Edit tour
Windows
Analysis Report
https://www.explorium.ai/notice-of-processing-for-eu-residents/?email=fabrice.duval@socotec.com
Overview
General Information
Detection
Score: | 48 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
AI detected suspicious Javascript
HTML page contains obfuscated javascript
Detected hidden input values containing email addresses (often used in phishing pages)
Form action URLs do not match main URL
HTML body contains low number of good links
HTML page contains hidden javascript code
Javascript checks online IP of machine
No HTML title found
Stores files to the Windows start menu directory
URL contains potential PII (phishing indication)
Classification
- System is w10x64_ra
- chrome.exe (PID: 6344 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7032 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2168 --fi eld-trial- handle=194 8,i,150713 9515347465 1482,72823 3071337464 3987,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 6684 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt ps://www.e xplorium.a i/notice-o f-processi ng-for-eu- residents/ ?email=fab rice.duval @socotec.c om" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No yara matches
⊘No Sigma rule has matched
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
Phishing |
---|
Source: | Joe Sandbox AI: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |