Edit tour

Windows Analysis Report
https://upbring.org/foster-training-calendar

Overview

General Information

Sample URL:	https://upbring.org/foster-training-calendar
Analysis ID:	1640952
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,11483143198955277539,11289270451077288105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://upbring.org/foster-training-calendar" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-CML3R768MW&gtm=45Pe53d1v9208598943za200&_p=1742246690507&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&gdid=dZTNiMT&cid=1114721539.1742246694&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1742246693&sct=1&seg=0&dl=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&dt=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&en=page_view&_fv=2&_nsi=1&_ss=1&_c=1&_ee=1&tfd=8066 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://upbring.orgX-Client-Data: CLbgygE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://upbring.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5WFMG66
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://outlook.office365.com/owa/calendar/79b15ad8ea444bcb8126f25aab6f3214@upbring.org/a7d25555daf0411c95c49d2637f2ba2f8990285192340901524/calendar.html
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-CML3R768MW&gacid=1114721539.1742246694&gtm=45Pe53d1v9208598943za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=2108305443
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/851316809?random=1742246696481&cv=11&fst=1742246696481&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102015666~102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11454730856?random=1742246696606&cv=11&fst=1742246696606&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1v9174190162za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-M11HE6S3BH&gacid=1114721539.1742246694&gtm=45be53d1v9174190162za200zb9208598943&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=692253628
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5WFMG66
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://outlook.office365.com/owa/calendar/79b15ad8ea444bcb8126f25aab6f3214@upbring.org/a7d25555daf0411c95c49d2637f2ba2f8990285192340901524/calendar.html
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-CML3R768MW&gacid=1114721539.1742246694&gtm=45Pe53d1v9208598943za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=2108305443
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/851316809?random=1742246696481&cv=11&fst=1742246696481&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102015666~102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11454730856?random=1742246696606&cv=11&fst=1742246696606&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1v9174190162za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-M11HE6S3BH&gacid=1114721539.1742246694&gtm=45be53d1v9174190162za200zb9208598943&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=692253628
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5WFMG66
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://outlook.office365.com/owa/calendar/79b15ad8ea444bcb8126f25aab6f3214@upbring.org/a7d25555daf0411c95c49d2637f2ba2f8990285192340901524/calendar.html
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-CML3R768MW&gacid=1114721539.1742246694&gtm=45Pe53d1v9208598943za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=2108305443
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/851316809?random=1742246696481&cv=11&fst=1742246696481&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102015666~102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11454730856?random=1742246696606&cv=11&fst=1742246696606&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1v9174190162za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-M11HE6S3BH&gacid=1114721539.1742246694&gtm=45be53d1v9174190162za200zb9208598943&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=692253628
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5WFMG66
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://outlook.office365.com/owa/calendar/79b15ad8ea444bcb8126f25aab6f3214@upbring.org/a7d25555daf0411c95c49d2637f2ba2f8990285192340901524/calendar.html
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-CML3R768MW&gacid=1114721539.1742246694&gtm=45Pe53d1v9208598943za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=2108305443
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/851316809?random=1742246696481&cv=11&fst=1742246696481&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102015666~102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11454730856?random=1742246696606&cv=11&fst=1742246696606&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1v9174190162za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-M11HE6S3BH&gacid=1114721539.1742246694&gtm=45be53d1v9174190162za200zb9208598943&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=692253628
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5WFMG66
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://outlook.office365.com/owa/calendar/79b15ad8ea444bcb8126f25aab6f3214@upbring.org/a7d25555daf0411c95c49d2637f2ba2f8990285192340901524/calendar.html
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-CML3R768MW&gacid=1114721539.1742246694&gtm=45Pe53d1v9208598943za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=2108305443
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/851316809?random=1742246696481&cv=11&fst=1742246696481&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102015666~102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11454730856?random=1742246696606&cv=11&fst=1742246696606&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be53d1v9174190162za200zb9208598943&gcd=13l3l3l3l1l1&dma=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&u_w=1280&u_h=1024&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&hn=www.googleadservices.com&frm=0&tiba=Training%20Calendar%20-%20Family%20Life%20%26%20Fostering%20Resources%20-%20Upbring&did=dZTNiMT%2CdZTQ1Zm&gdid=dZTNiMT.dZTQ1Zm&npa=0&pscdl=noapi&auid=301687088.1742246696&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://upbring.org/foster-training-calendar	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-M11HE6S3BH&gacid=1114721539.1742246694&gtm=45be53d1v9174190162za200zb9208598943&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719&z=692253628

Source: https://upbring.org/foster-training-calendar	HTTP Parser: No favicon
Source: https://upbring.org/wp-content/uploads/VIRTUAL-TRAINING-GUIDELINES-2023.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon

Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="author".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="author".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="author".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="author".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="author".. found

Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="copyright".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="copyright".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="copyright".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="copyright".. found
Source: https://upbring.org/foster-training-calendar	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.16:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.16:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.16:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.16:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 64.190.113.198:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.60.110:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.223.209.41:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.223.209.41:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.223.209.41:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.16.100.106:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.228:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.137.209:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.137.209:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.223.209.41:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.223.209.41:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.0.6:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.60.110:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.221.110.136:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.99.150.114:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.160.168:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.109.254:443 -> 192.168.2.16:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.16:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.16:443 -> 192.168.2.16:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.117.116:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.128.172:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.107.254:443 -> 192.168.2.16:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.142:443 -> 192.168.2.16:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.162:443 -> 192.168.2.16:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.16:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.240.108:443 -> 192.168.2.16:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.117.116:443 -> 192.168.2.16:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.60.110:443 -> 192.168.2.16:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.133.157:443 -> 192.168.2.16:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.111.254:443 -> 192.168.2.16:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.175.188:443 -> 192.168.2.16:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.241.108:443 -> 192.168.2.16:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.118.116:443 -> 192.168.2.16:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.35:443 -> 192.168.2.16:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.175.188:443 -> 192.168.2.16:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.35:443 -> 192.168.2.16:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.175.188:443 -> 192.168.2.16:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.215:443 -> 192.168.2.16:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.80.204:443 -> 192.168.2.16:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.35:443 -> 192.168.2.16:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.35:443 -> 192.168.2.16:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.16:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.194:443 -> 192.168.2.16:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.194:443 -> 192.168.2.16:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.118.116:443 -> 192.168.2.16:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.16:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.196:443 -> 192.168.2.16:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.118.116:443 -> 192.168.2.16:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.252.35:443 -> 192.168.2.16:49873 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: upbring.org
Source: global traffic	DNS traffic detected: DNS query: opteme.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: sky.blackbaudcdn.net
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: js.hsadspixel.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: forms.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: api.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cta-service-cms2.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: perf-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons2.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons3.gvt2.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,11483143198955277539,11289270451077288105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://upbring.org/foster-training-calendar"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,11483143198955277539,11289270451077288105,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://upbring.org/wp-content/themes/upbring/assets/js/jquery.min.js	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.8	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/logo.svg	0%	Avira URL Cloud	safe
https://js.hs-scripts.com/47126115.js?integration=WordPress&ver=11.1.66	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/footer-cta-gredient.png	0%	Avira URL Cloud	safe
https://p.typekit.net/p.css?s=1&k=vip1qum&ht=tk&f=52099&a=113110140&app=typekit&e=css	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/givewp-iframes-styles.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/fonts/ClearSans-Medium.woff2	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/fonts/ClearSans.woff2	0%	Avira URL Cloud	safe
https://p.typekit.net/p.css?s=1&k=cpv8kzj&ht=tk&f=45083.45084&a=113110140&app=typekit&e=css	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/search-close.svg	0%	Avira URL Cloud	safe
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3	0%	Avira URL Cloud	safe
https://use.typekit.net/pbr8kdn.css	0%	Avira URL Cloud	safe
https://js.hs-scripts.com/47126115.js	0%	Avira URL Cloud	safe
https://sky.blackbaudcdn.net/static/og-web-loader/1/main.js	0%	Avira URL Cloud	safe
https://p.typekit.net/p.css?s=1&k=zxk5mmx&ht=tk&f=2007.2009&a=171914&app=typekit&e=css	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/search-submit.svg	0%	Avira URL Cloud	safe
https://opteme.com/1q2w.js	100%	Avira URL Cloud	malware
https://upbring.org/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/advanced-backgrounds/assets/awb/awb.min.css?ver=1.12.4	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/uploads/js_composer/custom.css?ver=6.0.5	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/mappress-google-maps-for-wordpress/css/mappress.css?ver=2.94.3	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/mappress-google-maps-for-wordpress/lib/leaflet/leaflet.css?ver=1.7.1	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/advanced-backgrounds/assets/vendor/jarallax/dist/jarallax.min.js?ver=2.2.0	0%	Avira URL Cloud	safe
https://use.typekit.net/vip1qum.css	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/search-icon.svg	0%	Avira URL Cloud	safe
https://use.typekit.net/af/a28b50/00000000000000000000e803/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/heart-icon.svg	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/gutenberg-section-block-master/dist/blocks.style.build.css?ver=6.7.2	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/advanced-backgrounds/assets/awb/awb.min.js?ver=1.12.4	0%	Avira URL Cloud	safe
https://p.typekit.net/p.css?s=1&k=pbr8kdn&ht=tk&f=53859.54000.54001&a=113110140&app=typekit&e=css	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/css/bundle.css?v=3234280229	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/fonts/ClearSans-Bold.woff2	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/uploads/uag-plugin/custom-style-blocks.css?ver=2.19.3	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/tablepress/css/build/default.css?ver=3.0.4	0%	Avira URL Cloud	safe
https://use.typekit.net/zxk5mmx.css	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/img/masthead-img-01.svg	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/themes/upbring/assets/fonts/ClearSans-Light.woff2	0%	Avira URL Cloud	safe
https://upbring.org/wp-content/plugins/advanced-backgrounds/assets/vendor/jarallax/dist/jarallax-video.min.js?ver=2.2.0	0%	Avira URL Cloud	safe
