Edit tour

Windows Analysis Report
http://moodys-local.com

Overview

General Information

Sample URL:	http://moodys-local.com
Analysis ID:	1523115
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden javascript code

Javascript checks online IP of machine

Program does not show much activity (idle)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3168 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2212,i,14543785170155192647,5195907460586099330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://moodys-local.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://moodys-local.com/

HTTP Parser: Base64 decoded: {"version":3,"sources":["/cfsetup_build/src/orchestrator/turnstile/templates/turnstile.scss","%3Cinput%20css%20qtFLbZ%3E"],"names":[],"mappings":"AAmCA,gBACI,GACI,uBClCN,CACF,CDqCA,kBACI,GACI,mBCnCN,CACF,CDsCA,iBACI,MAEI,cCrCN,CDwCE,IACI,mBCtCN,CACF,CDyCA...

Source: https://moodyslocal.com.mx/wp-content/uploads/siteground-optimizer-assets/cookie-law-info.min.js?ver=2.6.2

HTTP Parser: var cli_cookie,cli,cliblocker;cli_accept_cookie_name=typeof cli_accept_cookie_name!='undefined'?cli_accept_cookie_name:'viewed_cookie_policy',cli_prefernce_cookie=typeof cli_prefernce_cookie!='undefined'?cli_prefernce_cookie:'cookielawinfoconsent',cli_accept_cookie_expire=typeof cli_accept_cookie_expire!='undefined'?cli_accept_cookie_expire:365,cli_cookiebar_as_popup=typeof cli_cookiebar_as_popup!='undefined'&&cli_cookiebar_as_popup,cli_cookie={set:function(b,f,c){var d="",g,a,e;!0===boolean(cli_data.secure_cookies)&&(d=";secure"),g=cli_data.cookiedomain!==''?";domain="+cli_data.cookiedomain:'',a=new date,a.settime(a.gettime()+c*24*60*60*1e3),e=";expires="+a.togmtstring(),c<1?this.erasecookie(b,e):document.cookie=b+"="+f+d+e+g+";path=/"},read:function(e){for(var c=e+"=",d=document.cookie.split(';'),b=0,a;b<d.length;b++){for(a=d[b];a.charat(0)==' ';)a=a.substring(1,a.length);if(a.indexof(c)===0)return a.substring(c.length,a.length)}return null},erase:function(a){this.set(a,"",-10)},erasecookie:function(c,d,b){...

Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon
Source: https://moodys-local.com/	HTTP Parser: No favicon

