Windows Analysis Report https://2c7.ir/4sv4E

Overview

General Information

Sample URL: https://2c7.ir/4sv4E
Analysis ID: 491031
Infos:

Most interesting Screenshot:

Detection

HTMLPhisher
Score: 72
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Misleading page title found
Yara detected HtmlPhish10
Antivirus detection for URL or domain
Invalid 'forgot password' link found
HTML body contains low number of good links
Found iframes
No HTML title found
Form action URLs do not match main URL

Classification

AV Detection:

barindex
Antivirus / Scanner detection for submitted sample
Source: https://2c7.ir/4sv4E SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social Engineering
Antivirus detection for URL or domain
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://view.genial.ly/614e65ad1f21fe0d7ec3b264 SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

barindex
Misleading page title found
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true Page Title: Sign in to Facebook to watch the video
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true Page Title: Sign in to Facebook to watch the video
Yara detected HtmlPhish10
Source: Yara match File source: 17493.1.pages.csv, type: HTML
Invalid 'forgot password' link found
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: Invalid link: Forgot Password?
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: Invalid link: Forgot Password?
HTML body contains low number of good links
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: Number of links: 0
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: Number of links: 0
Found iframes
Source: https://genial.ly/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-K3DDDL4
Source: https://genial.ly/ HTTP Parser: Iframe src: https://view.genial.ly/60bdff0f347fbd0d328a8bfe
Source: https://genial.ly/ HTTP Parser: Iframe src: https://view.genial.ly/60bdff0f347fbd0d328a8bfe
Source: https://genial.ly/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-K3DDDL4
Source: https://genial.ly/ HTTP Parser: Iframe src: https://view.genial.ly/60bdff0f347fbd0d328a8bfe
Source: https://genial.ly/ HTTP Parser: Iframe src: https://view.genial.ly/60bdff0f347fbd0d328a8bfe
Source: https://genial.ly/why-genially/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-K3DDDL4
Source: https://genial.ly/plans/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-K3DDDL4
Source: https://auth.genial.ly/login HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-K3DDDL4
Source: https://genial.ly/create/presentations/ HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-K3DDDL4
Source: https://genial.ly/create/presentations/ HTTP Parser: Iframe src: https://view.genial.ly/5f6350e779626a0d712891f0
Source: https://genial.ly/create/presentations/ HTTP Parser: Iframe src: https://view.genial.ly/5f6350e779626a0d712891f0
No HTML title found
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: HTML title missing
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: HTML title missing
Source: https://genial.ly/ HTTP Parser: HTML title missing
Source: https://genial.ly/ HTTP Parser: HTML title missing
Source: https://genial.ly/why-genially/ HTTP Parser: HTML title missing
Source: https://genial.ly/plans/ HTTP Parser: HTML title missing
Source: https://auth.genial.ly/login HTTP Parser: HTML title missing
Source: https://genial.ly/create/presentations/ HTTP Parser: HTML title missing
Form action URLs do not match main URL
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: Form action: https://brau.devsbpr.app/perfiles funnel-preview devsbpr
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: Form action: https://brau.devsbpr.app/perfiles funnel-preview devsbpr
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: No <meta name="author".. found
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: No <meta name="author".. found
Source: https://genial.ly/ HTTP Parser: No <meta name="author".. found
Source: https://genial.ly/ HTTP Parser: No <meta name="author".. found
Source: https://genial.ly/why-genially/ HTTP Parser: No <meta name="author".. found
Source: https://genial.ly/plans/ HTTP Parser: No <meta name="author".. found
Source: https://auth.genial.ly/login HTTP Parser: No <meta name="author".. found
Source: https://genial.ly/create/presentations/ HTTP Parser: No <meta name="author".. found
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: No <meta name="copyright".. found
