Windows Analysis Report
https://uphold-login-account23.godaddysites.com/

Overview

General Information

Sample URL:	https://uphold-login-account23.godaddysites.com/
Analysis ID:	1522004
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://uphold-login-account23.godaddysites.com/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://uphold-login-account23.godaddysites.com/

LLM: Score: 9 Reasons: The legitimate domain for Uphold is uphold.com., The provided URL 'uphold-login-account23.godaddysites.com' contains extra words and is hosted on a subdomain of 'godaddysites.com', which is not associated with the official Uphold domain., The use of 'godaddysites.com' suggests the site is hosted on a web hosting service, which is commonly used for phishing attempts., The URL structure with 'uphold-login-account23' is suspicious and indicative of phishing tactics. DOM: 0.0.pages.csv

HTML title does not match URL

Source: https://uphold-login-account23.godaddysites.com/	HTTP Parser: Title: uphold-login-account does not match URL
Source: https://uphold-login-account23.godaddysites.com/services	HTTP Parser: Title: uphold-login-account does not match URL
Source: https://uphold-login-account23.godaddysites.com/contact-us	HTTP Parser: Title: uphold-login-account does not match URL

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base

HTTP Parser: No favicon

Source: https://uphold-login-account23.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://uphold-login-account23.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://uphold-login-account23.godaddysites.com/services	HTTP Parser: No <meta name="copyright".. found
Source: https://uphold-login-account23.godaddysites.com/services	HTTP Parser: No <meta name="copyright".. found
Source: https://uphold-login-account23.godaddysites.com/contact-us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49741 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.5:61563 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://uphold-login-account23.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=1f985082-7d2c-4729-933b-cb38027af52d; _tccl_visit=1f985082-7d2c-4729-933b-cb38027af52d; _scc_session=pc=1&C_TOUCH=2024-09-29T05:11:08.389Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://uphold-login-account23.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://uphold-login-account23.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=1f985082-7d2c-4729-933b-cb38027af52d; _tccl_visit=1f985082-7d2c-4729-933b-cb38027af52d; _scc_session=pc=1&C_TOUCH=2024-09-29T05:11:08.389Z
Source: global traffic	HTTP traffic detected: GET /services HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://uphold-login-account23.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=1f985082-7d2c-4729-933b-cb38027af52d; _tccl_visit=1f985082-7d2c-4729-933b-cb38027af52d; _scc_session=pc=1&C_TOUCH=2024-09-29T05:11:08.389Z
Source: global traffic	HTTP traffic detected: GET /contact-us HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://uphold-login-account23.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=1f985082-7d2c-4729-933b-cb38027af52d; _tccl_visit=1f985082-7d2c-4729-933b-cb38027af52d; _scc_session=pc=1&C_TOUCH=2024-09-29T05:11:08.389Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: uphold-login-account23.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://uphold-login-account23.godaddysites.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=1f985082-7d2c-4729-933b-cb38027af52d; _tccl_visit=1f985082-7d2c-4729-933b-cb38027af52d; _scc_session=pc=3&C_TOUCH=2024-09-29T05:11:24.499ZIf-None-Match: 3ca849560265e27b92c251b4546c3e70

Source: global traffic	DNS traffic detected: DNS query: uphold-login-account23.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: chromecache_326.2.dr, chromecache_273.2.dr, chromecache_324.2.dr, chromecache_310.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://github.com/andrew-paglinawan/QuicksandFamily)
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk30eg.woff2)
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk40eiNxw.woff2)
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/muli/v29/7Aulp_0qiz-aVz7u3PJLcUMYOFnOkEk50eiNxw.woff2)
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2)
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2)
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2)
Source: chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/ip/455a09e4-7fe3-49f8-8e6b-5c4ae1e21d11/upholdddd.png
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_271.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_271.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_306.2.dr	String found in binary or memory: https://uphold-login-account.godaddysites.com/
Source: chromecache_264.2.dr	String found in binary or memory: https://uphold-login-account.godaddysites.com/contact-us
Source: chromecache_285.2.dr	String found in binary or memory: https://uphold-login-account.godaddysites.com/services
Source: chromecache_264.2.dr, chromecache_285.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49741 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@24/174@18/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1624 --field-trial-handle=2024,i,18371166248541657203,7649873792208682438,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uphold-login-account23.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1624 --field-trial-handle=2024,i,18371166248541657203,7649873792208682438,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.121.64.201	isteam.wsimg.com	United States	16509	AMAZON-02US	false
13.248.243.5	uphold-login-account23.godaddysites.com	United States	16509	AMAZON-02US	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