Source: chromecache_510.2.dr, chromecache_436.2.dr	String found in binary or memory: src: '//www.youtube.com/embed/%id%?autoplay=1' equals www.youtube.com (Youtube)
Source: chromecache_534.2.dr, chromecache_634.2.dr, chromecache_332.2.dr	String found in binary or memory: src: "//www.youtube.com/embed/%id%?autoplay=1" equals www.youtube.com (Youtube)
Source: chromecache_560.2.dr	String found in binary or memory: href='https://www.linkedin.com/company/moodys-local/' equals www.linkedin.com (Linkedin)
Source: chromecache_369.2.dr, chromecache_667.2.dr, chromecache_451.2.dr	String found in binary or memory: href='https://www.linkedin.com/company/moodys-local/' equals www.linkedin.com (Linkedin)
Source: chromecache_689.2.dr	String found in binary or memory: ",cleanProgressDescriptionText:"Ready to download",timeoutTitle:"Can't scan this document for viruses",dirtyTitle:"This document is not safe",timeoutSubtitle:"We were unable to scan this document for viruses. Would you still like to proceed?",dirtySubtitle:"We detected a virus in this document that could harm your device."}};var r={type:"presentation",height:1028,width:728,manifestUrl:null,manifestUrlExpiresAt:Date.now()+366e4,totalPageCount:10,title:"Portrait document test",subtitle:"20 pages",downloadTitle:"Portrait document test PDF",coverPages:n};e.DOCUMENT_DATA_PORTRAIT=r;var o={type:"presentation",height:1028,width:728,manifestUrl:"https://s3.amazonaws.com/test-test-test-0531/mastermanifest.json",manifestUrlExpiresAt:Date.now()+366e4,totalPageCount:21,title:"Portrait document test",subtitle:"21 pages",downloadTitle:"Portrait document test PDF",trackingId:"trackingId2",objectUrn:"objectUrn2",coverPages:function(t){for(var e=t.length;e<20;e+=1)t[e]={type:"image",config:{src:"",transcript:null}};return t[20]={type:"text",config:{text:"Want to view more? Unlock the full document below."}},t}([].concat(function(t){if(Array.isArray(t)){for(var e=0,n=Array(t.length);e<t.length;e++)n[e]=t[e];return n}return Array.from(t)}(n)))};e.DOCUMENT_DATA_PORTRAIT_WITH_APPENDED_TEXT=o;var a={type:"presentation",height:200,width:480,manifestUrl:"https://s3.amazonaws.com/test-test-test-0531/mastermanifest.json",manifestUrlExpiresAt:Date.now()+366e4,totalPageCount:20,title:"Landscape document test",subtitle:"20 pages",downloadTitle:"Landscape document test PDF",coverPages:i};e.DOCUMENT_DATA_LANDSCAPE=a;var s={type:"presentation",height:200,width:480,manifestUrl:"https://s3.amazonaws.com/test-test-test-0531/mastermanifest.json",manifestUrlExpiresAt:Date.now()+366e4,totalPageCount:20,title:"Landscape document test",subtitle:"20 pages",downloadTitle:"Landscape document test PDF",coverPages:i,trackingId:"trackingId",objectUrn:"objectUrn"};e.DOCUMENT_DATA_LANDSCAPE_TRACKING=s;e.DOCUMENT_DATA_COMPACT_LAYOUT={enableBottombar:!0,authorTitle:"Jane Doe",authorSubtitle:"Software Engineer",authorTitleUrl:"https://www.linkedin.com/in/janedoe123456",inbugUrl:"https://www.linkedin.com/feed/update/urn:li:activity:123456789"};e.DOCUMENT_DATA_COMPACT_LAYOUT_AUTHOR_TOPBAR={enableTopbarAuthor:!0,authorTitle:"Jane Doe",authorSubtitle:"Software Engineer",authorTitleUrl:"https://www.linkedin.com/in/janedoe123456",inbugUrl:"https://www.linkedin.com/feed/update/urn:li:activity:123456789"};e.DOCUMENT_TOPBAR_DIVIDER=" equals www.linkedin.com (Linkedin)
Source: chromecache_702.2.dr, chromecache_709.2.dr	String found in binary or memory: (()=>{function a(b){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(a){return typeof a}:function(a){return a&&"function"==typeof Symbol&&a.constructor===Symbol&&a!==Symbol.prototype?"symbol":typeof a},a(b)}jQuery(function(b){var c,d;b(".dtq-swapped-img-selector").each(function(){var c,e,f,g,h=b(this).find(".dtq-swapped-img"),d=h.data("schema");d&&"object"===a(d)&&(c=h,e={desktop:d.desktop,tablet:d.tablet,phone:d.phone,hover:d.hover},f=function(b,a){a&&a.length>0&&jQuery(b).attr("src",a)},(g=function(){var a=jQuery(document).width();f(c,a<768?e.phone:a>=768&&a<981?e.tablet:e.desktop)})(),jQuery(window).on("resize",g),jQuery(c).closest(".dtq-swapped-img-selector").on({mouseenter:function(){f(c,e.hover),jQuery(c).addClass("dtq-img-hovered")},mouseleave:function(){g(),jQuery(c).removeClass("dtq-img-hovered")}}))}),b(".dtq-carousel").each(function(){var a=b(this),c=a.data("settings");a.slick(Object.assign({edgeFriction:.35,useTransform:!0,touchThreshold:600},c))}),b(".dtq-lightbox").magnificPopup({type:"image",mainClass:"mfp-with-zoom",gallery:{enabled:!1},zoom:{enabled:!0,duration:300,easing:"ease-in-out"}}),b(".dtq-animated-text").each(function(){var a=b(this),c=a.data("settings"),f=a.attr("id"),d=a.data("type"),g="#".concat(f),e,h;switch(d){case"typed":new Typed("".concat(g," .dtq-typed-text"),c);break;case"tilt":a.find(".dtq-animated-text-tilt").textillate(c),console.log(c);break;case"slide":e=a.find(".dtq-animated-text-slide"),h=e.find("li").removeClass("text-in").first().addClass("text-in"),setInterval(function(){var