Source: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_at=1c196eecda853ede786dcd07e65b9687v2&track=0&preview=true HTTP Parser: No <meta name="copyright".. found
Source: https://genial.ly/ HTTP Parser: No <meta name="copyright".. found
Source: https://genial.ly/ HTTP Parser: No <meta name="copyright".. found
Source: https://genial.ly/why-genially/ HTTP Parser: No <meta name="copyright".. found
Source: https://genial.ly/plans/ HTTP Parser: No <meta name="copyright".. found
Source: https://auth.genial.ly/login HTTP Parser: No <meta name="copyright".. found
Source: https://genial.ly/create/presentations/ HTTP Parser: No <meta name="copyright".. found
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Jump to behavior
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: a mensajes y recibe notificaciones."><meta property="og:image" content="https://www.facebook.com/images/fb_icon_325x325.png"> equals www.facebook.com (Facebook)
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: a mensajes y..."><link rel="canonical" href="https://www.facebook.com/"><meta property="og:site_name" content="Facebook"><meta property="og:type" content="website"><meta property="og:title" content="Sign in to Facebook to watch the video"><meta property="og:description" content="Crea una cuenta o inicia sesi equals www.facebook.com (Facebook)
Source: Ruleset Data.0.dr String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: Ruleset Data.0.dr String found in binary or memory: www.facebook.com/ajax/ads/ equals www.facebook.com (Facebook)
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: http://doitgenially.com/wordpress-genially-embed-plugin/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://1x0i8zw55j.execute-api.eu-west-1.amazonaws.com/staging
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://2c7.ir
Source: Current Session.0.dr, History-journal.0.dr String found in binary or memory: https://2c7.ir/4sv4E
Source: Favicons-journal.0.dr String found in binary or memory: https://2c7.ir/4sv4E/
Source: History Provider Cache.0.dr String found in binary or memory: https://2c7.ir/4sv4E2#Panelfbs
Source: History-journal.0.dr String found in binary or memory: https://2c7.ir/4sv4EPanelfbs
Source: Favicons-journal.0.dr String found in binary or memory: https://2c7.ir/4sv4Ez
Source: ac5a61c1cebd2433_0.0.dr String found in binary or memory: https://4bpr.art/async/?&user=coperola&html=mobile
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: https://4bpr.art/async?&user=coperola&html=mobile
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: https://4bpr.art/async?&user=coperola&html=mobileaD
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://9y6d6jo0fl.execute-api.eu-west-1.amazonaws.com/staging
Source: Reporting and NEL.3.dr String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=Gw9kQqpsWUeort7%2FOEnHkftGTifoUklftiEWPGYpKIecOVr8wPuqfRizE
Source: Reporting and NEL.3.dr String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=Y2GaGuh0cmOWRqVQ81kgZfjVK6liDQQ8Q22JkoM9AcKd9%2Bwv2WF6twirV
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://academy.genial.ly/
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, manifest.json0.0.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://accounts.google.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://amq3ezc8t0.execute-api.eu-west-1.amazonaws.com/prod/screenshots/pdf
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://analytics.genial.ly
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://analytics.google.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://api-dev.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://api-gt-dev.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://api-gt-staging.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://api-gt.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://api-staging.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://api.genial.ly
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, manifest.json0.0.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://apis.google.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://app-dev.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://app-dev.genial.ly/editor/
Source: 000003.log4.0.dr String found in binary or memory: https://app.funnel-preview.com
Source: Network Action Predictor-journal.0.dr, 000003.log0.0.dr String found in binary or memory: https://app.funnel-preview.com/
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632328099857?updated_a
