Edit tour

Windows Analysis Report
https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#

Overview

General Information

Sample URL:	https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#
Analysis ID:	1435388
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on logo match)

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

Invalid 'forgot password' link found

Program does not show much activity (idle)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5852 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on logo match)

Source: https://accounts.google.com/gsi/button?theme=outline&size=large&shape=circle&logo_alignment=center&text=signup_with&width=300&client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&iframe_id=gsi_340865_717821&as=uRoRuXmetPmhxQ1I

Matcher: Template: wetransfer matched

Source: https://auth.wetransfer.com/login?state=hKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw&client=dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc&protocol=oauth2&audience=aud%3A%2F%2Ftransfer-api-prod.wetransfer%2F&redirect_uri=https%3A%2F%2Fwetransfer.com%2Faccount%2Fcallback%3Fmessage%3DThis%2BURL%2Bcan%2Bbe%2Bused%2Bonly%2Bonce%26success%3Dfalse%26finalizeSSOAuth%3D1%26login%3D1&cache=%5Bobject%20Object%5D&initialScreen=login&lang=en&scope=openid%20profile%20email%20offline_access&response_type=code&response_mode=query&nonce=c1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%3D%3D&code_challenge=dq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k&code_challenge_method=S256&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9	HTTP Parser: Iframe src: https://tagging.wetransfer.com/ns.html?id=GTM-NS54WBW
Source: https://auth.wetransfer.com/login?state=hKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw&client=dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc&protocol=oauth2&audience=aud%3A%2F%2Ftransfer-api-prod.wetransfer%2F&redirect_uri=https%3A%2F%2Fwetransfer.com%2Faccount%2Fcallback%3Fmessage%3DThis%2BURL%2Bcan%2Bbe%2Bused%2Bonly%2Bonce%26success%3Dfalse%26finalizeSSOAuth%3D1%26login%3D1&cache=%5Bobject%20Object%5D&initialScreen=login&lang=en&scope=openid%20profile%20email%20offline_access&response_type=code&response_mode=query&nonce=c1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%3D%3D&code_challenge=dq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k&code_challenge_method=S256&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fauth.wetransfer.com%2Flogin%3Fstate%3DhKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw%26client%3DdXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc%26protocol%3Doauth2%26audience%3Daud%253A%252F%252Ftransfer-api-prod.wetransfer%252F%26redirect_uri%3Dhttps%253A%252F%252Fwetransfer.com%252Faccount%252Fcallback%253Fmessage%253DThis%252BURL%252Bcan%252Bbe%252Bused%252Bonly%252Bonce%2526success%253Dfalse%2526finalizeSSOAuth%253D1%2526login%253D1%26cache%3D%255Bobject%2520Object%255D%26initialScreen%3Dlogin%26lang%3Den%26scope%3Dopenid%2520profile%2520email%2520offline_access%26response_type%3Dcode%26response_mode%3Dquery%26nonce%3Dc1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%253D%253D%26code_challenge%3Ddq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k%26code_challenge_method%3DS256%26auth0Client%3DeyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9&upid=re36kbe&upv=1.1.0

Source: https://auth.wetransfer.com/login?state=hKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw&client=dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc&protocol=oauth2&audience=aud%3A%2F%2Ftransfer-api-prod.wetransfer%2F&redirect_uri=https%3A%2F%2Fwetransfer.com%2Faccount%2Fcallback%3Fmessage%3DThis%2BURL%2Bcan%2Bbe%2Bused%2Bonly%2Bonce%26success%3Dfalse%26finalizeSSOAuth%3D1%26login%3D1&cache=%5Bobject%20Object%5D&initialScreen=login&lang=en&scope=openid%20profile%20email%20offline_access&response_type=code&response_mode=query&nonce=c1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%3D%3D&code_challenge=dq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k&code_challenge_method=S256&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?theme=outline&size=large&shape=circle&logo_alignment=center&text=signup_with&width=300&client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&iframe_id=gsi_340865_717821&as=uRoRuXmetPmhxQ1I3dT8nQ&hl=en	HTTP Parser: Number of links: 0

Source: https://auth.wetransfer.com/login?state=hKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw&client=dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc&protocol=oauth2&audience=aud%3A%2F%2Ftransfer-api-prod.wetransfer%2F&redirect_uri=https%3A%2F%2Fwetransfer.com%2Faccount%2Fcallback%3Fmessage%3DThis%2BURL%2Bcan%2Bbe%2Bused%2Bonly%2Bonce%26success%3Dfalse%26finalizeSSOAuth%3D1%26login%3D1&cache=%5Bobject%20Object%5D&initialScreen=login&lang=en&scope=openid%20profile%20email%20offline_access&response_type=code&response_mode=query&nonce=c1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%3D%3D&code_challenge=dq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k&code_challenge_method=S256&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Base64 decoded: {"icon":"https://images.ctfassets.net/ncozpa9tpd50/1MB6eBlCBzD9fflql7h8Mf/c3bddc7933c2c625bbedd65bf6b654a1/icon-wt.png","assetsUrl":"","auth0Domain":"auth.wetransfer.com","auth0Tenant":"wetransfer-prod","clientConfigurationBaseUrl":"https://auth.wetransfe...

Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=29d6aae6-fe4d-46b9-9400-a5b59151be96&google_gid=CAESEA8sivwBeH6YplUjgRqkIhU&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6987885452173836372&ttd_tdid=29d6aae6-fe4d-46b9-9400-a5b59151be96	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=81c3jgn&ref=https%3A%2F%2Fauth.wetransfer.com%2Flogin%3Fstate%3DhKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw%26client%3DdXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc%26protocol%3Doauth2%26audience%3Daud%253A%252F%252Ftransfer-api-prod.wetransfer%252F%26redirect_uri%3Dhttps%253A%252F%252Fwetransfer.com%252Faccount%252Fcallback%253Fmessage%253DThis%252BURL%252Bcan%252Bbe%252Bused%252Bonly%252Bonce%2526success%253Dfalse%2526finalizeSSOAuth%253D1%2526login%253D1%26cache%3D%255Bobject%2520Object%255D%26initialScreen%3Dlogin%26lang%3Den%26scope%3Dopenid%2520profile%2520email%2520offline_access%26response_type%3Dcode%26response_mode%3Dquery%26nonce%3Dc1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%253D%253D%26code_challenge%3Ddq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k%26code_challenge_method%3DS256%26auth0Client%3DeyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEu...	HTTP Parser: No favicon
Source: https://wetransfer.com/blog/newsroom	HTTP Parser: No favicon
Source: https://wetransfer.com/blog/newsroom/	HTTP Parser: No favicon
Source: https://wetransfer.com/blog/newsroom/	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=81c3jgn&ref=https%3A%2F%2Fwetransfer.com%2Fexplore%2Fcareers&upid=re36kbe&upv=1.1.0	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=29d6aae6-fe4d-46b9-9400-a5b59151be96&expiration=1717251314&gdpr=0&gdpr_consent=&C=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?theme=outline&size=large&shape=circle&logo_alignment=center&text=signup_with&width=300&client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&iframe_id=gsi_340865_717821&as=uRoRuXmetPmhxQ1I3dT8nQ&hl=en	HTTP Parser: No favicon

Source: https://auth.wetransfer.com/login?state=hKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw&client=dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc&protocol=oauth2&audience=aud%3A%2F%2Ftransfer-api-prod.wetransfer%2F&redirect_uri=https%3A%2F%2Fwetransfer.com%2Faccount%2Fcallback%3Fmessage%3DThis%2BURL%2Bcan%2Bbe%2Bused%2Bonly%2Bonce%26success%3Dfalse%26finalizeSSOAuth%3D1%26login%3D1&cache=%5Bobject%20Object%5D&initialScreen=login&lang=en&scope=openid%20profile%20email%20offline_access&response_type=code&response_mode=query&nonce=c1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%3D%3D&code_challenge=dq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k&code_challenge_method=S256&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?theme=outline&size=large&shape=circle&logo_alignment=center&text=signup_with&width=300&client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&iframe_id=gsi_340865_717821&as=uRoRuXmetPmhxQ1I3dT8nQ&hl=en	HTTP Parser: No <meta name="author".. found