a=e.find(".text-in").addClass("text-out").removeClass("text-in").next("li");a.length?a.addClass("text-in").removeClass("text-out"):h.addClass("text-in").removeClass("text-out")},parseInt(c.slide_gap));break;default:console.warn("Unsupported animation type:",d)}}),b(".dtq-image-compare").each(function(){var a=b(this).data("offsetpct"),c=b(this).data("moveonhover"),d=b(this).data("orientation"),e=b(this).data("beforelabel"),f=b(this).data("afterlabel"),g=b(this).data("overlay");b(this).find(".dtq-image-compare-container").twentytwenty({default_offset_pct:a,move_slider_on_hover:"on"===c,orientation:d,before_label:e,after_label:f,no_overlay:"on"!==g,move_with_handle_only:!1,click_to_move:!0})}),c=b(".dtq-news-tricker"),c&&c.length>0&&c.each(function(){var a=b(this).find("#parent").width();b(this).get(0).style.setProperty("--width","".concat(a,"px"))}),b(".dtq-counter .dtq-number-text").each(function(b,a){(0,window.counterUp.default)(a,{duration:5e3,delay:16})}),b(".dtq-scroll-image").each(function(){!function(a){var b=a.find(".dtq-scroll-image-el"),d=a.find(".dtq-scroll-image-overlay"),c=a.data("dir-hover"),e=a.data("dir-scroll"),h,f,i;function g(){return"X"===c[0]?parseInt(b.width())-parseInt(a.width()):parseInt(b.height())-parseInt(a.height())}"none"!==c&&(h="X_rtl"===c\|\|"Y_btt"===c?"-":"",f=c[0],i=Math.max(g(),0),a.on("mouseenter",function(){b.css("transform","translate".concat(f,"(").concat(h).concat(i,
Source: chromecache_463.2.dr, chromecache_415.2.dr, chromecache_469.2.dr, chromecache_760.2.dr	String found in binary or memory: (()=>{function a(b){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(a){return typeof a}:function(a){return a&&"function"==typeof Symbol&&a.constructor===Symbol&&a!==Symbol.prototype?"symbol":typeof a},a(b)}jQuery(function(b){var c,d;b(".dtq-swapped-img-selector").each(function(){var c,e,f,g,h=b(this).find(".dtq-swapped-img"),d=h.data("schema");d&&"object"===a(d)&&(c=h,e={desktop:d.desktop,tablet:d.tablet,phone:d.phone,hover:d.hover},f=function(b,a){a&&a.length>0&&jQuery(b).attr("src",a)},(g=function(){var a=jQuery(document).width();f(c,a<768?e.phone:a>=768&&a<981?e.tablet:e.desktop)})(),jQuery(window).on("resize",g),jQuery(c).closest(".dtq-swapped-img-selector").on({mouseenter:function(){f(c,e.hover),jQuery(c).addClass("dtq-img-hovered")},mouseleave:function(){g(),jQuery(c).removeClass("dtq-img-hovered")}}))}),b(".dtq-carousel").each(function(){var a=b(this),c=a.data("settings");a.slick(Object.assign({edgeFriction:.35,useTransform:!0,touchThreshold:600},c))}),b(".dtq-lightbox").magnificPopup({type:"image",mainClass:"mfp-with-zoom",gallery:{enabled:!1},zoom:{enabled:!0,duration:300,easing:"ease-in-out"}}),b(".dtq-animated-text").each(function(){var a=b(this),c=a.data("settings"),f=a.attr("id"),d=a.data("type"),g="#".concat(f),e,h;switch(d){case"typed":new Typed("".concat(g," .dtq-typed-text"),c);break;case"tilt":a.find(".dtq-animated-text-tilt").textillate(c),console.log(c);break;case"slide":e=a.find(".dtq-animated-text-slide"),h=e.find("li").removeClass("text-in").first().addClass("text-in"),setInterval(function(){var a=e.find(".text-in").addClass("text-out").removeClass("text-in").next("li");a.length?a.addClass("text-in").removeClass("text-out"):h.addClass("text-in").removeClass("text-out")},parseInt(c.slide_gap));break;default:console.warn("Unsupported animation type:",d)}}),b(".dtq-image-compare").each(function(){var a=b(this).data("offsetpct"),c=b(this).data("moveonhover"),d=b(this).data("orientation"),e=b(this).data("beforelabel"),f=b(this).data("afterlabel"),g=b(this).data("overlay");b(this).find(".dtq-image-compare-container").twentytwenty({default_offset_pct:a,move_slider_on_hover:"on"===c,orientation:d,before_label:e,after_label:f,no_overlay:"on"!==g,move_with_handle_only:!1,click_to_move:!0})}),c=b(".dtq-news-tricker"),c&&c.length>0&&c.each(function(){var a=b(this).find("#parent").width();b(this).get(0).style.setProperty("--width","".concat(a,"px"))}),b(".dtq-counter .dtq-number-text").each(function(b,a){(0,window.counterUp.default)(a,{duration:5e3,delay:16})}),b(".dtq-scroll-image").each(function(){!function(a){var b=a.find(".dtq-scroll-image-el"),d=a.find(".dtq-scroll-image-overlay"),c=a.data("dir-hover"),e=a.data("dir-scroll"),h,f,i;function g(){return"X"===c[0]?parseInt(b.width())-parseInt(a.width()):parseInt(b.height())-parseInt(a.height())}"none"!==c&&(h="X_rtl"===c\|\|"Y_btt"===c?"-":"",f=c[0],i=Math.max(g(),0),a.on("mouseenter",function(){b.css("transform","translate".concat(f,"(").concat(h).concat(i,
