Edit tour

Windows Analysis Report
https://the-fish-tank.netlify.app

Overview

General Information

Sample URL:	https://the-fish-tank.netlify.app
Analysis ID:	1355477
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

HTML page contains hidden URLs or javascript code

Program does not show much activity (idle)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5440 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5280 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6400 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://the-fish-tank.netlify.app MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://codepen.io/Mark_Bowley/pen/PozwyP

HTTP Parser: Base64 decoded: {"aud":"https://identitytoolkit.googleapis.com/google.identity.identitytoolkit.v1.IdentityToolkit","claims":{"ownerId":"VoDkNZ","admin":false},"exp":1701963046,"iat":1701959446,"iss":"firebase-adminsdk-8okyl@codepen-store-production.iam.gserviceaccount.co...

Source: https://the-fish-tank.netlify.app/	HTTP Parser: No favicon
Source: https://the-fish-tank.netlify.app/	HTTP Parser: No favicon
Source: https://www.deviantart.com/_nsfgfb/?realEstateId=9c14ea7a-8c35-429a-9857-00ad04ebb4c1&theme=dark&biClientId=e5f69565-bce6-f667-7f3b-c10e09d60082&biClientIdSigned=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJiaUNsaWVudElkIjoiZTVmNjk1NjUtYmNlNi1mNjY3LTdmM2ItYzEwZTA5ZDYwMDgyIiwidHMiOjE3MDE5NTk0MTgsInVzZXJVdWlkIjoiZTVmNjk1NjUtYmNlNi1mNjY3LTdmM2ItYzEwZTA5ZDYwMDgyIn0.sEtWjtPUqWbAQTB7uEjB11jyjfTgc1R1wXiPJGlbZb0&newApi=2	HTTP Parser: No favicon
Source: https://artfight.net/	HTTP Parser: No favicon
Source: https://www.deviantart.com/_nsfgfb/?realEstateId=9c14ea7a-8c35-429a-9857-00ad04ebb4c1&theme=dark&biClientId=e5f69565-bce6-f667-7f3b-c10e09d60082&biClientIdSigned=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJiaUNsaWVudElkIjoiZTVmNjk1NjUtYmNlNi1mNjY3LTdmM2ItYzEwZTA5ZDYwMDgyIiwidHMiOjE3MDE5NTk0NjIsInVzZXJVdWlkIjoiZTVmNjk1NjUtYmNlNi1mNjY3LTdmM2ItYzEwZTA5ZDYwMDgyIn0.k-UcRjiBsCITJMjYsZJYtVpxmCQPAGnlQHh3Ab9tlWo&newApi=2	HTTP Parser: No favicon

Source: https://artfight.net/login	HTTP Parser: No <meta name="author".. found
Source: https://artfight.net/login	HTTP Parser: No <meta name="author".. found
Source: https://artfight.net/login	HTTP Parser: No <meta name="author".. found
Source: https://artfight.net/login	HTTP Parser: No <meta name="author".. found