Contacted Domains

Name	IP	Active
bg.microsoft.map.fastly.net	199.232.210.172	true
uphold-login-account23.godaddysites.com	13.248.243.5	true
www.google.com	172.217.16.132	true
isteam.wsimg.com	3.121.64.201	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
img1.wsimg.com	unknown	unknown
csp.secureserver.net	unknown	unknown
events.api.secureserver.net	unknown	unknown
www.godaddy.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://uphold-login-account23.godaddysites.com/	true	unknown
https://uphold-login-account23.godaddysites.com/manifest.webmanifest	true	unknown
https://uphold-login-account23.godaddysites.com/sw.js	true	unknown
https://uphold-login-account23.godaddysites.com/contact-us	true	unknown
https://uphold-login-account23.godaddysites.com/services	true	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 04:11:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0DD732A8D46F422366F6BB8D6EF58022	499D0C3C6024669F7A76F5991BDA9E0FEC670718	B2E22C662D5F9A9FAF991A0F278DA18ECE243E18768CE3F8F3187418FA95A51C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 04:11:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	DF04F90CDB9CF6C3A1FF029463E8D4FC	F5D18087FDF1577C59C3CDE70A1111644C483F85	6BAF6E9B9708BFC6BCBC88FF35B7EE26B0EE83946C2EDF356F7A6244E9327C9E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E35120518D4BB9B894FEE128AC6891C6	7516EDB423334969DD3077634803795BA653BF93	4F9D6C6CCE352A75AC23C0047C80B2C813A0BFEA79F73121E0F9A6C66AB5F048
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 04:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	68061D1776C52222025BA0FC5472DECF	60076F3AF8B8D23EC2227F6EF4A909C82999B43B	2FECD4C0CC203E926D57E68E8376AEA9D57642D5CE9B5BFC555C3FD29E86B51C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 04:11:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E6A41743A09A7DD7242425D5BB6D6B41	C0D87EC714E17AF53C744B660821DA3FBA42E6FE	9E8986B6AF96E7CA5FA73CA2FD59D5BA8878BA53B777A2854F78CF9AEA1C8C5C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 04:11:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	511860BC5AA0C4CDE97C2EFDE721B3F1	8AD559C754EB2201B7A9C71247F70AF972C9F617	DA8528A55F4E4702B2536F53EAD5C14BCF75E488AE4DD169F89AE26B2B3E3411
Chrome Cache Entry: 241	ASCII text, with very long lines (442)	5F10DF611C856F376981BE4DFBD17753	4463A27419B2FDFDBD81770C74DEE2E74BE948E0	EBD2BA2A0E879AE2CEC7D513324E04346153A581BE3AA202662E6C9D5B1CE6E1
Chrome Cache Entry: 242	ASCII text, with very long lines (2368)	ABFD2ADA44521989F7C040FC3EAEF6C9	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
Chrome Cache Entry: 243	ASCII text, with very long lines (1352)	5CC6B93D41889C0A55C6C4FCD2D89713	51A59C1DAE337817C4EBAC39FBE61C232705A893	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
Chrome Cache Entry: 244	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 21x30, components 3	7E7F51315A7B9FEDA950D317C0935F84	63BB48F510EB49A8DD58B5CA6BFCAC1B49CA07D0	94C8F8B3724B63E094B93D2BD173992E407997D650689E0269C3B51CD3B752D6
Chrome Cache Entry: 245	ASCII text, with very long lines (12092)	CF0A6326BC03720B66BC8A7C9227DE2E	2A582FF8F5A0DE527A369703029B5917F6922710	AF408D0723DBC47F5AB52C4B20F9A88FF042BBF642D477EC32782DE8CFFAF1A4