Source: chromecache_759.2.dr, chromecache_804.2.dr, chromecache_821.2.dr, chromecache_664.2.dr, chromecache_779.2.dr, chromecache_823.2.dr, chromecache_570.2.dr, chromecache_591.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_759.2.dr, chromecache_804.2.dr, chromecache_821.2.dr, chromecache_664.2.dr, chromecache_779.2.dr, chromecache_823.2.dr, chromecache_570.2.dr, chromecache_591.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_759.2.dr, chromecache_804.2.dr, chromecache_821.2.dr, chromecache_664.2.dr, chromecache_779.2.dr, chromecache_823.2.dr, chromecache_570.2.dr, chromecache_591.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_759.2.dr, chromecache_804.2.dr, chromecache_821.2.dr, chromecache_664.2.dr, chromecache_779.2.dr, chromecache_823.2.dr, chromecache_570.2.dr, chromecache_591.2.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2212,i,14543785170155192647,5195907460586099330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://moodys-local.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2212,i,14543785170155192647,5195907460586099330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source	Detection	Scanner	Label	Link
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://github.com/rnmp/salvattore	0%	Virustotal		Browse
http://momentjs.com/guides/#/warnings/zone/	0%	Virustotal		Browse
https://brasil.moodys-local.com	0%	Virustotal		Browse
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	Virustotal		Browse
https://klim.co.nz/licences/Copyright	0%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
https://moodyslocal.com.pe/	false		unknown
https://moodyslocal.com.pa/	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://moodyslocal.com.mx/sectores/empresas/servicios/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/reporte/issuer-report/informe-de-emisor-municipio-de-pesqueria-3/	chromecache_451.2.dr	false		unknown
https://moodys-local.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cooki	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.mx/wp-content/uploads/2024/05/mdy_local_rgb_white-980x472.webp	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/reporte/category/finanzas-estructuradas/hipoteca-residencial/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/wp-json/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.1	chromecache_560.2.dr	false		unknown
https://github.com/rnmp/salvattore	chromecache_463.2.dr, chromecache_415.2.dr, chromecache_469.2.dr, chromecache_760.2.dr, chromecache_459.2.dr, chromecache_808.2.dr	false	0%, Virustotal, Browse	unknown
https://moodyslocal.com.mx/reportes/	chromecache_451.2.dr	false		unknown
https://moodys-local.com/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pa/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fmoodyslocal.com.pa%2F&for	chromecache_369.2.dr	false		unknown
https://moodyslocal.com.pa/sectores/finanzas-estructuradas/flujo-de-fondos-futuros/	chromecache_369.2.dr	false		unknown
https://moodyslocal.com.pe/sectores/entidades-financieras/companias-de-seguro/	chromecache_560.2.dr	false		unknown
https://bolivia.moodys-local.com	chromecache_369.2.dr, chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/reporte/category/sub-soberanos/provincia-estado/	chromecache_451.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_826.2.dr, chromecache_393.2.dr, chromecache_629.2.dr	false	URL Reputation: safe	unknown
https://media.licdn.com/dms/image/D4E10AQG6ID8Bv_ez5A/ads-document-images_1920/1/1716984135279?e=172	chromecache_717.2.dr, chromecache_589.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/sub-soberanos/provincia-estado/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/locaciones/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/entidades-financieras/gestor-de-activos/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/plugins/divi-customblog-module/styles/style.min.css?ver=2.0.3	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.mx/wp-content/uploads/2024/05/mdy_local_rgb_white.webp	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pa/reporte/category/entidades-financieras/bancos/	chromecache_369.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_796.2.dr, chromecache_794.2.dr	false	0%, Virustotal, Browse	unknown
https://moodyslocal.com.pe/wp-content/plugins/ajax-search-lite/css/style.basic.css?ver=4.12.3	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pa/reporte/rating-action/moodys-local-panama-asigna-calificacion-de-entidad-	chromecache_369.2.dr	false		unknown
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_796.2.dr, chromecache_794.2.dr	false	0%, Virustotal, Browse	unknown
https://moodyslocal.com.pe/wp-content/uploads/et-fonts/GT-America-Standard-Bold.otf	chromecache_560.2.dr	false		unknown
https://brasil.moodys-local.com	chromecache_369.2.dr, chromecache_451.2.dr	false	0%, Virustotal, Browse	unknown
https://moodys-local.com/locations/	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/fondos/fondos-de-renta-fija/	chromecache_451.2.dr	false		unknown