Source: https://artfight.net/login	HTTP Parser: No <meta name="copyright".. found
Source: https://artfight.net/login	HTTP Parser: No <meta name="copyright".. found
Source: https://artfight.net/login	HTTP Parser: No <meta name="copyright".. found
Source: https://artfight.net/login	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_439.2.dr	String found in binary or memory: http://adamwdraper.github.com/Numeral-js/
Source: chromecache_586.2.dr, chromecache_303.2.dr, chromecache_268.2.dr, chromecache_510.2.dr, chromecache_355.2.dr, chromecache_354.2.dr, chromecache_600.2.dr, chromecache_638.2.dr, chromecache_393.2.dr, chromecache_524.2.dr, chromecache_514.2.dr, chromecache_269.2.dr, chromecache_281.2.dr, chromecache_415.2.dr, chromecache_428.2.dr, chromecache_410.2.dr, chromecache_284.2.dr, chromecache_495.2.dr, chromecache_387.2.dr, chromecache_660.2.dr, chromecache_297.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpExt/2008-02-29/
Source: chromecache_293.2.dr, chromecache_439.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: http://officialartfight.deviantart.com/
Source: chromecache_357.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_702.2.dr	String found in binary or memory: http://www.w.org/1999/02/22-rdf-syntax-ns#
Source: chromecache_485.2.dr	String found in binary or memory: https://a.deviantart.net
Source: chromecache_485.2.dr	String found in binary or memory: https://a.deviantart.net/avatars/p/i/pinkflamess.gif?1701959462
Source: chromecache_605.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js
Source: chromecache_605.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933856.johnathan
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933857.genghis-krruk
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933858.siro-frore-ravinet
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933859.gamma-main-oc
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933860.ragdir
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933861.grendel
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933862.the-slugs
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/character/3933863.species-characters
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/donate
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/favicon.ico
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/images/default_banner.jpg
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/images/logo40.png
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/about
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/contact-us
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/credits
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/faq
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/guide-attacks
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/guide-bbcode
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/guide-maturity
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/help
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/privacy
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/rules
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/info/tos
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/login
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/lolwut
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/news
Source: chromecache_507.2.dr	String found in binary or memory: https://artfight.net/news/83.nov-art-fight-update
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/register
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://artfight.net/shop
Source: chromecache_605.2.dr	String found in binary or memory: https://artfight.net/~Pinkflamess
Source: chromecache_605.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_597.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_597.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_605.2.dr, chromecache_350.2.dr, chromecache_717.2.dr	String found in binary or memory: https://codepen.io/Mark_Bowley/pen/PozwyP
Source: chromecache_350.2.dr	String found in binary or memory: https://cpwebassets.codepen.io/assets/favicon/apple-touch-icon-5ae1a0698dcc2402e9712f7d01ed509a57814
Source: chromecache_350.2.dr	String found in binary or memory: https://cpwebassets.codepen.io/assets/favicon/favicon-aec34940fbc1a6e787974dcd360f2c6b63348d4b1f4e06
Source: chromecache_350.2.dr	String found in binary or memory: https://cpwebassets.codepen.io/assets/favicon/logo-pin-b4b4269c16397ad2f0f7a01bcdf513a1994f4c94b8af2
Source: chromecache_392.2.dr	String found in binary or memory: https://cpwebassets.codepen.io/assets/packs/
Source: chromecache_597.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_597.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_597.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://discord.gg/artfight
Source: chromecache_401.2.dr	String found in binary or memory: https://ezgif.com/resize
Source: chromecache_352.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_352.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_352.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Nunito);.donation
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_485.2.dr	String found in binary or memory: https://frog.wix.com
Source: chromecache_352.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_352.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_448.2.dr	String found in binary or memory: https://hertzen.com