Source: History-journal.0.dr String found in binary or memory: https://app.funnel-preview.com/for_domain/bulmapan0203.clickfunnels.com/optin1632526772591?updated_a
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://app.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://app.genial.ly/editor/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://auth-dev.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://auth-staging.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://auth.genial.ly
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://auth.genial.ly/
Source: Current Session.0.dr String found in binary or memory: https://auth.genial.ly/login
Source: History-journal.0.dr String found in binary or memory: https://auth.genial.ly/loginLog
Source: Current Session.0.dr String found in binary or memory: https://auth.genial.ly/signup
Source: Current Session.0.dr String found in binary or memory: https://auth.genial.ly/signup$Create
Source: History-journal.0.dr String found in binary or memory: https://auth.genial.ly/signupCreate
Source: Current Session.0.dr String found in binary or memory: https://auth.genial.ly/signupKK
Source: Current Session.0.dr, 5c2fd4777655f0d8_0.0.dr String found in binary or memory: https://brau.devsbpr.app/perfiles
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://btd5phqr3b.execute-api.eu-west-1.amazonaws.com/prod/download
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://cdn.cookielaw.org/
Source: d0083211b2fa0fb8_0.0.dr String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/6.10.0/otBannerSdk.js
Source: a62ecb0c92916e51_0.0.dr String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/6.21.0/otBannerSdk.js
Source: 5666ee3ea9348f3e_0.0.dr String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://clients2.google.com
Source: manifest.json1.0.dr String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://clients2.googleusercontent.com
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://content-autofill.googleapis.com
Source: manifest.json0.0.dr String found in binary or memory: https://content.googleapis.com
Source: Reporting and NEL.3.dr String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://devview.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://devview.genial.ly/Preview/Index/
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 850285b3-1e06-4e56-8c07-5e65b1ccbfdc.tmp.3.dr, 727c50d0-34b1-464c-88c4-636d9862185a.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://dns.google
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://fb.me/react-async-component-lifecycle-hooks
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://fb.me/react-polyfills
Source: manifest.json0.0.dr String found in binary or memory: https://feedback.googleusercontent.com
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://fonts.googleapis.com/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://fonts.googleapis.com/css
Source: manifest.json0.0.dr String found in binary or memory: https://fonts.googleapis.com;
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://fonts.gstatic.com
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://fonts.gstatic.com/
Source: manifest.json0.0.dr String found in binary or memory: https://fonts.gstatic.com;
Source: 9dcde2c2181e9943_0.0.dr String found in binary or memory: https://funnel-preview.com/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://genial.ly
Source: 000003.log0.0.dr, f2753fb8e762bd2a_0.0.dr String found in binary or memory: https://genial.ly/
Source: 07e51f63672c940b_0.0.dr String found in binary or memory: https://genial.ly/#
Source: 99e7b13f2ae86ff9_0.0.dr String found in binary or memory: https://genial.ly/$
Source: 4518b842394ccec3_0.0.dr, 91588afd058d8eee_0.0.dr String found in binary or memory: https://genial.ly//
Source: 4062a9b77de09d74_0.0.dr String found in binary or memory: https://genial.ly/0
Source: 91588afd058d8eee_0.0.dr String found in binary or memory: https://genial.ly/3
Source: 7a64c2b6d2cf8763_0.0.dr String found in binary or memory: https://genial.ly/5f7389c2-449255c9f940ae9d3a89.js
Source: 7a64c2b6d2cf8763_0.0.dr String found in binary or memory: https://genial.ly/5f7389c2-449255c9f940ae9d3a89.jsaD
Source: a62ecb0c92916e51_0.0.dr String found in binary or memory: https://genial.ly/8L
Source: 22dfad3329087616_0.0.dr String found in binary or memory: https://genial.ly/B
Source: a62ecb0c92916e51_0.0.dr String found in binary or memory: https://genial.ly/F
Source: History-journal.0.dr String found in binary or memory: https://genial.ly/Genially