https://widgets.sociablekit.com/linkedin-page-posts/iframe/208628	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/entidades-financieras/companias-de-seguro/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pe/reporte/category/entidades-financieras/bancos/	chromecache_560.2.dr	false		unknown
https://klim.co.nz/licences/Copyright	chromecache_566.2.dr	false	0%, Virustotal, Browse	unknown
https://moodyslocal.com.pe/reportes/metodologias-y-marcos-analiticos/marcos-analiticos-de-evaluacion	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/proyectos-de-infraestructura/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pa/reporte/category/entidades-financieras/	chromecache_369.2.dr	false		unknown
https://moodyslocal.com.mx/reporte/reforma-judicial-impactaria-mas-a-ifnbs-que-a-bancos-impago-de-me	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.mx/sectores/empresas/construccion/	chromecache_451.2.dr	false		unknown
https://github.com/dimsemenov/Magnific-Popup/issues/2	chromecache_510.2.dr, chromecache_436.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.mx/reportes/metodologias-y-marcos-analiticos/marcos-analiticos-de-evaluacion	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pa/reporte/rating-action/moodys-local-panama-califica-series-r-y-s-de-bonos-	chromecache_369.2.dr	false		unknown
http://momentjs.com/timezone/docs/#/data-loading/.	chromecache_322.2.dr	false		unknown
https://moodyslocal.com.mx/reportes/calificaciones-y-evaluaciones/tasas-historicas-de-incumplimiento	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pe/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.6.2	chromecache_560.2.dr	false		unknown
https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t	chromecache_631.2.dr	false		unknown
https://moodyslocal.com.pe/reportes/informes/	chromecache_560.2.dr	false		unknown
https://github.com/ftlabs/fastclick	chromecache_510.2.dr, chromecache_436.2.dr	false		unknown
https://moodys-local.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fmoodys-local.com%2F&format=	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/plugins/supreme-modules-pro-for-divi/public/css/swiper.css?ver	chromecache_560.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_794.2.dr	false		unknown
https://moodyslocal.com.pe/sectores/empresas/agronegocios/	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pe/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fmoodyslocal.com.pe%2F	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pa/reporte/issuer-report/informe-de-emisor-promocion-medica-s-a-13/	chromecache_369.2.dr	false		unknown
http://www.elegantthemes.com	chromecache_369.2.dr, chromecache_560.2.dr, chromecache_667.2.dr, chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pe/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17	chromecache_560.2.dr	false		unknown
https://jira01.corp.linkedin.com:8443/browse/PUBLISHING-14919	chromecache_703.2.dr, chromecache_579.2.dr	false		unknown
https://moodyslocal.com.pe/reporte/rating-action/moodys-local-peru-asigno-categoria-de-riesgo-a-euro	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pe/sectores/empresas/energia/	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.mx/reporte/issuer-report/informe-de-emisor-gobierno-del-estado-de-chiapas-5/	chromecache_451.2.dr	false		unknown
https://moodys-local.com/wp-json/	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/et-cache/42/et-divi-dynamic-tb-39457-tb-14210-42.css?ver=17271	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pe/sectores/entidades-financieras/bancos/	chromecache_560.2.dr	false		unknown
https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js	chromecache_642.2.dr	false		unknown
https://moodyslocal.com.pa/reportes/metodologias-y-marcos-analiticos/marcos-analiticos-de-evaluacion	chromecache_369.2.dr	false		unknown
https://moodys-local.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/animate.css?ver=	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pa/reporte/sistema-de-seguros-de-panama-crecimiento-de-las-primas-anualizada	chromecache_369.2.dr	false		unknown
http://daneden.me/animate	chromecache_385.2.dr, chromecache_795.2.dr, chromecache_690.2.dr	false	URL Reputation: safe	unknown
https://brasil.moodys-local.com/	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pe/sectores/empresas/telecomunicaciones/	chromecache_560.2.dr	false		unknown
https://moodys-local.com/wp-content/plugins/supreme-modules-pro-for-divi/public/css/readmore.css?ver	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pe/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	chromecache_560.2.dr	false		unknown
https://media.licdn.com/dms/image/D4E10AQG6ID8Bv_ez5A/ads-document-images_800/2/1716984134316?e=1728	chromecache_684.2.dr, chromecache_785.2.dr	false		unknown
https://moodys-local.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/	chromecache_667.2.dr	false		unknown