Source: chromecache_448.2.dr	String found in binary or memory: https://html2canvas.hertzen.com
Source: chromecache_485.2.dr	String found in binary or memory: https://hub.deviantart.net
Source: chromecache_485.2.dr	String found in binary or memory: https://images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_AeCXdFFLBhSxJzEeTTWJw6tfaB3Z8SADJ230Qg2VIQLeJW49mL3pitIYu2e
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_DneZGbICK4ADqwI23wQPQET2lpTH4Awhz0pL3WsP6sCW0FTD0GbjvA7uMIz
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_NTUGBOQjnAr4yDVw0nnNwjeZEbFrSdrbCb4UCHe59Up1xGDktZtEjOe0CwF
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_hp5XIsSVdeYUOwoUyC0X0hYG0YZH7L6lkXA1YEllfw7rgZWHucSAU2SCetY
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_iDGZuMiKoTz4iA6x7va16Y3nqXuGeUYyIfUtHSdn5i65GsNGxMBrZCeV3iP
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_kdlxjydNJxzglPLkwVgkVvqB4cgciouwI3Kq7jDMV8PeV25sv2zLcfnpDzJ
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_yVyA7hvPRRKAZH2jfA7u2Wd4eHoEKXTiVmRTK2LTB4M2AP3mE1eZDsmKkfH
Source: chromecache_507.2.dr	String found in binary or memory: https://images.artfight.net/character/th_yuPh7Bmhh0PvLbBQPvECLX3S4psp2vXaaTeI2tsX0izQAot8HWrpSjHGSM2
Source: chromecache_485.2.dr	String found in binary or memory: https://img-deviantart.wixmp.com
Source: chromecache_597.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_597.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/browser-support.min.js?20220218
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/android-144.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/android-192.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/android-48.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/android-96.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/da_favicon_v2.ico
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/favicon-v2-16x16.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/favicon-v2-32x32.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/ios-120.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/ios-152.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/ios-180.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/ios-76.png
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/icons/touchbar-mark-v2.svg
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/popups/hover-component/il31_-_journal_v3.svg
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/popups/hover-component/il32_-_literature_v3.svg
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/eclipse/popups/hover-component/il62_-_commission_v3.svg
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_bd.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_lt.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_md.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_rg.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_xbd.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/misc/symbols/deviantart-symbols-v7.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://st.deviantart.net/misc/symbols/deviantart-symbols6.woff2
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/services/da-chat-worker/3.1965.0/app.bundle.min.js
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/services/da-user-profile/1.7123.0/app.bundle.min.js
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/services/da-user-profile/1.7123.0/app.min.css
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/unpkg/
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/unpkg/immutable
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/unpkg/intersection-observer
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/unpkg/lodash
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/unpkg/react
Source: chromecache_485.2.dr	String found in binary or memory: https://static.parastorage.com/unpkg/react-dom
Source: chromecache_597.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_597.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_597.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_597.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_507.2.dr	String found in binary or memory: https://tally.so/r/mDp8Jq
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://twitch.tv/theartfight
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://twitter.com/theartfight
Source: chromecache_597.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_485.2.dr	String found in binary or memory: https://www.deviantart.com/pinkflamess
Source: chromecache_597.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_597.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_597.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.
Source: chromecache_311.2.dr, chromecache_507.2.dr	String found in binary or memory: https://www.instagram.com/artfight
Source: chromecache_485.2.dr	String found in binary or memory: https://www.wix.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://the-fish-tank.netlify.app
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5280 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5280 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Data Obfuscation	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Junk Data	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials

Source	Detection	Scanner	Label
https://artfight.net	0%	Avira URL Cloud	safe
https://artfight.net/info/rules	0%	Avira URL Cloud	safe
https://artfight.net/donate	0%	Avira URL Cloud	safe
https://artfight.net/character/3933861.grendel	0%	Avira URL Cloud	safe
https://artfight.net/character/3933860.ragdir	0%	Avira URL Cloud	safe
https://artfight.net/~Pinkflamess	0%	Avira URL Cloud	safe
https://artfight.net/character/3933862.the-slugs	0%	Avira URL Cloud	safe
https://artfight.net/info/credits	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_DneZGbICK4ADqwI23wQPQET2lpTH4Awhz0pL3WsP6sCW0FTD0GbjvA7uMIz	0%	Avira URL Cloud	safe
https://artfight.net/info/guide-attacks	0%	Avira URL Cloud	safe
https://artfight.net/info/contact-us	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.	0%	Avira URL Cloud	safe
https://artfight.net/info/faq	0%	Avira URL Cloud	safe
https://artfight.net/images/logo40.png	0%	Avira URL Cloud	safe
https://artfight.net/info/tos	0%	Avira URL Cloud	safe
https://img-deviantart.wixmp.com	0%	Avira URL Cloud	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://artfight.net/character/3933858.siro-frore-ravinet	0%	Avira URL Cloud	safe
https://artfight.net/lolwut	0%	Avira URL Cloud	safe
https://artfight.net/character/3933857.genghis-krruk	0%	Avira URL Cloud	safe
https://artfight.net/character/3933859.gamma-main-oc	0%	Avira URL Cloud	safe
https://artfight.net/info/help	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_iDGZuMiKoTz4iA6x7va16Y3nqXuGeUYyIfUtHSdn5i65GsNGxMBrZCeV3iP	0%	Avira URL Cloud	safe
https://artfight.net/character/3933863.species-characters	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_hp5XIsSVdeYUOwoUyC0X0hYG0YZH7L6lkXA1YEllfw7rgZWHucSAU2SCetY	0%	Avira URL Cloud	safe
https://artfight.net/shop	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_yVyA7hvPRRKAZH2jfA7u2Wd4eHoEKXTiVmRTK2LTB4M2AP3mE1eZDsmKkfH	0%	Avira URL Cloud	safe
https://artfight.net/favicon.ico	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_yuPh7Bmhh0PvLbBQPvECLX3S4psp2vXaaTeI2tsX0izQAot8HWrpSjHGSM2	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_NTUGBOQjnAr4yDVw0nnNwjeZEbFrSdrbCb4UCHe59Up1xGDktZtEjOe0CwF	0%	Avira URL Cloud	safe
https://images.artfight.net/character/th_kdlxjydNJxzglPLkwVgkVvqB4cgciouwI3Kq7jDMV8PeV25sv2zLcfnpDzJ	0%	Avira URL Cloud	safe
https://artfight.net/info/guide-maturity	0%	Avira URL Cloud	safe
https://artfight.net/info/about	0%	Avira URL Cloud	safe
https://artfight.net/news	0%	Avira URL Cloud	safe