Source: 91588afd058d8eee_0.0.dr String found in binary or memory: https://genial.ly/Im
Source: 5666ee3ea9348f3e_0.0.dr String found in binary or memory: https://genial.ly/M
Source: 91588afd058d8eee_0.0.dr String found in binary or memory: https://genial.ly/P
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/U
Source: 721ddcae94c88a33_0.0.dr String found in binary or memory: https://genial.ly/UB
Source: 4518b842394ccec3_0.0.dr String found in binary or memory: https://genial.ly/Y
Source: 4518b842394ccec3_0.0.dr String found in binary or memory: https://genial.ly/a
Source: da98a447268a3171_0.0.dr, d0299fcaaada2e6b_0.0.dr String found in binary or memory: https://genial.ly/app-63bc939329e7aa4c091d.js
Source: d0299fcaaada2e6b_0.0.dr String found in binary or memory: https://genial.ly/app-63bc939329e7aa4c091d.jsaD
Source: 0635d50b7c9cecbb_0.0.dr String found in binary or memory: https://genial.ly/commons-3ca65ea7ff019bc1f437.js
Source: 0635d50b7c9cecbb_0.0.dr String found in binary or memory: https://genial.ly/commons-3ca65ea7ff019bc1f437.jsaD
Source: 499b1763beab5b9c_0.0.dr String found in binary or memory: https://genial.ly/component---src-views-home-home-tsx-3eece985302584bb8a2d.js
Source: Current Session.0.dr, History-journal.0.dr String found in binary or memory: https://genial.ly/create/presentations/
Source: History-journal.0.dr String found in binary or memory: https://genial.ly/create/presentations/Create
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/create/presentations/JCreate
Source: 7a64c2b6d2cf8763_0.0.dr String found in binary or memory: https://genial.ly/d
Source: f2753fb8e762bd2a_0.0.dr String found in binary or memory: https://genial.ly/fUk
Source: Favicons-journal.0.dr String found in binary or memory: https://genial.ly/favicon.svg?v=139efb47551957b17637d267b1170ed2
Source: Favicons-journal.0.dr String found in binary or memory: https://genial.ly/favicon.svg?v=139efb47551957b17637d267b1170ed2&
Source: 3ccbe2f9f834cd24_0.0.dr String found in binary or memory: https://genial.ly/framework-b9ed96603d89186697c2.js
Source: 3ccbe2f9f834cd24_0.0.dr String found in binary or memory: https://genial.ly/framework-b9ed96603d89186697c2.jsaD
Source: 25a59ffe919f7aa9_0.0.dr String found in binary or memory: https://genial.ly/i
Source: 25a59ffe919f7aa9_0.0.dr String found in binary or memory: https://genial.ly/k
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/plans/
Source: History-journal.0.dr String found in binary or memory: https://genial.ly/plans/Choose
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/plans/D
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/plans/DChoose
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/plans/Y
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/t
Source: 721ddcae94c88a33_0.0.dr String found in binary or memory: https://genial.ly/webpack-runtime-39e5893516543ea0a354.js
Source: 721ddcae94c88a33_0.0.dr String found in binary or memory: https://genial.ly/webpack-runtime-39e5893516543ea0a354.jsaD
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/why-genially/
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/why-genially/ADiscover
Source: History-journal.0.dr String found in binary or memory: https://genial.ly/why-genially/Discover
Source: Current Session.0.dr String found in binary or memory: https://genial.ly/why-genially/I
Source: a62ecb0c92916e51_0.0.dr String found in binary or memory: https://genial.ly/x
Source: Current Session.0.dr String found in binary or memory: https://genial.lyh
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://genially-d1c40.firebaseio.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://genially-download-html.genial.ly/download-html
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://genially.blob.core.windows.net/genially/users/#idUser/custom/#font.ttf
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/H6s3QBQC
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/HhOlmC
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/Klitp3
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/L7H7XhOa
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/OJKoPS?source=pricing&corpedu=edu&market=ES
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/VRhre4
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/b5FQ8i?source=pricing&corpedu=corp&market=EN
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/gGPtna
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/hItPwP?source=pricing&corpedu=edu&market=FR