https://uruguay.moodys-local.com	chromecache_369.2.dr, chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/uploads/2024/05/mdy_local_rgb_white-480x231.webp	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pa/reportes/metodologias-y-marcos-analiticos/	chromecache_369.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/plugins/ajax-search-lite/js/min/plugin/optimized/asl-load.js?v	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pa/locaciones/	chromecache_369.2.dr	false		unknown
https://moodyslocal.com.pe/reporte/rating-action/moodys-local-peru-retira-la-clasificacion-de-un-ins	chromecache_560.2.dr	false		unknown
https://player.vimeo.com/NOTICE.txt	chromecache_550.2.dr, chromecache_472.2.dr	false		unknown
https://moodyslocal.com.pa/sectores/fondos/fondos-de-inversion/	chromecache_369.2.dr	false		unknown
https://media.licdn.com/dms/document/pl/D4E10AQG6ID8Bv_ez5A/ads-document-images_480/0/1716984135344?	chromecache_813.2.dr	false		unknown
https://moodys-local.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jq	chromecache_667.2.dr	false		unknown
https://moodyslocal.com.pe/reporte/category/empresas/	chromecache_560.2.dr	false		unknown
https://moodyslocal.com.pe/wp-content/themes/Divi/js/smoothscroll.js?ver=4.27.1	chromecache_560.2.dr	false		unknown
https://www.linkedin.com/company/moodys-local/	chromecache_369.2.dr, chromecache_560.2.dr, chromecache_667.2.dr, chromecache_451.2.dr	false		unknown
http://hammerjs.github.io/	chromecache_689.2.dr	false	URL Reputation: safe	unknown
https://moodyslocal.com.mx/sectores/sub-soberanos/ciudad/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pa/reportes/metodologias-y-marcos-analiticos/metodologias-de-calificacion/	chromecache_369.2.dr	false		unknown
https://moodyslocal.com.mx/reportes/informes/informes-sectoriales/	chromecache_451.2.dr	false		unknown
https://moodyslocal.com.pa/sectores/finanzas-estructuradas/	chromecache_369.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_796.2.dr, chromecache_794.2.dr	false		unknown
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_796.2.dr, chromecache_794.2.dr	false		unknown
https://moodyslocal.com.pa/wp-content/uploads/2024/05/mdy_local_rgb_white.webp	chromecache_369.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.16.136	unknown	United States	15169	GOOGLEUS	false
152.199.21.118	unknown	United States	15133	EDGECASTUS	false
173.194.76.84	unknown	United States	15169	GOOGLEUS	false
165.232.46.2	unknown	United States	22255	ALLEGHENYHEALTHNETWORKUS	false
151.101.0.217	unknown	United States	54113	FASTLYUS	false
142.250.185.227	unknown	United States	15169	GOOGLEUS	false
172.64.146.215	unknown	United States	13335	CLOUDFLARENETUS	false
137.220.35.134	unknown	United States	20473	AS-CHOOPAUS	false
35.190.80.1	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
34.174.252.232	unknown	United States	2686	ATGS-MMD-ASUS	false
151.101.130.109	unknown	United States	54113	FASTLYUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.232	unknown	United States	15169	GOOGLEUS	false
142.250.185.238	unknown	United States	15169	GOOGLEUS	false
159.203.95.49	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
142.250.186.106	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.195	unknown	United States	15169	GOOGLEUS	false
162.159.128.61	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.42	unknown	United States	15169	GOOGLEUS	false
142.250.185.74	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.74.152	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.74	unknown	United States	15169	GOOGLEUS	false
216.58.206.72	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
142.250.185.200	unknown	United States	15169	GOOGLEUS	false
142.250.181.232	unknown	United States	15169	GOOGLEUS	false
142.250.185.163	unknown	United States	15169	GOOGLEUS	false
142.250.186.131	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
104.26.13.205	unknown	United States	13335	CLOUDFLARENETUS	false
216.239.36.178	unknown	United States	15169	GOOGLEUS	false
142.250.184.200	unknown	United States	15169	GOOGLEUS	false
172.67.70.74	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.74.195	unknown	United States	15169	GOOGLEUS	false
142.250.184.202	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.131	unknown	United States	15169	GOOGLEUS	false
34.120.202.204	unknown	United States	15169	GOOGLEUS	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
216.58.206.67	unknown	United States	15169	GOOGLEUS	false
104.26.12.38	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.170	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523115
Start date and time:	2024-10-01 05:42:36 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://moodys-local.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/870@0/49
Cookbook Comments:	Browse: https://moodyslocal.com.uy/ Browse: https://moodyslocal.com.pe/ Browse: https://moodyslocal.com.pa/ Browse: https://moodyslocal.com.mx/