Name	Malicious	Reputation
https://artfight.net/login	false	unknown
about:blank	false	low
https://www.deviantart.com/_nsfgfb/?realEstateId=9c14ea7a-8c35-429a-9857-00ad04ebb4c1&theme=dark&biClientId=e5f69565-bce6-f667-7f3b-c10e09d60082&biClientIdSigned=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJiaUNsaWVudElkIjoiZTVmNjk1NjUtYmNlNi1mNjY3LTdmM2ItYzEwZTA5ZDYwMDgyIiwidHMiOjE3MDE5NTk0NjIsInVzZXJVdWlkIjoiZTVmNjk1NjUtYmNlNi1mNjY3LTdmM2ItYzEwZTA5ZDYwMDgyIn0.k-UcRjiBsCITJMjYsZJYtVpxmCQPAGnlQHh3Ab9tlWo&newApi=2	false	high
https://the-fish-tank.netlify.app/	false	unknown
https://codepen.io/Mark_Bowley/pen/PozwyP	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_605.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_597.2.dr	false		high
https://artfight.net	chromecache_605.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://static.parastorage.com/unpkg/immutable	chromecache_485.2.dr	false		high
https://st.deviantart.net/eclipse/icons/da_favicon_v2.ico	chromecache_485.2.dr	false		high
https://html2canvas.hertzen.com	chromecache_448.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_597.2.dr	false		high
https://st.deviantart.net/eclipse/popups/hover-component/il31_-_journal_v3.svg	chromecache_485.2.dr	false		high
https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_bd.woff2	chromecache_485.2.dr	false		high
https://hub.deviantart.net	chromecache_485.2.dr	false		high
https://artfight.net/info/rules	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_597.2.dr	false		high
https://a.deviantart.net/avatars/p/i/pinkflamess.gif?1701959462	chromecache_485.2.dr	false		high
https://codepen.io/Mark_Bowley/pen/PozwyP	chromecache_605.2.dr, chromecache_350.2.dr, chromecache_717.2.dr	false		high
https://st.deviantart.net/eclipse/icons/android-144.png	chromecache_485.2.dr	false		high
https://fontawesome.com	chromecache_352.2.dr	false		high
https://artfight.net/character/3933862.the-slugs	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/donate	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_rg.woff2	chromecache_485.2.dr	false		high
https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_xbd.woff2	chromecache_485.2.dr	false		high
https://artfight.net/~Pinkflamess	chromecache_605.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_597.2.dr	false		high
https://cpwebassets.codepen.io/assets/favicon/logo-pin-b4b4269c16397ad2f0f7a01bcdf513a1994f4c94b8af2	chromecache_350.2.dr	false		high
https://artfight.net/login	chromecache_311.2.dr, chromecache_507.2.dr	false		unknown
https://artfight.net/character/3933860.ragdir	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/character/3933861.grendel	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/info/credits	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/info/guide-attacks	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/eclipse/icons/android-96.png	chromecache_485.2.dr	false		high
https://images.artfight.net/character/th_DneZGbICK4ADqwI23wQPQET2lpTH4Awhz0pL3WsP6sCW0FTD0GbjvA7uMIz	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_597.2.dr	false		high
https://artfight.net/info/faq	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/info/contact-us	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.	chromecache_597.2.dr	false	Avira URL Cloud: safe	low
https://img-deviantart.wixmp.com	chromecache_485.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/eclipse/icons/ios-180.png	chromecache_485.2.dr	false		high
https://st.deviantart.net/eclipse/icons/ios-120.png	chromecache_485.2.dr	false		high
https://static.parastorage.com/services/da-user-profile/1.7123.0/app.min.css	chromecache_485.2.dr	false		high
https://st.deviantart.net/eclipse/icons/ios-76.png	chromecache_485.2.dr	false		high
https://ezgif.com/resize	chromecache_401.2.dr	false		high
https://www.apache.org/licenses/	chromecache_597.2.dr	false		high
https://st.deviantart.net/eclipse/icons/android-192.png	chromecache_485.2.dr	false		high
https://twitter.com/theartfight	chromecache_311.2.dr, chromecache_507.2.dr	false		high
https://st.deviantart.net/misc/symbols/deviantart-symbols-v7.woff2	chromecache_485.2.dr	false		high
https://artfight.net/images/logo40.png	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_597.2.dr	false		high
http://officialartfight.deviantart.com/	chromecache_311.2.dr, chromecache_507.2.dr	false		high
https://www.deviantart.com/pinkflamess	chromecache_485.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_597.2.dr	false		high
https://static.parastorage.com/unpkg/intersection-observer	chromecache_485.2.dr	false		high
https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_md.woff2	chromecache_485.2.dr	false		high
https://artfight.net/info/tos	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://static.parastorage.com/unpkg/lodash	chromecache_485.2.dr	false		high
https://artfight.net/character/3933858.siro-frore-ravinet	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/eclipse/icons/ios-152.png	chromecache_485.2.dr	false		high
https://st.deviantart.net/eclipse/icons/favicon-v2-32x32.png	chromecache_485.2.dr	false		high
https://static.parastorage.com/unpkg/	chromecache_485.2.dr	false		high
https://static.parastorage.com/unpkg/react	chromecache_485.2.dr	false		high
https://st.deviantart.net/eclipse/icons/touchbar-mark-v2.svg	chromecache_485.2.dr	false		high
https://st.deviantart.net/eclipse/popups/hover-component/il62_-_commission_v3.svg	chromecache_485.2.dr	false		high
https://artfight.net/character/3933857.genghis-krruk	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/eclipse/icons/favicon-v2-16x16.png	chromecache_485.2.dr	false		high