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/i3RLVn?source=pricing&corpedu=edu&market=EN
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/lJhJU4?source=pricing&corpedu=corp&market=FR
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/lx7yB8?source=pricing&corpedu=corp&market=ES
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/nGfdUM
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/nv6KZRvZ
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://geniallyiscool.typeform.com/to/zUHIwo
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://gvv3gujs2j.execute-api.eu-west-2.amazonaws.com/dev
Source: manifest.json0.0.dr String found in binary or memory: https://hangouts.google.com/
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: https://i.imgur.com/wCOStwT.png
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/en
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/en/articles/3542502-insert-a-html-code-of-a-genially-in-a-webs
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/en/articles/3542527-insert-a-genially-into-wordpress
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/en/articles/3545818-monitorize-your-audience-s-interactivity-w
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/en/articles/3546201-integrating-google-analytics-with-genially
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/es
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/es/articles/3542502-insertar-codigo-html-de-un-genially-en-una
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/es/articles/3542527-insertar-un-genially-en-wordpress
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/es/articles/3545818-monitorizar-la-interactividad-que-realiza-
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/es/articles/3546201-integracion-de-google-analytics-con-genial
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/fr
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/fr/articles/3545818-monitoriser-l-interactivite-que-realise-vo
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://intercom.help/geniallysupport/fr/articles/3546201-integration-de-google-analytics-avec-genia
Source: aed1d60bed96de03_0.0.dr String found in binary or memory: https://js-agent.newrelic.com/nr-1210.min.js
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://krne47uno7.execute-api.eu-west-2.amazonaws.com/dev/screenshots/pdf
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://o401qaj0fk.execute-api.eu-west-2.amazonaws.com/dev
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://ogs.google.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://oz780iqafg.execute-api.eu-west-1.amazonaws.com/staging/screenshots/pdf
Source: manifest.json1.0.dr String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://play.google.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://ppt.genial.ly/import/ppt
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://preview.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://preview.genial.ly/Preview/Index/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://print.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://q04tggcme9.execute-api.us-east-1.amazonaws.com/prod/log
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://r1---sn-1gi7znes.gvt1.com
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://redirector.gvt1.com
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://resources.genial.ly
Source: manifest.json1.0.dr String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://ssl.gstatic.com
Source: 024b0b16471e63dc_0.0.dr String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://static.genial.ly/
Source: 25a59ffe919f7aa9_0.0.dr String found in binary or memory: https://static.genial.ly/auth/main.06ed7008d51d7c1e836f.js
Source: Favicons.0.dr String found in binary or memory: https://static.genial.ly/auth/public/favicon.ico
Source: Favicons.0.dr String found in binary or memory: https://static.genial.ly/auth/public/favicon.icoE
Source: f2753fb8e762bd2a_0.0.dr String found in binary or memory: https://static.genial.ly/auth/runtime.90d63aa131fc9ce4976b.js
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://static.genial.ly/resources/error-draft-creation.png
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://static.genial.ly/resources/panel-loader-low.mp4
Source: 5c2fd4777655f0d8_0.0.dr String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/ya/r/O2aKM2iSbOw.png
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://statics-view.genial.ly/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view