Chrome Cache Entry: 246	RIFF (little-endian) data, Web/P image	BC0447B8D3E5A3483678FCCEB364ACB0	FA77B7444DCD63BFC0BA870F83338E23A23969BC	36B7DC5E9F17B8D25FD4C8ACF91F315EFBD2E1B6240E04CFD000493E8D997287
Chrome Cache Entry: 247	ASCII text, with very long lines (33012), with no line terminators	3CA849560265E27B92C251B4546C3E70	27723725DDACBE8FA1CE303CCC2A192F95AE5EF5	5F790FC2686F81BE21B53F58600285F30C7C1E68CE1DEC8D247CCD03478E034E
Chrome Cache Entry: 248	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 249	ASCII text, with very long lines (651)	7B01FCDF2048E82F4DF741791CD44F61	D1D126931B5D6937B1496E7950342D6A06F361B9	CBC04C06117804A9A97013C97A0714B027DF8279C5F1D0FD0478756A0944AEE6
Chrome Cache Entry: 250	ASCII text, with very long lines (1352)	5CC6B93D41889C0A55C6C4FCD2D89713	51A59C1DAE337817C4EBAC39FBE61C232705A893	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
Chrome Cache Entry: 251	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 252	ASCII text, with very long lines (51229)	2D726C37E9CFF597A8B1DA8F64FB6703	EEAFB2388670F04670D0EEAB1B0D8680928EE59A	ECA61DF77C29A61A7F5973C28C485D8484B0CCBA2874C425521AD0887D61538A
Chrome Cache Entry: 253	ASCII text, with very long lines (1875)	42A956F14F8E89C314FA201AB5FC9388	67651220687C3869FD6FAB960AE4B3CA53776E2F	A9D6036466352258F71ADF94E2EB6DA8F9BEEE5FCBC73351180D1C8331D53949
Chrome Cache Entry: 254	ASCII text, with very long lines (65536), with no line terminators	55BAF821A59FAD53AA754C85AE19D0EA	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
Chrome Cache Entry: 255	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 256	HTML document, ASCII text	AC33DFA3CEA6EAF0A661C9A33E73C23B	A625E2D1480B79E4B33AB938B1041590A845479E	B2F57562DB77382F223A5C59E54450461B651711CFE2F8EC5B64A1166FE98E12
Chrome Cache Entry: 257	ASCII text, with very long lines (23126)	3D092EF4ABA019B14F01C40747E40554	1C26145272FCF4CA91AF501288CCE84B1BFFD38B	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
Chrome Cache Entry: 258	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 259	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 260	ASCII text, with very long lines (51229)	3F4532CD87BB09F531CCF169B468A8C4	743F75C9553E6C40EBB5D01ECBFCDFE672FA0C17	1CD489AF9BF0C0753DD5A6A692E569BE62C104DABD5FF52AC61D03545E63844D
Chrome Cache Entry: 261	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 16x23, components 3	C0F00435DDD6BF0FC96CA34651C7CD9F	E8494BAE92D38CEABEC7480651878220F366B95A	DBDC741F78CDEED11EEE1C0323F3CCC58C9BF94734A3E78FFC947089A421383D
Chrome Cache Entry: 262	ASCII text	ACD4F2B6117E5054FC9BF848AE8121CA	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
Chrome Cache Entry: 263	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 264	HTML document, Unicode text, UTF-8 text, with very long lines (38478)	6CEB749FFF86788F23102EB5AF6DEDD2	8365F97574935D7970ADB118A49DFAC90B460655	97A19A371D7884A665F2CD3424A1E8A3583FBD3EA280786B1EFB315B0A1F92C7
Chrome Cache Entry: 265	ASCII text, with very long lines (1809)	7112942BE59D2FE97C50ADA22C640FA7	64863C928776A59DA08B95722D963ED83AD1DD11	1BF0EF11C7A47F6399224C0BEF519AE58F5756EA422051B3DCBEDC643A72ABFB