https://artfight.net/character/3933863.species-characters	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/misc/symbols/deviantart-symbols6.woff2	chromecache_485.2.dr	false		high
https://www.instagram.com/artfight	chromecache_311.2.dr, chromecache_507.2.dr	false		high
https://artfight.net/lolwut	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://st.deviantart.net/fonts/devioussans-1-110/devioussans_w_lt.woff2	chromecache_485.2.dr	false		high
https://artfight.net/character/3933859.gamma-main-oc	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/info/help	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://cpwebassets.codepen.io/assets/favicon/favicon-aec34940fbc1a6e787974dcd360f2c6b63348d4b1f4e06	chromecache_350.2.dr	false		high
https://images.artfight.net/character/th_yVyA7hvPRRKAZH2jfA7u2Wd4eHoEKXTiVmRTK2LTB4M2AP3mE1eZDsmKkfH	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_597.2.dr	false		high
https://images.artfight.net/character/th_hp5XIsSVdeYUOwoUyC0X0hYG0YZH7L6lkXA1YEllfw7rgZWHucSAU2SCetY	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://hertzen.com	chromecache_448.2.dr	false		high
https://images.artfight.net/character/th_iDGZuMiKoTz4iA6x7va16Y3nqXuGeUYyIfUtHSdn5i65GsNGxMBrZCeV3iP	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_597.2.dr	false		high
https://artfight.net/shop	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://artfight.net/info/guide-maturity	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://a.deviantart.net	chromecache_485.2.dr	false		high
https://static.parastorage.com/unpkg/react-dom	chromecache_485.2.dr	false		high
https://fontawesome.com/license	chromecache_352.2.dr	false		high
https://artfight.net/favicon.ico	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	chromecache_311.2.dr, chromecache_507.2.dr	false		high
https://artfight.net/news	chromecache_311.2.dr, chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://images.artfight.net/character/th_kdlxjydNJxzglPLkwVgkVvqB4cgciouwI3Kq7jDMV8PeV25sv2zLcfnpDzJ	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_597.2.dr	false		high
https://artfight.net/info/about	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
http://adamwdraper.github.com/Numeral-js/	chromecache_439.2.dr	false		high
https://images.artfight.net/character/th_yuPh7Bmhh0PvLbBQPvECLX3S4psp2vXaaTeI2tsX0izQAot8HWrpSjHGSM2	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
http://jedwatson.github.io/classnames	chromecache_293.2.dr, chromecache_439.2.dr	false	URL Reputation: safe	unknown
https://st.deviantart.net/eclipse/icons/android-48.png	chromecache_485.2.dr	false		high
https://images.artfight.net/character/th_NTUGBOQjnAr4yDVw0nnNwjeZEbFrSdrbCb4UCHe59Up1xGDktZtEjOe0CwF	chromecache_507.2.dr	false	Avira URL Cloud: safe	unknown
https://www.wix.com	chromecache_485.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_357.2.dr	false		high
https://frog.wix.com	chromecache_485.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
65.8.178.61	unknown	United States	16509	AMAZON-02US	false
18.239.225.73	unknown	United States	16509	AMAZON-02US	false
192.178.50.35	unknown	United States	15169	GOOGLEUS	false
192.178.50.74	unknown	United States	15169	GOOGLEUS	false
34.96.106.200	unknown	United States	15169	GOOGLEUS	false
142.250.64.138	unknown	United States	15169	GOOGLEUS	false
162.159.135.233	unknown	United States	13335	CLOUDFLARENETUS	false
44.219.53.183	unknown	United States	14618	AMAZON-AESUS	false
18.239.225.18	unknown	United States	16509	AMAZON-02US	false
167.99.117.8	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
104.131.3.131	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
104.18.8.7	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.217.202	unknown	United States	15169	GOOGLEUS	false
13.249.98.8	unknown	United States	16509	AMAZON-02US	false
162.159.129.233	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.3.68	unknown	United States	15169	GOOGLEUS	false
13.249.98.93	unknown	United States	16509	AMAZON-02US	false
52.24.63.113	unknown	United States	16509	AMAZON-02US	false
104.22.18.83	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.66.133	unknown	United States	54113	FASTLYUS	false
34.149.206.255	unknown	United States	2686	ATGS-MMD-ASUS	false
162.159.134.233	unknown	United States	13335	CLOUDFLARENETUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
192.178.50.67	unknown	United States	15169	GOOGLEUS	false
192.178.50.46	unknown	United States	15169	GOOGLEUS	false
151.101.1.84	unknown	United States	54113	FASTLYUS	false
172.217.3.72	unknown	United States	15169	GOOGLEUS	false
35.186.245.179	unknown	United States	15169	GOOGLEUS	false
142.250.217.206	unknown	United States	15169	GOOGLEUS	false
142.250.217.227	unknown	United States	15169	GOOGLEUS	false
13.249.98.22	unknown	United States	16509	AMAZON-02US	false
142.250.217.196	unknown	United States	15169	GOOGLEUS	false
142.250.217.174	unknown	United States	15169	GOOGLEUS	false
104.17.14.48	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
65.8.178.4	unknown	United States	16509	AMAZON-02US	false
142.251.35.227	unknown	United States	15169	GOOGLEUS	false
54.84.112.33	unknown	United States	14618	AMAZON-AESUS	false
142.250.217.234	unknown	United States	15169	GOOGLEUS	false
54.84.236.175	unknown	United States	14618	AMAZON-AESUS	false
104.21.13.32	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.217.173	unknown	United States	15169	GOOGLEUS	false
172.67.197.162	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.217.170	unknown	United States	15169	GOOGLEUS	false