Source: 99e7b13f2ae86ff9_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/service-worker-genially.js
Source: 577b0b7aba1a39f2_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/charts.d01034ea.chunk.js
Source: c5af2ccf436da566_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/dist/social.0.0.44.min.js
Source: c5af2ccf436da566_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/dist/social.0.0.44.min.jsaD
Source: 4062a9b77de09d74_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/dist/vendors.0.0.44.min.js
Source: 4062a9b77de09d74_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/dist/vendors.0.0.44.min.jsa
Source: 4062a9b77de09d74_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/dist/vendors.0.0.44.min.jsaD
Source: 7312bd0bd68482f6_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/main.fddd20ab.chunk.js
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/main.fddd20ab.chunk.jsa
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/main.fddd20ab.chunk.jsaD
Source: 99e7b13f2ae86ff9_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/runtime-main.c9129696.js
Source: 99e7b13f2ae86ff9_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/runtime-main.c9129696.jsaD
Source: b7c177f399f061b7_0.0.dr String found in binary or memory: https://statics-view.genial.ly/view/static/js/vendors~charts.612ad434.chunk.js
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://stats.g.doubleclick.net
Source: 9c417454ae605bd9_0.0.dr String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: messages.json41.0.dr String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://t806zzjvhj.execute-api.eu-west-1.amazonaws.com/prod
Source: b510d5121b6a3bbe_0.0.dr, 9c417454ae605bd9_0.0.dr, 0fb7f5ed12432205_0.0.dr String found in binary or memory: https://tagassistant.google.com/
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://u0f62tq6q2.execute-api.eu-west-1.amazonaws.com/production/visits-likes
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://use.fontawesome.com/
Source: 0778307c93d4285c_0.0.dr, Current Session.0.dr String found in binary or memory: https://view.genial.ly
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://view.genial.ly/
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/5a660638621bd0183fdb465b/interactive-content-trivial-quiz-ii
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/5a660638621bd0183fdb465b/interactive-content-trivial-quiz-iiK
Source: History-journal.0.dr String found in binary or memory: https://view.genial.ly/5a660638621bd0183fdb465b/interactive-content-trivial-quiz-iiTRIVIAL
Source: Favicons-journal.0.dr String found in binary or memory: https://view.genial.ly/5a660638621bd0183fdb465b/interactive-content-trivial-quiz-iiV
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/5f1a93c2a1a5620d688518a5/interactive-content-dashboard-eng
Source: History-journal.0.dr String found in binary or memory: https://view.genial.ly/5f1a93c2a1a5620d688518a5/interactive-content-dashboard-engDASHBOARD
Source: Favicons-journal.0.dr String found in binary or memory: https://view.genial.ly/5f1a93c2a1a5620d688518a5/interactive-content-dashboard-engY
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/5f6350e779626a0d712891f0
Source: Favicons-journal.0.dr String found in binary or memory: https://view.genial.ly/606c014822dac50cf1b7c835/interactive-content-pastel-color-map
Source: History-journal.0.dr String found in binary or memory: https://view.genial.ly/606c014822dac50cf1b7c835/interactive-content-pastel-color-mapPASTEL
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/60bdff0f347fbd0d328a8bfe
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/60d968b961dbed0dd1bd2fea/interactive-content-online-shop-guide
Source: History.0.dr String found in binary or memory: https://view.genial.ly/60d968b961dbed0dd1bd2fea/interactive-content-online-shop-guideONLINE
Source: Current Session.0.dr String found in binary or memory: https://view.genial.ly/60d968b961dbed0dd1bd2fea/interactive-content-online-shop-guideSZ
Source: Favicons.0.dr String found in binary or memory: https://view.genial.ly/60d968b961dbed0dd1bd2fea/interactive-content-online-shop-guideX
Source: Current Session.0.dr, Favicons-journal.0.dr String found in binary or memory: https://view.genial.ly/614e65ad1f21fe0d7ec3b264
Source: History Provider Cache.0.dr String found in binary or memory: https://view.genial.ly/614e65ad1f21fe0d7ec3b2642#Panelfbs
Source: History-journal.0.dr String found in binary or memory: https://view.genial.ly/614e65ad1f21fe0d7ec3b264Panelfbs