Chrome Cache Entry: 266	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 267	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 21x30, components 3	7E7F51315A7B9FEDA950D317C0935F84	63BB48F510EB49A8DD58B5CA6BFCAC1B49CA07D0	94C8F8B3724B63E094B93D2BD173992E407997D650689E0269C3B51CD3B752D6
Chrome Cache Entry: 268	ASCII text, with very long lines (3283)	1E4C3172663AD2ACC0CEC9723E93D39F	1610B980BB81B4A4330399C81A4B23A78A70C42B	F23EC23F7792FF56FB516E06280BED56D3A80D1CFD8D48F22C2B1F93CA69F0D5
Chrome Cache Entry: 269	ASCII text, with very long lines (13449)	E135455ABAC1E365C75ACB29427BE2BD	386B236DC493D0EBE7827B2FD8897CC9DF4FE222	88C66FB773F05F8A1B9EA9092CDE47FD6204EB3D3E5EF91F8223BD8A62339B40
Chrome Cache Entry: 270	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 271	ASCII text, with very long lines (5534)	AE285D3C69E0CC610109D32B03A39F96	F6D0B1853C03E126EA7AEF1B5DE45A94EBD3B1B1	CB7F320400061BEB586A695A81226E20B1DF229AFE515AF6664518D1B2B31BA2
Chrome Cache Entry: 272	RIFF (little-endian) data, Web/P image	46A41865A64670529A69D10F800D8145	3AB8D7E4B08A1A63E3C6028A9BA26A9942892064	EAFE1713A2376AFCA100C59D016E54D24D3AA780353D84D8F754953628E2EC44
Chrome Cache Entry: 273	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 274	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 275	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 276	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp	57048B2AC9285000D36D8135975F8804	B18B6FDE4B3AD8EB528DB06277336DF22BDC8C5D	C9145EDA50F653F138AE0DBFE7203C2EB6CE3FBBEAD0420EDA94620C7740F08E
Chrome Cache Entry: 277	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 278	ASCII text, with very long lines (383)	21AD22788E6CAA18A4E9E57F7372B108	50EBDD2452193BEAB7D1899F788FBBF32D90DD55	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
Chrome Cache Entry: 279	ASCII text, with very long lines (13834)	C7B1DBB0EEF8600D5F57536998855E4D	03908243C34D5A373ACBA694EB16E30F088B4F7D	53DA7DD341F1EF0C484A7B56A17D86669287DA5D082AAA8A0AF04FD3816B6631
Chrome Cache Entry: 280	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 281	RIFF (little-endian) data, Web/P image	78D49C722C974C46963393B295A2C18D	E7F4EE4182195567054363E4AD57E8AC20C361B1	7CE181B15E878FC0BE6BD59870A88EF999D96BB68000BD5FEBA9E1EC68602929
Chrome Cache Entry: 282	ASCII text, with very long lines (483)	AC687AF8368A5DBE36B23037664288BF	EE85DFDA561ABF19C8BD933BB435D57F0ECAC859	CC9D5DE843D91F43C1694F0589A7893A9BD4BA4C0421CEE75A18E8C8777EE21A
Chrome Cache Entry: 283	ASCII text, with very long lines (5534)	FBDCE548FFEA12809F163D5BB62A6BC8	46B53731B8D5BF660E9F45879BD157B6BD34F83C	24028E91F520E2D2228F11C10B0A83D23A738E73D0ECA66DB614D83706D4DDF7
Chrome Cache Entry: 284	ASCII text, with very long lines (483)	AC687AF8368A5DBE36B23037664288BF	EE85DFDA561ABF19C8BD933BB435D57F0ECAC859	CC9D5DE843D91F43C1694F0589A7893A9BD4BA4C0421CEE75A18E8C8777EE21A
Chrome Cache Entry: 285	HTML document, Unicode text, UTF-8 text, with very long lines (32894)	7C6B40436D232C47DE0F1A09C8CA9BFA	510CF9E03317F900179556E6FA1E8CD0B912A514	E15980BF045132C23CAF38E89BA1F762915D1B2A721DF889E2AB8BA6B89E2B90