Source: https://auth.wetransfer.com/login?state=hKFo2SA4MlVhTE5ud2FQai1WWXlzam5KQmY4ZGwweGo4XzhCbaFupWxvZ2luo3RpZNkga2pBbnNieG5fQkJWc2dZemVOT1RDZlpOdk9oQ3hXTDajY2lk2SBkWFdGUWppVzFqeFdDRkcwaE9WcHFyazRoOXZHZWFuYw&client=dXWFQjiW1jxWCFG0hOVpqrk4h9vGeanc&protocol=oauth2&audience=aud%3A%2F%2Ftransfer-api-prod.wetransfer%2F&redirect_uri=https%3A%2F%2Fwetransfer.com%2Faccount%2Fcallback%3Fmessage%3DThis%2BURL%2Bcan%2Bbe%2Bused%2Bonly%2Bonce%26success%3Dfalse%26finalizeSSOAuth%3D1%26login%3D1&cache=%5Bobject%20Object%5D&initialScreen=login&lang=en&scope=openid%20profile%20email%20offline_access&response_type=code&response_mode=query&nonce=c1JoWWhpYkpLX3lpSERXa1BQNUVJWFJUZHlvUDNvclhOWHM4TWgyeEpXMA%3D%3D&code_challenge=dq5zWKc-JPfEf-403TDRR_But4L0hC3rIUOA5MeVu7k&code_challenge_method=S256&auth0Client=eyJuYW1lIjoiYXV0aDAtc3BhLWpzIiwidmVyc2lvbiI6IjEuMjIuMyJ9	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?theme=outline&size=large&shape=circle&logo_alignment=center&text=signup_with&width=300&client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&iframe_id=gsi_340865_717821&as=uRoRuXmetPmhxQ1I3dT8nQ&hl=en	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_665.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"sitemap":{"changefr
Source: chromecache_665.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"sitemap":{"changefr
Source: chromecache_665.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"sitemap":{"changefr
Source: chromecache_605.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"sitemap":{"changefr
Source: chromecache_605.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"sitemap":{"changefr
Source: chromecache_605.2.dr	String found in binary or memory: ","externalLink":"https://wetransfer.com/paper","tracking":{"eventLabel":"footer_link_paper"}},{"title":"Pricing","externalLink":"https://wetransfer.com/pricing","tracking":{"eventLabel":"footer_link_pricing"}}]},{"title":"About Us","items":[{"title":"Company","externalLink":"/explore","tracking":{"eventLabel":"footer_link_company"}},{"title":"Advertising","externalLink":"/explore/advertising","tracking":{"eventLabel":"footer_link_advertising"}},{"title":"Careers","externalLink":"/explore/careers","tracking":{"eventLabel":"footer_link_careers"}},{"title":"Culture","externalLink":"/explore/culture","tracking":{"eventLabel":"footer_link_culture"}},{"title":"Locations","externalLink":"/explore/locations","tracking":{"eventLabel":"footer_link_Locations"}},{"title":"How to apply","externalLink":"/explore/how-to-apply","tracking":{"eventLabel":"footer_link_how-to-apply"}},{"title":"B Corp","externalLink":"https://wetransfer.com/blog/story/we-are-a-bcorp","tracking":{"eventLabel":"footer_link_b-corp"}},{"title":"Newsroom","externalLink":"/blog/newsroom","tracking":{"eventLabel":"footer_link_newsroom"}},{"title":"Leadership","externalLink":"/explore/corporate/leadership","tracking":{"eventLabel":"footer_link_leadership"}}]},{"title":"Resources","items":[{"title":"Help Center","externalLink":"https://wetransfer.zendesk.com","tracking":{"eventLabel":"footer_link_help-center"}},{"title":"Accessibility","externalLink":"/explore/accessibility","tracking":{"eventLabel":"footer_link_accessibility"}}]},{"title":"Explore","items":[{"title":"WePresent","externalLink":"https://wepresent.wetransfer.com","tracking":{"eventLabel":"footer_link_wepresent"}},{"title":"Ideas Report","externalLink":"https://wetransfer.com/ideas-report/2022","tracking":{"eventLabel":"footer_link_ideas-report"}},{"title":"The Supporting Act Foundation","externalLink":"https://www.thesupportingact.org/","tracking":{"eventLabel":"footer_link_supporting-act"}},{"title":"Creative Hubs Index","externalLink":"https://wetransfer.com/emerging-creative-hubs-index-2022","tracking":{"eventLabel":"footer_link_creative-hubs"}},{"title":"Blog","externalLink":"https://wetransfer.com/blog","tracking":{"eventLabel":"footer_link_blog"}}]}]},"terms":{"items":[{"title":"Terms","externalLink":"/explore/legal/terms","tracking":{"eventLabel":"/footer_link_terms"}},{"title":"Privacy","externalLink":"/explore/legal/privacy","tracking":{"eventLabel":"footer_link_privacy"}}]},"social":{"items":[{"title":"Twitter","externalLink":"https://twitter.com/WeTransfer","tracking":{"eventLabel":"footer_link_twitter"}},{"title":"Facebook","externalLink":"https://www.facebook.com/wetransfer/","tracking":{"eventLabel":"footer_link_facebook"}},{"title":"Instagram","externalLink":"https://www.instagram.com/wetransfer/","tracking":{"eventLabel":"footer_link_instagram"}},{"title":"Youtube","externalLink":"https://www.youtube.com/channel/UCFHZRaJORf-Pffh2rnF8WaQ","tracking":{"eventLabel":"footer_link_youtube"}}]}}},"sitemap":{"changefr
Source: chromecache_759.2.dr, chromecache_487.2.dr	String found in binary or memory: return b}uC.K="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5852 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5852 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source	Detection	Scanner	Label	Link
Chrome Cache Entry: 623	0%	ReversingLabs
Chrome Cache Entry: 623	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://we.tl/t-pG5R8WHtp7	0%	Avira URL Cloud	safe
https://www.thesupportingact.org/	0%	Avira URL Cloud	safe
https://www.thesupportingact.org/	0%	Virustotal		Browse