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://view.genial.ly/Preview/Index/
Source: Favicons-journal.0.dr String found in binary or memory: https://view.genial.ly/favicon.ico
Source: Favicons-journal.0.dr String found in binary or memory: https://view.genial.ly/favicon.icoz
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://ws-dev.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://ws-eu-west-1.genial.ly
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://ws.genial.ly
Source: Network Action Predictor-journal.0.dr String found in binary or memory: https://www.clickfunnels.com/
Source: 9dcde2c2181e9943_0.0.dr String found in binary or memory: https://www.clickfunnels.com/assets/lander.js
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://www.google-analytics.com
Source: 4518b842394ccec3_0.0.dr, b510d5121b6a3bbe_0.0.dr String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: b510d5121b6a3bbe_0.0.dr String found in binary or memory: https://www.google-analytics.com/analytics.jsaD
Source: b510d5121b6a3bbe_0.0.dr, 9c417454ae605bd9_0.0.dr String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: b510d5121b6a3bbe_0.0.dr, 42dc0dfef585eefe_0.0.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: 22dfad3329087616_0.0.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=OPT-NMJDJ9J&t=gtm18&cid=2090427844.1632744494&aip=true
Source: 07e51f63672c940b_0.0.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=OPT-NMJDJ9J&t=gtm4&cid=2090427844.1632744494&aip=true
Source: 9c417454ae605bd9_0.0.dr, 0fb7f5ed12432205_0.0.dr String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://www.google.ch
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, manifest.json0.0.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://www.google.com
Source: manifest.json1.0.dr String found in binary or memory: https://www.google.com/
Source: 9c417454ae605bd9_0.0.dr, 0fb7f5ed12432205_0.0.dr String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: manifest.json0.0.dr String found in binary or memory: https://www.google.com;
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://www.googleapis.com
Source: manifest.json1.0.dr String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json1.0.dr String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json1.0.dr String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json1.0.dr String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json1.0.dr String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://www.googletagmanager.com
Source: b510d5121b6a3bbe_0.0.dr, 9c417454ae605bd9_0.0.dr, 0fb7f5ed12432205_0.0.dr, 42dc0dfef585eefe_0.0.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: 6ed0f346afea4b01_0.0.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-HB449G7R47&l=dataLayer&cx=c
Source: 91588afd058d8eee_0.0.dr String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-K3DDDL4
Source: ae5498ec-e417-4327-8f03-8515bdeb4b7e.tmp.3.dr, 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr String found in binary or memory: https://www.gstatic.com;
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://xb4w0gh326.execute-api.eu-west-1.amazonaws.com/dev/download
Source: 0778307c93d4285c_0.0.dr String found in binary or memory: https://xtpbpnvzn0.execute-api.us-east-1.amazonaws.com/prod/compress
Source: 9069b129-4784-4d27-bb48-7ac4fb7b2cae.tmp.3.dr String found in binary or memory: https://yt3.ggpht.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Local\Temp\0d1bdbab-e58e-4f24-80ce-063ceb43824d.tmp Jump to behavior
Source: classification engine Classification label: mal72.phis.win@53/321@0/53
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://2c7.ir/4sv4E'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1560,16086817351805558034,16500979573986469014,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1684 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1560,16086817351805558034,16500979573986469014,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=3108 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1560,16086817351805558034,16500979573986469014,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1684 /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1560,16086817351805558034,16500979573986469014,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=3108 /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-6151B429-1AB0.pma Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 491031 URL: https://2c7.ir/4sv4E Startdate: 27/09/2021 Architecture: WINDOWS Score: 72 24 Antivirus detection for URL or domain 2->24 26 Antivirus / Scanner detection for submitted sample 2->26 28 Misleading page title found 2->28 30 Yara detected HtmlPhish10 2->30 6 chrome.exe 16 501 2->6         started        process3 dnsIp4 14 192.168.2.1 unknown unknown 6->14 16 239.255.255.250 unknown Reserved 6->16 9 chrome.exe 248 6->9         started        12 chrome.exe 6->12         started        process5 dnsIp6 18 67.202.94.94 STEADFASTUS United States 9->18 20 82.99.244.238 POLIR Iran (ISLAMIC Republic Of) 9->20 22 49 other IPs or domains 9->22