Chrome Cache Entry: 286	ASCII text, with very long lines (13449)	E135455ABAC1E365C75ACB29427BE2BD	386B236DC493D0EBE7827B2FD8897CC9DF4FE222	88C66FB773F05F8A1B9EA9092CDE47FD6204EB3D3E5EF91F8223BD8A62339B40
Chrome Cache Entry: 287	ASCII text, with very long lines (383)	21AD22788E6CAA18A4E9E57F7372B108	50EBDD2452193BEAB7D1899F788FBBF32D90DD55	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
Chrome Cache Entry: 288	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 289	ASCII text, with very long lines (516)	0D42FFB998A9CF7C25824CF365C7D0C9	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
Chrome Cache Entry: 290	Unicode text, UTF-8 text, with very long lines (4679)	D5EA3CCB122986E47C31120A0597E024	AC64614C12692D75626ABBCC5846F17E59840FBD	B30682FFC94709EDBD998288DFCC313C56C4FD23F863F5119C53DA44C32C8781
Chrome Cache Entry: 291	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 21x30, components 3	7E7F51315A7B9FEDA950D317C0935F84	63BB48F510EB49A8DD58B5CA6BFCAC1B49CA07D0	94C8F8B3724B63E094B93D2BD173992E407997D650689E0269C3B51CD3B752D6
Chrome Cache Entry: 292	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 293	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 294	ASCII text, with very long lines (367)	401821742DEF46C40D4CF5F0121C8BEC	1852305A4F2D7E120F9B7BD185790B98CDF9BFA6	462D8298239BC61418760DB4204CD135D990537E625782D059CB9D3A1D0266A4
Chrome Cache Entry: 295	ASCII text, with very long lines (51229)	3F4532CD87BB09F531CCF169B468A8C4	743F75C9553E6C40EBB5D01ECBFCDFE672FA0C17	1CD489AF9BF0C0753DD5A6A692E569BE62C104DABD5FF52AC61D03545E63844D
Chrome Cache Entry: 296	ASCII text, with very long lines (651)	7B01FCDF2048E82F4DF741791CD44F61	D1D126931B5D6937B1496E7950342D6A06F361B9	CBC04C06117804A9A97013C97A0714B027DF8279C5F1D0FD0478756A0944AEE6
Chrome Cache Entry: 297	RIFF (little-endian) data, Web/P image	78D49C722C974C46963393B295A2C18D	E7F4EE4182195567054363E4AD57E8AC20C361B1	7CE181B15E878FC0BE6BD59870A88EF999D96BB68000BD5FEBA9E1EC68602929
Chrome Cache Entry: 298	JSON data	F60DE173097E5785F62B5BB4141EA539	595D16F373E8AF170988FB9120AD248BEB6DC60C	E751699C2EEAF11420BF4790A598B66F4B2CE31A0DB7DF07F26B3548EB214130
Chrome Cache Entry: 299	ASCII text, with very long lines (65536), with no line terminators	55BAF821A59FAD53AA754C85AE19D0EA	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
Chrome Cache Entry: 300	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 301	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 302	ASCII text, with very long lines (3283)	1E4C3172663AD2ACC0CEC9723E93D39F	1610B980BB81B4A4330399C81A4B23A78A70C42B	F23EC23F7792FF56FB516E06280BED56D3A80D1CFD8D48F22C2B1F93CA69F0D5
Chrome Cache Entry: 303	ASCII text, with very long lines (3043)	852CBC5322260E00B44F2C682F88B2C7	BCAF229E6134F43EB5F974C9891E4D16FAF1D344	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
Chrome Cache Entry: 304	RIFF (little-endian) data, Web/P image	78D49C722C974C46963393B295A2C18D	E7F4EE4182195567054363E4AD57E8AC20C361B1	7CE181B15E878FC0BE6BD59870A88EF999D96BB68000BD5FEBA9E1EC68602929