Name	Malicious	Reputation
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=6987885452173836372&ttd_tdid=29d6aae6-fe4d-46b9-9400-a5b59151be96	false	high
https://wetransfer.com/log-in?message=This%20URL%20can%20be%20used%20only%20once&success=false	false	high
https://wetransfer.com/blog/newsroom	false	high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	false	high
https://a26744370346.cdn.optimizely.com/client_storage/a26744370346.html	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://abs.twimg.com/hashflags/BF-11137_Mahindra_XUV3XO_Hashmoji_after/BF-11137_Mahindra_XUV3XO_Has	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10658_NetflixJP_18ce54ua4fy_Hashmoji_20240405-20240704_Suzume_/BF	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/43hSaUSgvXBmUF6t5JUAFr/3959203b63e5548e6ccd070b2a1ef99a/22	chromecache_786.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_759.2.dr	false		high
https://abs.twimg.com/hashflags/NBA_WarriorsHashmoji/NBA_WarriorsHashmoji.png	chromecache_364.2.dr	false		high
https://wetransfer.com/pricing?trk=WT202005_signup	chromecache_605.2.dr, chromecache_665.2.dr	false		high
https://abs.twimg.com/hashflags/NHL_MWild_2023/NHL_MWild_2023.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/NWSL_Chicago_Hashtag2024/NWSL_Chicago_Hashtag2024.png	chromecache_364.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.UserProfil	chromecache_696.2.dr	false		high
https://abs.twimg.com/hashflags/MSI_Emoji_2024/MSI_Emoji_2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/World_Surf_League_2024/World_Surf_League_2024.png	chromecache_364.2.dr	false		high
https://ideas-blog.wetransfer.com/static/f07f7e0b6925cf9ece1b232b06f472eb/T02PT9855-U039UE2DWF7-2f3e	chromecache_605.2.dr	false		high
https://abs.twimg.com/hashflags/Sony_MarcAnthony_MuevenseAlbum_Music/Sony_MarcAnthony_MuevenseAlbum_	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/41rfqYhdVOSzml2zZXUuaM/e189b6ca3995c847adb9ebfbe31a419a/26	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/NBA_CelticsHashmoji/NBA_CelticsHashmoji.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/Asahi_Mitsuya_anniversary_Japan_2024_Emoji/Asahi_Mitsuya_anniversary	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10984_UngentlemanlyWarfare_AFTER_V3/BF-10984_UngentlemanlyWarfare	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/5wDh5p8fEvAQ5terFyPcN9/737acad063103b8bd16e35ab8c51b606/TO	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/Hashmoji_essential_jp_4_1/Hashmoji_essential_jp_4_1.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10329_wowow_mj_WOWOWkissmy_Hashmoji_2024/BF-10329_wowow_mj_WOWOWk	chromecache_364.2.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_550.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/3a9lU5VDvk8IKbP9Q5Evff/8d44e84e879b6eea1808069210771855/Ar	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/Coachella2024/Coachella2024.png	chromecache_364.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.19fb	chromecache_630.2.dr	false		high
https://wetransfer.com/pricing	chromecache_605.2.dr, chromecache_665.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/2BkMaxnE1PCZBauYZn2v8B/ca7127b5143b2b588c416c41d146f2a6/47	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10676_Hubbl_2024_Hashmojis/BF-10676_Hubbl_2024_Hashmojis.png	chromecache_364.2.dr	false		high
https://ideas-blog.wetransfer.com/static/d5e84115582748b0dee53e6ebf4bf224/WeTransfer_payments_01_pro	chromecache_605.2.dr	false		high
https://abs.twimg.com/hashflags/Twitter_DisabledAndAble/Twitter_DisabledAndAble.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10920_NetflixJP_18ce54ua4fy_Hashmoj_v2/BF-10920_NetflixJP_18ce54u	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/Romasaga_April_2024_emoji/Romasaga_April_2024_emoji.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/MiLB_Trophy_2024/MiLB_Trophy_2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/DignitasEmoji2024/DignitasEmoji2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/Hashmoji_lion_ochtune_4_12/Hashmoji_lion_ochtune_4_12.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/WNBA_2024_Season/WNBA_2024_Season.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/WWERaw2024Emoji/WWERaw2024Emoji.png	chromecache_364.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AudioDock~	chromecache_444.2.dr, chromecache_375.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10943_HASHMOJI_DeUna_BrandFormance_APRIL_2024/BF-10943_HASHMOJI_D	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/DK_Extension/DK_Extension.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10357_FineToday_Plus_tomorrow_Feb2024/BF-10357_FineToday_Plus_tom	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10998_HSR_Aventurine_Emoji_Q2_2024/BF-10998_HSR_Aventurine_Emoji_	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/NWSL_Utah_Hashtag2024/NWSL_Utah_Hashtag2024.png	chromecache_364.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.823369aa.j	chromecache_638.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/4XEYvWmbdWxHSxTEwkArGu/92c08004953b31400be94921d83953fc/WT	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10726_TheYearofCamels2024_Hashmoji_v3/BF-10726_TheYearofCamels202	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10398_Shiseido_MQ_Campaign_Q124/BF-10398_Shiseido_MQ_Campaign_Q12	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/JBApp_Hashmoji_2024/JBApp_Hashmoji_2024.png	chromecache_364.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_759.