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
52.218.108.99
 unknown United States
16509 AMAZON-02US false
13.225.78.68
 unknown United States
16509 AMAZON-02US false
8.8.8.8
 unknown United States
15169 GOOGLEUS false
172.217.168.46
 unknown United States
15169 GOOGLEUS false
104.16.148.64
 unknown United States
13335 CLOUDFLARENETUS false
13.224.193.77
 unknown United States
16509 AMAZON-02US false
172.217.168.42
 unknown United States
15169 GOOGLEUS false
104.16.12.194
 unknown United States
13335 CLOUDFLARENETUS false
142.250.203.99
 unknown United States
15169 GOOGLEUS false
162.247.243.147
 unknown United States
13335 CLOUDFLARENETUS false
13.225.78.110
 unknown United States
16509 AMAZON-02US false
34.104.35.123
 unknown United States
15169 GOOGLEUS false
216.58.215.227
 unknown United States
15169 GOOGLEUS false
104.21.15.175
 unknown United States
13335 CLOUDFLARENETUS false
82.99.244.238
 unknown Iran (ISLAMIC Republic Of)
60976 POLIR false
52.49.29.78
 unknown United States
16509 AMAZON-02US false
172.217.168.1
 unknown United States
15169 GOOGLEUS false
199.232.194.2
 unknown United States
54113 FASTLYUS false
54.247.36.38
 unknown United States
16509 AMAZON-02US false
20.150.83.196
 unknown United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
172.217.168.13
 unknown United States
15169 GOOGLEUS false
67.202.94.94
 unknown United States
32748 STEADFASTUS false
172.217.168.14
 unknown United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
52.17.252.170
 unknown United States
16509 AMAZON-02US false
172.217.168.10
 unknown United States
15169 GOOGLEUS false
52.218.24.59
 unknown United States
16509 AMAZON-02US false
104.16.94.65
 unknown United States
13335 CLOUDFLARENETUS false
13.225.78.40
 unknown United States
16509 AMAZON-02US false
142.250.203.110
 unknown United States
15169 GOOGLEUS false
13.225.78.46
 unknown United States
16509 AMAZON-02US false
157.240.17.15
 unknown United States
32934 FACEBOOKUS false
172.217.168.67
 unknown United States
15169 GOOGLEUS false
172.217.168.3
 unknown United States
15169 GOOGLEUS false
34.247.225.137
 unknown United States
16509 AMAZON-02US false
172.217.168.4
 unknown United States
15169 GOOGLEUS false
151.101.112.193
 unknown United States
54113 FASTLYUS false
104.16.16.194
 unknown United States
13335 CLOUDFLARENETUS false
104.21.78.7
 unknown United States
13335 CLOUDFLARENETUS false
13.224.193.104
 unknown United States
16509 AMAZON-02US false
142.250.203.104
 unknown United States
15169 GOOGLEUS false
54.155.182.199
 unknown United States
16509 AMAZON-02US false
151.101.2.137
 unknown United States
54113 FASTLYUS false
104.16.149.64
 unknown United States
13335 CLOUDFLARENETUS false
172.217.168.78
 unknown United States
15169 GOOGLEUS false
142.250.145.156
 unknown United States
15169 GOOGLEUS false
104.16.13.194
 unknown United States
13335 CLOUDFLARENETUS false
173.194.160.70
 unknown United States
15169 GOOGLEUS false
172.217.168.74
 unknown United States
15169 GOOGLEUS false
13.224.193.86
 unknown United States
16509 AMAZON-02US false
13.224.193.117
 unknown United States
16509 AMAZON-02US false

Private
IP
192.168.2.1
127.0.0.1

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://view.genial.ly/5a660638621bd0183fdb465b/interactive-content-trivial-quiz-ii false
    		high
    https://view.genial.ly/606c014822dac50cf1b7c835/interactive-content-pastel-color-map false
      		high
      https://view.genial.ly/614e65ad1f21fe0d7ec3b264 false
      • SlashNext: Fake Login Page type: Phishing & Social Engineering
      		 high
      https://auth.genial.ly/login false
        		high
        https://view.genial.ly/60bdff0f347fbd0d328a8bfe false
          		high
          https://view.genial.ly/60d968b961dbed0dd1bd2fea/interactive-content-online-shop-guide false
            		high
            https://auth.genial.ly/signup false
              		high