A7504
Malicious:	false
Reputation:	low
URL:	https://assets.nflxext.com/ffe/siteui/fonts/nf-icon-v1-93.ttf
Preview:	...........@DSIG......n.....GSUB......n.....OS/2g.b...W....`cmap...q..X....$glyf*p........M.head"?.%..Q....6hhea......W....$hmtxMf.j..QL...Dloca.hH ..M....$maxp.(.W..M.... name.!.s..]8....postZ....._(.......b.................'.+.1.=.H...!.!..35.#53'.353.#5#.35'.#.35'.3.#.3535'#53'.35#5'.3.#.35#535..3..35#735.....O...#jjG$#j#.#...FFjFj##F.FiEF.FF.JJ.lJ"`. .0xxU2.;.2Tww.E$i@#'#J#@&$n$J.#'##'#..#1##1#..................(.2.=.C.T..$........3..3..77."..6767...!.!.%."..#5!...#.#.!.!.......&'.3.....#...&''..&'&'..3.73..T.4.BW...FJ`.8$..G.a......e1...........-g.?......N&..f.)A?kn2/-....bi.=..............!.~."..........!.v....N..........@............J.D....s.......................................3.!..#..............................._.......#./.7.=.K.W.c.k.u.\|......7'.3.53...'.%.'.3..#...#..7.'5!.....%.3..#...#.#....''.3!..''...3.73...''.''.7.3.7.#.#.#.35#.35#.75..35!.3.7.#.35#.3.3.5#'.#....#!....3....#.#.ee.>.\.O...b.\_cc_.X./ZZu.B.\_ccy.;f..b{..]tf..K.:.\|`H]kpP..pR..`.U..g...jmm..j..\..]P..l

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://netflix-xfree-watch.blogspot.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Windows Analysis Report
https://netflix-xfree-watch.blogspot.com/