https://use.typekit.net/cpv8kzj.css	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.19.175.188	true	false	high
beacons3.gvt2.com	142.250.185.99	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.143.67	true	false	high
upbring.org	104.21.80.1	true	false	unknown
cta-service-cms2.hubspot.com	104.16.117.116	true	false	high
js.hs-analytics.net	104.16.160.168	true	false	high
a1874.dscg1.akamai.net	2.16.100.106	true	false	high
stats.g.doubleclick.net	74.125.133.157	true	false	high
l-0005.l-msedge.net	13.107.42.14	true	false	high
scontent.xx.fbcdn.net	157.240.0.6	true	false	high
track.hubspot.com	104.16.118.116	true	false	high
d1d70zu105n1ut.cloudfront.net	18.245.60.110	true	false	unknown
forms.hscollectedforms.net	104.16.107.254	true	false	high
js.hs-scripts.com	104.16.137.209	true	false	high
www.google.com	142.250.184.228	true	false	high
js.hs-banner.com	172.64.147.16	true	false	high
star-mini.c10r.facebook.com	157.240.252.35	true	false	high
js.hubspot.com	104.16.117.116	true	false	high
js.hsadspixel.net	104.17.128.172	true	false	high
beacons2.gvt2.com	216.239.32.3	true	false	high
HHN-efz.ms-acdc.office.com	40.99.150.114	true	false	high
beacons.gvt2.com	142.250.185.99	true	false	high
opteme.com	64.190.113.198	true	false	unknown
www.linkedin.com.cdn.cloudflare.net	172.64.146.215	true	false	high
googleads.g.doubleclick.net	142.250.184.194	true	false	high
api.hubapi.com	104.18.240.108	true	false	high
analytics.google.com	142.250.186.142	true	false	high
td.doubleclick.net	142.250.185.162	true	false	high
perf-na1.hsforms.com	104.19.175.188	true	false	high
a1916.dscg2.akamai.net	88.221.110.136	true	false	high
a1988.dscg1.akamai.net	23.223.209.41	true	false	high
js.hscollectedforms.net	104.16.109.254	true	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
use.typekit.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high
sky.blackbaudcdn.net	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://upbring.org/wp-content/themes/upbring/assets/js/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.8.18	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.8	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/wa/	false		high
https://upbring.org/wp-content/themes/upbring/assets/img/logo.svg	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=7059028&time=1742246692848&li_adsId=2093adb9-25df-495a-a4e8-f3d4f694d644&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&cookiesTest=true&liSync=true	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/img/youtube-icon.svg	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/img/footer-cta-gredient.png	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D7059028%26time%3D1742246692848%26li_adsId%3D2093adb9-25df-495a-a4e8-f3d4f694d644%26url%3Dhttps%253A%252F%252Fupbring.org%252Ffoster-training-calendar%26cookiesTest%3Dtrue%26liSync%3Dtrue	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/fonts/ClearSans-Medium.woff2	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/givewp-iframes-styles.css?ver=6.7.2	false	Avira URL Cloud: safe	unknown
https://p.typekit.net/p.css?s=1&k=vip1qum&ht=tk&f=52099&a=113110140&app=typekit&e=css	false	Avira URL Cloud: safe	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=47126115&currentUrl=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/img/search-close.svg	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.8.18	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=7059028&time=1742246692848&li_adsId=2093adb9-25df-495a-a4e8-f3d4f694d644&url=https%3A%2F%2Fupbring.org%2Ffoster-training-calendar&cookiesTest=true	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/e3ca36/00000000000000000000e805/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3	false	Avira URL Cloud: safe	unknown
https://p.typekit.net/p.css?s=1&k=zxk5mmx&ht=tk&f=2007.2009&a=171914&app=typekit&e=css	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/img/arrow-icon.svg	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-includes/images/w-logo-blue-white-bg.png	false	Avira URL Cloud: safe	unknown
https://upbring.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/js/myloadmore.js	false	Avira URL Cloud: safe	unknown
https://opteme.com/1q2w.js	true	Avira URL Cloud: malware	unknown
https://upbring.org/wp-content/themes/upbring/assets/js/bundle.js?v=3234280229	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/advanced-backgrounds/assets/awb/awb.min.css?ver=1.12.4	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/img/linkedin-icon.svg	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/mappress-google-maps-for-wordpress/css/mappress.css?ver=2.94.3	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/gravityforms/assets/js/dist/utils.min.js?ver=50c7bea9c2320e16728e44ae9fde5f26	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/signals/config/1028989433948862?v=2.9.187&r=stable&domain=upbring.org&hme=9d6c2cc137748d003f279fac8d52b2defc993e1177ef802e0d5b230c72882031&ex_m=71%2C123%2C108%2C112%2C62%2C4%2C101%2C70%2C16%2C98%2C90%2C51%2C55%2C177%2C180%2C192%2C188%2C189%2C191%2C29%2C102%2C53%2C78%2C190%2C172%2C175%2C185%2C186%2C193%2C134%2C41%2C198%2C195%2C196%2C34%2C147%2C15%2C50%2C202%2C201%2C136%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C109%2C52%2C111%2C39%2C110%2C30%2C95%2C26%2C173%2C176%2C144%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C103%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C105%2C104%2C106%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C2%2C36%2C64%2C42%2C107%2C45%2C80%2C69%2C113%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C114	false	Avira URL Cloud: safe	unknown
https://js.hscollectedforms.net/collectedforms.js	false		high
https://upbring.org/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/themes/upbring/assets/img/heart-icon.svg	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/gutenberg-section-block-master/dist/blocks.style.build.css?ver=6.7.2	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/uploads/VIRTUAL-TRAINING-GUIDELINES-2023.pdf	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false		high
https://upbring.org/wp-content/themes/upbring/assets/css/bundle.css?v=3234280229	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/uploads/uag-plugin/custom-style-blocks.css?ver=2.19.3	false	Avira URL Cloud: safe	unknown
https://upbring.org/wp-content/plugins/tablepress/css/build/default.css?ver=3.0.4	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/zxk5mmx.css	false	Avira URL Cloud: safe	unknown
https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=47126115	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.133.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
104.19.175.188	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.200	unknown	United States	15169	GOOGLEUS	false
104.21.80.1	upbring.org	United States	13335	CLOUDFLARENETUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
64.190.113.198	opteme.com	United States	26646	TRAVELCLICKCORP1US	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.163	unknown	United States	15169	GOOGLEUS	false
172.64.147.16	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.16.107.254	forms.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
104.18.240.108	api.hubapi.com	United States	13335	CLOUDFLARENETUS	false
104.16.160.168	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
142.250.185.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.146.215	www.linkedin.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.16.111.254	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
40.99.150.114	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
2.16.100.106	a1874.dscg1.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
88.221.110.136	a1916.dscg2.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
104.17.128.172	js.hsadspixel.net	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	unknown	United States	13335	CLOUDFLARENETUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
104.18.80.204	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.241.108	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
104.16.137.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
74.125.71.84	unknown	United States	15169	GOOGLEUS	false
142.250.185.234	unknown	United States	15169	GOOGLEUS	false
23.223.209.41	a1988.dscg1.akamai.net	United States	16625	AKAMAI-ASUS	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.109.254	js.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
142.250.185.195	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	analytics.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1640952
Start date and time:	2025-03-17 22:24:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://upbring.org/foster-training-calendar
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@34/89@126/464