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/50dbi9ookdlUtptprVB6zn/e08bcf2d8c7a8fd095c4e51b5847a0c0/45	chromecache_786.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/6nu18cWGJeyPSNYlXh4iWE/d79d711fc1523ac32011176f34b52efd/27	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10715_MorinagaIce_Mar_2024/BF-10715_MorinagaIce_Mar_2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10748_Changyou_haikyu_haifura_Mar2024/BF-10748_Changyou_haikyu_ha	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/8oIXwEiRDvGF5CMkp6nc5/812c0f7cd59e90711a3fb1e9b71cf4cf/276	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10430-FF7R_Feb_emoji_2024/BF-10430-FF7R_Feb_emoji_2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/MOBO_Awards_2024/MOBO_Awards_2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/ASAHI_Superdry_drycrystal_Mar_Japan_2024_Emoji/ASAHI_Superdry_drycry	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/SF_Giants_MLB_2024_Updated/SF_Giants_MLB_2024_Updated.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10251_Cygames_gbf_relink_jp_Gamelaunch_2024Feb_Branded_Hashtag/BF	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/1dg6ihgEQDsTxJvceGRPsX/f231c084b52f5e8c508f022113e70e70/Ar	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/Chicago_Bears_NFL_2024_2025_HASHMOJI/Chicago_Bears_NFL_2024_2025_HAS	chromecache_364.2.dr	false		high
https://www.thesupportingact.org/	chromecache_605.2.dr, chromecache_665.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://images.ctfassets.net/c0ooum8vvmnd/7iZtv0kL4hhGTZedFymLEg/e404e2c0650777cac09d933d8963ad03/32	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10662_Hashmoji_SBA_Ramadan_2024/BF-10662_Hashmoji_SBA_Ramadan_202	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/KaijuNo8/KaijuNo8.png	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/5gPLVpRXtSUJsj70E9lAHO/bf2c2fdb9db4f58124e151c3982ad02a/TO	chromecache_786.2.dr	false		high
https://we.tl/t-pG5R8WHtp7	chromecache_605.2.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/hashflags/DraftKings_Additional_hashtags/DraftKings_Additional_hashtags.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/CricketTwitter_2021/CricketTwitter_2021.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/WNBA_2024_CommissionersCup/WNBA_2024_CommissionersCup.png	chromecache_364.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_733.2.dr	false		high
https://abs.twimg.com/hashflags/BF-11138_PlasticWisely/BF-11138_PlasticWisely.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/KansasCity_Royals_MLB_2024/KansasCity_Royals_MLB_2024.png	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/4UkOe8URuTTR1QzhwdQVR4/e67f1c25ec10fe38001a94c9641afd88/Ar	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/Arizona_Dbacks_MLB_2024/Arizona_Dbacks_MLB_2024.png	chromecache_364.2.dr	false		high
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserProfile.8517d	chromecache_746.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10543_SaudiAirlinesFoundingDay_2024_Hashmoji/BF-10543_SaudiAirlin	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10645_Hashmoji_suntory_tennen_KirittoKajitsu_19th_Mar/BF-10645_Ha	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/BF-10646_Gamelaunch2024MarBrandedHashtag/BF-10646_Gamelaunch2024MarB	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/5Qyofqq6prMPhzQPMOgSom/a6a66ab36c64d2457d6c33f53b99d054/31	chromecache_786.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/4WgypZFWUWkKvkZ7F61uvl/bcd7846ec52673788922aa0583751a4d/38	chromecache_786.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/63oqmxDEDWOUG5OHdkSACd/d8e4cd102f7a5d153b156e1d907ef44c/40	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/NBA_Playoffs_2024/NBA_Playoffs_2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/ImmortalsEmoji2024/ImmortalsEmoji2024.png	chromecache_364.2.dr	false		high
https://wetransfer.com/emerging-creative-hubs-index-2022	chromecache_605.2.dr, chromecache_665.2.dr	false		high
https://wetransfer.com/log-in?_ga=2.266924109.2133833616.1616403830-1646230000.1601886974	chromecache_605.2.dr, chromecache_665.2.dr	false		high
https://wetransfer.zendesk.com	chromecache_605.2.dr, chromecache_665.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/5zNZiDtdQTXCgghOoQIlfd/db579e62c801994c199e4fcf8197dad9/41	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/NBA_NetsHashmoji/NBA_NetsHashmoji.png	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/2IyYtMUYAewX47nqRp3ZJL/8d297ae35658ba78393229cf80e92e71/28	chromecache_786.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/2QIHgabxm6BRf49CJUsi4z/9b7334b9096a877971dc100fd49d3b01/gr	chromecache_786.2.dr	false		high
https://abs.twimg.com/hashflags/NigerianIdol20242/NigerianIdol20242.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/NRGEmoji2024/NRGEmoji2024.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/NHL_Bruins_2023/NHL_Bruins_2023.png	chromecache_364.2.dr	false		high
https://abs.twimg.com/hashflags/Dallas_Cowboys_2024_2025_HASHMOJI/Dallas_Cowboys_2024_2025_HASHMOJI.	chromecache_364.2.dr	false		high
https://images.ctfassets.net/c0ooum8vvmnd/9nA2vr3aTeT7X2NBOwRv5/934cc4e5102aa13e4bdc01263960828c/Art	chromecache_786.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
18.173.132.69	unknown	United States	3	MIT-GATEWAYSUS	false
34.250.136.134	unknown	United States	16509	AMAZON-02US	false
52.88.104.35	unknown	United States	16509	AMAZON-02US	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
151.101.44.159	unknown	United States	54113	FASTLYUS	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