Chrome Cache Entry: 305	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 306	HTML document, Unicode text, UTF-8 text, with very long lines (25464)	F07C47CF8B378A4EAA310B455C1C6DFC	AEF41D7A668C8E26DC501B5DD651D213AE881A5D	3A0CA5775998E1ABCC23957D205A5CAFDB6AE24BD94E6D69824DE72CC9E1819C
Chrome Cache Entry: 307	ASCII text, with very long lines (367)	401821742DEF46C40D4CF5F0121C8BEC	1852305A4F2D7E120F9B7BD185790B98CDF9BFA6	462D8298239BC61418760DB4204CD135D990537E625782D059CB9D3A1D0266A4
Chrome Cache Entry: 308	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 309	ASCII text, with very long lines (516)	0D42FFB998A9CF7C25824CF365C7D0C9	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
Chrome Cache Entry: 310	Unicode text, UTF-8 text, with very long lines (63425)	31E273E89FB56A44D86D206F1BCDCDB4	C1D25BAD06F8485EB76D39134C4BEC22A44E5534	9E3C0FE8C9D6F0325C883709CEDE8898CE5D70F0640420ED058E0709C636531B
Chrome Cache Entry: 311	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 312	ASCII text, with very long lines (2368)	ABFD2ADA44521989F7C040FC3EAEF6C9	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
Chrome Cache Entry: 313	ASCII text, with very long lines (5534)	FBDCE548FFEA12809F163D5BB62A6BC8	46B53731B8D5BF660E9F45879BD157B6BD34F83C	24028E91F520E2D2228F11C10B0A83D23A738E73D0ECA66DB614D83706D4DDF7
Chrome Cache Entry: 314	RIFF (little-endian) data, Web/P image	78F4915F43F68145F9C21C9A4A76C143	7DF3CDC379722DA960B8046AA82EA80DD3FD52BB	6E374D225A977B081C6F157DFCFE7229D03E7478492AD0CC9ED4C0028EEAA803
Chrome Cache Entry: 315	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1343x603, components 3	45D7CE5D3C0C58C428275ECE87422152	7E2DE9B67515551357384ECF0CA8453A81BF2A41	1B030322B239FC74B35AD226B0D416D295BC6AB88DC3DCBC5EF9998E9E61EED9
Chrome Cache Entry: 316	ASCII text, with very long lines (1875)	42A956F14F8E89C314FA201AB5FC9388	67651220687C3869FD6FAB960AE4B3CA53776E2F	A9D6036466352258F71ADF94E2EB6DA8F9BEEE5FCBC73351180D1C8331D53949
Chrome Cache Entry: 317	ASCII text, with very long lines (3043)	852CBC5322260E00B44F2C682F88B2C7	BCAF229E6134F43EB5F974C9891E4D16FAF1D344	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
Chrome Cache Entry: 318	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 319	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 320	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 321	ASCII text, with very long lines (829)	9219CF782ED219BD3929A51E99503BC2	6AAC399854EC0405949566FAFDCA8C121F0CDA58	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
Chrome Cache Entry: 322	ASCII text, with very long lines (23126)	3D092EF4ABA019B14F01C40747E40554	1C26145272FCF4CA91AF501288CCE84B1BFFD38B	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
Chrome Cache Entry: 323	ASCII text, with very long lines (51229)	BBE2DA9C23F992A30243FC55062ACBFF	4AAB086B4DA65B44AF4B52A8E107E6436791DF73	EF315A146B2A77BD3CF854381FA7AD6C18466C11B6A5DF8418026584D9E9C527
Chrome Cache Entry: 324	Unicode text, UTF-8 text, with very long lines (63425)	31E273E89FB56A44D86D206F1BCDCDB4	C1D25BAD06F8485EB76D39134C4BEC22A44E5534	9E3C0FE8C9D6F0325C883709CEDE8898CE5D70F0640420ED058E0709C636531B