Input	Output
URL: https://moodys-local.com/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Moody's Local is a group of leading providers of domestic credit ratings, research and risk analyses adept at capturing the unique dynamics of local financial markets across Latin America.", "prominent_button_name":"Learn More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodys-local.com/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Moody's Local is a group of leading providers of domestic credit ratings, research and risk analyses adept at capturing the unique dynamics of local financial markets across Latin America.", "prominent_button_name":"Learn More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodys-local.com/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Moody's Local is a group of leading providers of domestic credit ratings, research and risk analyses adept at capturing the unique dynamics of local financial markets across Latin America.", "prominent_button_name":"Learn More", "text_input_field_labels":["Moody's Local strives to offer the highest level of integrity, transparency and consistency in its credit rating process"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodys-local.com/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Moody's Local is a group of leading providers of domestic credit ratings, research and risk analyses adept at capturing the unique dynamics of local financial markets across Latin America.", "prominent_button_name":"Learn More", "text_input_field_labels":["Moody's Local strives to offer the highest level of integrity, transparency and consistency in its credit rating process"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodys-local.com/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Moody's Local is a group of leading providers of domestic credit ratings, research and risk analyses adept at capturing the unique dynamics of local financial markets across Latin America.", "prominent_button_name":"Learn More", "text_input_field_labels":["Moody's Local strives to offer the highest level of integrity, transparency and consistency in its credit rating process"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodyslocal.com.uy/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Acuerdo de Usuario", "prominent_button_name":"Aceptar", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodyslocal.com.mx/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Aceptar", "prominent_button_name":"Aceptar", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moodyslocal.com.pa/ Model: jbxai	{ "brand":["Moody's"], "contains_trigger_text":true, "trigger_text":"Aceptar", "prominent_button_name":"Aceptar", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	16340
Entropy (8bit):	5.150534898621317
Encrypted:	false
SSDEEP:	384:PigFrdEG92VnfACs2CFSSO9gfnXH/9K04tyLs0kjNw:tCFCFS8nv9KkkBw
MD5:	75A27EAC4EBDE8391345328A8DE5BB87
SHA1:	8E6FC0D3B77565964BB8C8CE60215DB88AB395B7
SHA-256:	2C2321EC187119399B081DC2B2CEE8FC11F6D660FD4E8034D8967B5C31A090F9
SHA-512:	2DB9DD16FC61B376709CDA508C36BBDEA20FF0197FE784EF219073852D4BFA61AEFE79F2814AEF8D70FEC9A345D5B3B095E952F1FB90D23DAB9C7DE25D0B1AB5
Malicious:	false
Reputation:	low
URL:	https://widgets.sociablekit.com/libs/js/moment-timezone0.5.43.js
Preview:	//! moment-timezone.js.//! version : 0.5.43.//! Copyright (c) JS Foundation and other contributors.//! license : MIT.//! github.com/moment/moment-timezone..(function (root, factory) {.."use strict";.../global define/..if (typeof module === 'object' && module.exports) {...module.exports = factory(require('moment')); // Node..} else if (typeof define === 'function' && define.amd) {...define(['moment'], factory); // AMD..} else {...factory(root.moment); // Browser..}.}(this, function (moment) {.."use strict";...// Resolves es6 module loading issue..if (moment.version === undefined && moment.default) {...moment = moment.default;..}...// Do not load moment-timezone a second time...// if (moment.tz !== undefined) {..// .logError('Moment Timezone ' + moment.tz.version + ' was already loaded ' + (moment.tz.dataVersion ? 'with data from ' : 'without any data') + moment.tz.dataVersion);..// .return moment;..// }...var VERSION = "0.5.43",...zones = {},...l