142.250.65.238	unknown	United States	15169	GOOGLEUS	false
151.101.44.157	unknown	United States	54113	FASTLYUS	false
104.244.43.131	unknown	United States	54113	FASTLYUS	false
142.250.65.232	unknown	United States	15169	GOOGLEUS	false
142.250.65.198	unknown	United States	15169	GOOGLEUS	false
18.238.55.70	unknown	United States	16509	AMAZON-02US	false
199.232.160.158	unknown	United States	54113	FASTLYUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
108.138.106.44	unknown	United States	16509	AMAZON-02US	false
18.173.132.79	unknown	United States	3	MIT-GATEWAYSUS	false
108.138.128.102	unknown	United States	16509	AMAZON-02US	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
108.139.33.128	unknown	United States	16509	AMAZON-02US	false
108.138.128.96	unknown	United States	16509	AMAZON-02US	false
172.253.62.84	unknown	United States	15169	GOOGLEUS	false
68.67.160.76	unknown	United States	29990	ASN-APPNEXUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.32.110	unknown	United States	15169	GOOGLEUS	false
31.13.71.7	unknown	Ireland	32934	FACEBOOKUS	false
18.164.116.11	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.80.70	unknown	United States	15169	GOOGLEUS	false
108.138.128.109	unknown	United States	16509	AMAZON-02US	false
104.64.217.20	unknown	United States	16625	AKAMAI-ASUS	false
13.226.34.24	unknown	United States	16509	AMAZON-02US	false
151.101.192.84	unknown	United States	54113	FASTLYUS	false
34.248.204.163	unknown	United States	16509	AMAZON-02US	false
142.250.176.202	unknown	United States	15169	GOOGLEUS	false
108.138.106.75	unknown	United States	16509	AMAZON-02US	false
18.173.132.82	unknown	United States	3	MIT-GATEWAYSUS	false
52.16.158.223	unknown	United States	16509	AMAZON-02US	false
13.225.63.4	unknown	United States	16509	AMAZON-02US	false
142.251.40.198	unknown	United States	15169	GOOGLEUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
104.105.90.36	unknown	United States	16625	AKAMAI-ASUS	false
54.81.241.151	unknown	United States	14618	AMAZON-AESUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
52.211.9.181	unknown	United States	16509	AMAZON-02US	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
142.250.81.227	unknown	United States	15169	GOOGLEUS	false
152.199.24.185	unknown	United States	15133	EDGECASTUS	false
18.164.111.124	unknown	United States	3	MIT-GATEWAYSUS	false
108.138.129.160	unknown	United States	16509	AMAZON-02US	false
142.251.35.166	unknown	United States	15169	GOOGLEUS	false
142.251.35.164	unknown	United States	15169	GOOGLEUS	false
13.225.63.118	unknown	United States	16509	AMAZON-02US	false
18.164.107.47	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
172.253.63.84	unknown	United States	15169	GOOGLEUS	false
142.251.40.206	unknown	United States	15169	GOOGLEUS	false
157.240.241.35	unknown	United States	32934	FACEBOOKUS	false
18.173.132.22	unknown	United States	3	MIT-GATEWAYSUS	false
18.173.132.113	unknown	United States	3	MIT-GATEWAYSUS	false
35.211.178.172	unknown	United States	19527	GOOGLE-2US	false
8.28.7.83	unknown	United States	62713	AS-PUBMATICUS	false
69.173.146.5	unknown	United States	26667	RUBICONPROJECTUS	false
34.223.171.31	unknown	United States	16509	AMAZON-02US	false
172.217.165.130	unknown	United States	15169	GOOGLEUS	false
18.238.49.111	unknown	United States	16509	AMAZON-02US	false
52.46.155.104	unknown	United States	16509	AMAZON-02US	false
142.250.80.35	unknown	United States	15169	GOOGLEUS	false
151.101.66.132	unknown	United States	54113	FASTLYUS	false
142.250.65.174	unknown	United States	15169	GOOGLEUS	false
13.107.21.237	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.225.63.123	unknown	United States	16509	AMAZON-02US	false
199.232.36.159	unknown	United States	54113	FASTLYUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
104.244.42.130	unknown	United States	13414	TWITTERUS	false
142.251.167.84	unknown	United States	15169	GOOGLEUS	false
142.250.65.206	unknown	United States	15169	GOOGLEUS	false
172.253.63.154	unknown	United States	15169	GOOGLEUS	false
18.238.55.113	unknown	United States	16509	AMAZON-02US	false
142.251.41.2	unknown	United States	15169	GOOGLEUS	false
108.138.115.149	unknown	United States	16509	AMAZON-02US	false
31.13.71.36	unknown	Ireland	32934	FACEBOOKUS	false
151.101.64.84	unknown	United States	54113	FASTLYUS	false
18.193.97.56	unknown	United States	16509	AMAZON-02US	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
54.76.94.58	unknown	United States	16509	AMAZON-02US	false
15.197.193.217	unknown	United States	7430	TANDEMUS	false
108.138.106.39	unknown	United States	16509	AMAZON-02US	false
52.29.229.214	unknown	United States	16509	AMAZON-02US	false
142.251.111.154	unknown	United States	15169	GOOGLEUS	false
104.244.42.66	unknown	United States	13414	TWITTERUS	false
104.244.42.1	unknown	United States	13414	TWITTERUS	false
104.244.42.2	unknown	United States	13414	TWITTERUS	false
142.250.65.194	unknown	United States	15169	GOOGLEUS	false
34.111.140.246	unknown	United States	15169	GOOGLEUS	false
34.49.212.111	unknown	United States	2686	ATGS-MMD-ASUS	false
50.16.36.206	unknown	United States	14618	AMAZON-AESUS	false
104.244.42.3	unknown	United States	13414	TWITTERUS	false
142.250.64.66	unknown	United States	15169	GOOGLEUS	false
104.244.42.5	unknown	United States	13414	TWITTERUS	false
142.250.65.228	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1435388
Start date and time:	2024-05-02 16:13:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus23.phis.win@35/776@0/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://wetransfer.pr.co/ Browse: https://wetransfer.com/jobs Browse: https://twitter.com/WeTransfer