Chrome Cache Entry: 325	ASCII text, with very long lines (442)	5F10DF611C856F376981BE4DFBD17753	4463A27419B2FDFDBD81770C74DEE2E74BE948E0	EBD2BA2A0E879AE2CEC7D513324E04346153A581BE3AA202662E6C9D5B1CE6E1
Chrome Cache Entry: 326	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 327	RIFF (little-endian) data, Web/P image	72BE1F26024EF9B8DC7BA68ABDE00868	73EB912D1E5E82D769E0DA943C66067BEB881BD4	E222060EE61DFF5DCA764EA5294C0E6882BABDD29E4202687DF24EA7335BF1D6
Chrome Cache Entry: 328	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 329	Web Open Font Format (Version 2), TrueType, length 18500, version 1.0	4868DD20C7C64A087DDE7426200C3C0E	602F24BCF3A112718917140E1F605BC6C2D2A6DC	BCB3C99616A6B90084E82690AB8519141A78FEA94C0AB3A3A5CA7611C0D77E4C
Chrome Cache Entry: 330	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 331	Web Open Font Format (Version 2), TrueType, length 28064, version 1.0	314D6364BBEE6681D0B2364EE3555E2E	C5AAB803ABE36BF664D7B7E2A3731CD849337006	5A42C91E1ECC9B09346A1520D9A6F98074C13EEBFB1CC87C4E82E5992BEB685B
Chrome Cache Entry: 332	ASCII text, with very long lines (13834)	C7B1DBB0EEF8600D5F57536998855E4D	03908243C34D5A373ACBA694EB16E30F088B4F7D	53DA7DD341F1EF0C484A7B56A17D86669287DA5D082AAA8A0AF04FD3816B6631
Chrome Cache Entry: 333	ASCII text, with very long lines (5534)	FFEB2D87A4D41B2583EEAF79F69A72D9	71033F4487DA256F71A30FB00E0B2FCB45657464	B7424C010098DEF0CB00CC8CD11D8D098F1A3991B14898CBF585B4D587306A0C
Chrome Cache Entry: 334	ASCII text, with very long lines (12092)	CF0A6326BC03720B66BC8A7C9227DE2E	2A582FF8F5A0DE527A369703029B5917F6922710	AF408D0723DBC47F5AB52C4B20F9A88FF042BBF642D477EC32782DE8CFFAF1A4
Chrome Cache Entry: 335	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 336	ASCII text, with very long lines (829)	9219CF782ED219BD3929A51E99503BC2	6AAC399854EC0405949566FAFDCA8C121F0CDA58	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
Chrome Cache Entry: 337	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 338	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 339	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 21x30, components 3	7E7F51315A7B9FEDA950D317C0935F84	63BB48F510EB49A8DD58B5CA6BFCAC1B49CA07D0	94C8F8B3724B63E094B93D2BD173992E407997D650689E0269C3B51CD3B752D6
Chrome Cache Entry: 340	ASCII text	ACD4F2B6117E5054FC9BF848AE8121CA	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
Chrome Cache Entry: 341	RIFF (little-endian) data, Web/P image	78D49C722C974C46963393B295A2C18D	E7F4EE4182195567054363E4AD57E8AC20C361B1	7CE181B15E878FC0BE6BD59870A88EF999D96BB68000BD5FEBA9E1EC68602929
Chrome Cache Entry: 342	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 343	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 344	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B

ID:	1522004
Product:	CloudBasic
Start time:	07:10:10
Start date:	29.09.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://uphold-login-account23.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://uphold-login-account23.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://uphold-login-account23.godaddysites.com/