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://moodyslocal.com.pe/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x463, components 3
Category:	downloaded
Size (bytes):	73754
Entropy (8bit):	7.987239343276039
Encrypted:	false
SSDEEP:	1536:9cQxjAgCY0yAGd3S4BnR0/Uqd0WXk/hWdV6hUj15iDrOZDLDF14sj+v:9jhC0d3S0nu/Nd0XAP6hi5DNLDF1BU
MD5:	CB6B9577232C4B9446B6A614997FEEF5
SHA1:	B4E666F74B38528E5D724B211893C04F91D5D8AD
SHA-256:	81288C23E58A84422E27F32A598E44A24F0ED7BD8AF2A2F9F6A497E34437124E
SHA-512:	7797C1A6CFA66E85DBE77C02AED226450E0A26C8CA69D6BBD19D241DCCB58CEF4C187ABE04D623D895062BF248011D1B42FBD8149C94D2307158221E07FA4E94
Malicious:	false
Reputation:	low
URL:	https://images.sociablekit.com/sources/linkedin-page-posts/moodys-local/7209278896523853825-images-1.jpg?nocache=1727658009813
Preview:	......JFIF...................................................%...#... , #&'))..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((........ .."..........5..................................................................\|..r.......Ajk.#....?.Gc.$v:.G..>...=........{.t$u..K.V.....v..V2R.....(_.HI.o...p&=.....KD_...\|py...[e......B.O...AC........0...D\|?....A7.u2....H..z`...........%.l.F..prE\..I..JB./)).\|.A.#._..s..9.u.SK......}.......Z.._Q.:..7...%;....y"i...ki.O8..}.T.....d....%L.2...-.q..]l<.!....:.D.#..'.W[..\...{....o5#.p.K..........^.z.D.....\...........;....s...y.w..s..q\Ps..j[k.>........-.8....3..y\.w....(:..jZ.5..&.R.g.S.!..e..m+.'.%.gx.9;.R.z.c..E....E}.L2. ....q....}......B...I.,IA.......'\|...P.s...q.y.b..Z...\|J.s....:....nl...a.*........".....J<..J.r.JKz....Ipy....7V...}.u<.+AC.Tx....D...H........h.V_.t"vQ..bvJ`.>...I@....vc...9B.......q.e..C.y.m.$...~s...i..G...}..\|...JI$.ib=.5.w.)..{.g...l.k8m......W....=..Z...4..b..sM.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x578, components 3
Category:	dropped
Size (bytes):	99746
Entropy (8bit):	7.981450121314356
Encrypted:	false
SSDEEP:	3072:cEnrpQrUL+FjNpRjHKswYeFYUoWoRC4Kk:5dCjNpBHELCUJ0C4h
MD5:	51C43926715F9E3812691124F9BA17ED
SHA1:	399207CCFC14730387AF8DC2223BBACB690503D0
SHA-256:	8B3F37E7D2E9ED758DB6DEBBB23A43922A3E6BC6D43B5931341D0DA4A17AF2BE
SHA-512:	648159E18F22F7B8AD4B9F558C78AE41393AA8442559842542E8CB5521F86A06B6F0592CEEEF35664E857BB0B60E59CAFDB96AA103D803D3A7253A9B6F1C2F6A
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................%...#... , #&'))..-0-(0%()(...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......B. .."..........5.....................................................................t... ;..:....0....6. ...@... F...........O......t..0......2a.....0....... \|..A... ..t..3G'.`3.@.0FC...#h... ##.# .A..0.d...D.>..#>zAtA......F\|.. ........Da.@$.#`#.....@8...]..t..vA.3...E....#...........t...#. `.......:.0.. ...."..... .9.. .!."1.L....JDf.@..0.`.`... .......!.....C......r:..(L.. `90....tH#0..@D.#.....g#.....0"...d.........=.........\.A.t..3.G@9.....3..=.......`.......#.>M..`.0..H.....@\...0 ..0..L....".. .......A. f.#.>L..2..c...........>L.d.$@........# ##.FH f.....E......i.....GD.G@..L.`F..>...\..r`.`.&.3.zP.Z.#..w.NmG<.bV\...%..td......=......0 ....f>K.G&.. 0`.....D...F@...aD.......0.r.g..m.s...S.V.F...........9..V...p.....:DQ.!\.c..[.{....wx.r.,... >eq......."....F...a .".1Xf..0}.........B~.Z.O...~....4..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1343
Entropy (8bit):	4.939215080601888
Encrypted:	false
SSDEEP:	24:2FetXyrZKPFsPOqKbEFaOQAOsrnh+KGwgaO9+aO6GWc6ihCsyO6edgQGAauNWaGM:rXnds/r1nh+Kngv+k/cTh0edL3jEMupi
MD5:	D71B75B2327258B1D01D50590C1F67CA
SHA1:	B7820E4FFB6BECC133C48F66D9F683545530B959
SHA-256:	1CA76922F55B389B8F590AE7E3BCC3A2DCCDCE3AFF1E5A4335AF081B76A414EA
SHA-512:	1A1930881B4D4D4F092999D6449248AEA68BF1756F6DC32A4EFCE5E7BF240A14633E76988321E5AA3E11144FE5E8C9A443ADF0FBF09A9B57A98C4D2D3A9347A2
Malicious:	false
Reputation:	low
URL:	https://moodyslocal.com.pe/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.1
Preview:	(function($){..$(function(){...var user_agent = navigator.userAgent;...var is_opera_edge;...var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];...var browser_name = '';...var browser_class = '';....if ( /trident/i.test( browser[0] ) ) {....browser_name = 'ie';...} else if ( browser[0] === 'Chrome' ) {....is_opera_edge = user_agent.match(/\b(OPR\|Edge)/);.....if ( is_opera_edge !== null ) {.....browser_name = is_opera_edge[0].replace('OPR', 'opera');....}...}....// use navigator.appName as browser name if we were unable to get it from user_agent...if ( '' === browser_name ) {....if ('standalone' in window.navigator && !window.navigator.standalone) {.....browser_name = 'uiwebview';....} else {.....browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;....}...}....browser_name = browser_name.toLowerCase();....// convert browser name to class. Some classes do not match the browser name...switch( browser_name ) {....case 'msie'

Target ID:	0
Start time:	23:43:24
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	23:43:26
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2212,i,14543785170155192647,5195907460586099330,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	23:43:29
Start date:	30/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://moodys-local.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://moodys-local.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Anti Debugging

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Windows Analysis Report
http://moodys-local.com