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70634
Entropy (8bit):	5.301203241034637
Encrypted:	false
SSDEEP:	1536:yWpyl+LEh5v7RENRA/DMshRGsHMeQvEn9BP8ExBJuw9DW:QALEh5v7WmAsTGePLkExBkw9DW
MD5:	B5F9CECE30103D44FF2FB44114A257E7
SHA1:	CB5751F115C908CDC339C8407D593B2D3053A071
SHA-256:	B3DD0C70FB3714BFCA6014CD8E74B96254D15A1DC483D5322F5F6ECB9C1547C5
SHA-512:	68AE7481FD6382B10A091C7B1D3E7F78B943972261211692A351CF693972757C6BFEF2C661C266A11505EFCE5BF0E94197A1DBBBB89F6F799752E0B293A3DD45
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/modules.common.7e4c200a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["modules.common"],{49898:(e,t,n)=>{n.d(t,{Z:()=>_});var o=n(2784),i=n(6555),r=n(82392),s=n(400),a=n(73186),l=n(88809),c=n(24949),d=n(92160),h=n(16657);const u=(e,t)=>t.entityId&&h.ZP.select(e,t.entityId)\|\|void 0,p=e=>`/${e.screen_name}`,m=e=>e.name,g=(0,d.Z)().propsFromState((()=>({user:u,badging:(0,c.P1)(u,(e=>e?{displayContext:"content",isBlueVerified:e.is_blue_verified,isProtected:e.protected,isVerified:e.verified,verifiedType:e.verified_type,translatorType:e.translator_type,affiliateBadgeInfo:e.highlightedLabel}:void 0))}))).adjustStateProps((({badging:e,user:t})=>({badging:e,link:t&&p(t),screenName:t&&t.screen_name,text:t&&m(t)\|\|""})));class b extends o.PureComponent{render(){const{color:e,link:t,onClick:n,screenName:r,text:s,weight:a,withHashflags:c}=this.props,d=o.createElement(i.Z.TextFragment,{color:e,link:t,onClick:n,style:y.wordBreak,weight:a,withHashflags:c},s,this._r