IP
192.168.2.7
192.168.2.16
192.168.2.4

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1355477
Start date and time:	2023-12-07 15:29:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://the-fish-tank.netlify.app
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/470@0/47
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.deviantart.com/pinkflamess Browse: https://artfight.net/~Pinkflamess Browse: https://artfight.net/ Browse: https://codepen.io/Mark_Bowley/pen/PozwyP Browse: https://www.deviantart.com/pinkflamess Browse: https://artfight.net/~Pinkflamess

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1558629
Entropy (8bit):	7.976473158479443
Encrypted:	false
SSDEEP:	24576:gFATCUc22qcBPLhI6G6hkp/HT7DzPOafrpxi578IEKYNmja+pPHUAyOPYabU61:gSo2i9K6PGh3Dr/fbiZ8IEZmDUOAabUG
MD5:	388761D0D735A4FFE6130B46DF2F3974
SHA1:	64F37007CEF4BC8AD8C7DECCC905841C4FD99582
SHA-256:	63FC8C2F1201BDCF5F0FE95D4D197F681769EF5E4C423A17FAB6A5859FF28052
SHA-512:	0B6EBF1A4B9CF6C956331217C299151ADB07952D429B1934E700CD70623ED670F86C984F1A49626705312C2EA19E2F8F833A2E27412739724F5756DC716EA46F
Malicious:	false
Reputation:	low
URL:	https://the-fish-tank.netlify.app/Images/Fish/28/Thumb.png
Preview:	.PNG........IHDR................0....sRGB.........eXIfMM.*.............................J...........R.(...........i.........Z.............................................................. ......pHYs...M...M.../...~iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:Iptc4xmpExt="http://iptc.org/std/Iptc4xmpExt/2008-02-29/">. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">Untitled Artwork</rdf:li>. </rdf:Alt>. </dc:title>. <tiff:YResolution>132</tiff:YResolution>. <tiff:XResolution>132</tiff:XResolution>. <tiff:PhotometricInterpretation>2</tiff:PhotometricInterpretation>. <tiff:ResolutionUnit>2</tiff:ResolutionUnit>. <Iptc4xmp

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6254
Entropy (8bit):	7.776791875706382
Encrypted:	false
SSDEEP:	192:2kknFHnh4mS8CRlNlEWbtJBeBijiGq6TFWc:SnFHTMxfZvhh
MD5:	C8A466CB1AF027DEAAFA481CFF8319A4
SHA1:	AD942E58082E0288575CDF08931962DE201D463A
SHA-256:	1DD4A471106EAC27CB8CB85E4D8670BD9A8BF2C2628E6CA9E388FA55C74D2747
SHA-512:	90AA939497982D8962FC6DE351BA9AE85DF02285FFFF204E485F46BDED070C547154299C2CCAC407231D36FDB0DDB73FED135ED6007CEBB5B666EB95F08519D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2019-06-13T17:24:19-06:00" xmp:ModifyDate="2019-06-13T17:27:38-06:00" xmp:MetadataDate="2019-06-13T17:27:38-06:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:f3ccb58b-f626-0e4c-b1ca-b73aa8624b8a" xmpMM:DocumentID="adobe:docid:photoshop:12fe8e43-54e4-f940-9a4d-9db104e8d6f

Target ID:	0
Start time:	15:29:50
Start date:	07/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	15:29:53
Start date:	07/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	15:29:55
Start date:	07/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://the-fish-tank.netlify.app
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	4
Start time:	15:29:57
Start date:	07/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5280 --field-trial-handle=1896,i,12373228491545469739,16209872199624560157,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://the-fish-tank.netlify.app

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Anti Debugging

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Windows Analysis Report
https://the-fish-tank.netlify.app