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714659276016&id=t2_fdqrj&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=eeb7e673-39e8-4637-b173-0491845f7761&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 257x257, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=6196, bps=0, compression=none, PhotometricIntepretation=RGB, description=1995-08-1452-020-020A 001, orientation=upper-left, width=9240], baseline, precision 8, 1000x667, components 3
Category:	downloaded
Size (bytes):	166127
Entropy (8bit):	7.9146961684057064
Encrypted:	false
SSDEEP:	3072:5bn/F4ODlhhYP7LTLXQaui3fJCNKA53HqsTk9bioWWNO:5bn94C6rLXQ5i3PAks4pIt
MD5:	EDFB1D9F2BF997DF2D2496883E04A12E
SHA1:	FB273A7C5A0DAF642DE45D88ADF0E56EA80EB441
SHA-256:	791978A81BEAF66A7BC78D65AA4177987D29998A06A23D8A5F1CE84D48DD078A
SHA-512:	F149291BB505A48B83A25ABB4FAF1A5271554E72178EC9CC574A71B18268BE7F34A856EE869314FBF243D8B57CD28F16FC7B3ABF908246C74064A68D29C69EBD
Malicious:	false
Reputation:	low
URL:	https://ideas-blog.wetransfer.com/static/edfb1d9f2bf997df2d2496883e04a12e/525638-Bjo_rk_by_Spike_Jonze_3__Unreleased_-99ed72-large-1707748321.jpg
Preview:	......JFIF.............fPhotoshop 3.0.8BIM........................8BIM..................8BIM..................8BIM.......H./ff...lff........./ff...............2.....Z...........5.....-..........8BIM.......p................................................................................................................8BIM.......l..Z...%G............1995.....1995-08.....35mm.....Bands.....Bjork.....California.....Chateau Marmont.....Detour Magazine.....Icon Scan.....Kodak 5030 PJC-1.....Los Angeles.....West Hollywood.....color.....color corrected.....finished.....high resolution.....music.....swimming pool.....underwater..7..20231027..P..ICON..t..Spike Jonze..x..1995-08-1452-020-020A 0018BIM................8BIM...............@...@....8BIM..........8BIM...................k.....................Adobe_CM......Adobe.d.................................................................................................................................................k...."................?.........

Target ID:	0
Start time:	16:14:08
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	16:14:12
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	16:14:15
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	7
Start time:	16:15:06
Start date:	02/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5852 --field-trial-handle=2020,i,17916960170245184033,11110129889711546280,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Anti Debugging

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Chrome Cache Entry: 371

Chrome Cache Entry: 372

Chrome Cache Entry: 374

Chrome Cache Entry: 375

Chrome Cache Entry: 377

Chrome Cache Entry: 378

Chrome Cache Entry: 379

Chrome Cache Entry: 380

Chrome Cache Entry: 381

Chrome Cache Entry: 382

Chrome Cache Entry: 383

Chrome Cache Entry: 384

Chrome Cache Entry: 385

Chrome Cache Entry: 386

Chrome Cache Entry: 387

Windows Analysis Report
https://auth.wetransfer.com/u/email-verification?ticket=gyA5YpcyEAqLBFk94KR0JfGFBCKicVTf#