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7 (zip deflate encoded)
Category:	dropped
Size (bytes):	0
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:
MD5:	B047EDD96E40BB7B305C3734E936EDBE
SHA1:	BC38F0D9661594133DC88E4D9A5B46AE27218EA7
SHA-256:	5BE18FDE26FEAC00582C66752212BB23166548ECE0736FACBE40B8FE78E64A4A
SHA-512:	22B11CE5DF06EE60CC08BE58BA788DB78874007F25FBC4D6D300287EAA96157275FE7822C6F721DAACF323D5D9B227250B63AACCD2A618ED13B490E0896F235A
Malicious:	false
Reputation:	unknown
Preview:	%PDF-1.7.%......25 0 obj.<</Linearized 1/L 372127/O 27/E 289607/N 2/T 371787/H [ 543 239]>>.endobj. ..49 0 obj.<</DecodeParms<</Columns 5/Predictor 12>>/Filter/FlateDecode/ID[<CC960508C2EF0348887A1C7ACE61BA91><1F6C0EA2E74D504AB7B1FAA121A890D2>]/Index[25 57]/Info 24 0 R/Length 119/Prev 371788/Root 26 0 R/Size 82/Type/XRef/W[1 3 1]>>stream..h.bbd`.``b``.."..A$.9.d+..L.`R.D..H.9`v:X\..>....dI...`...\].$./Z....@.i.q.-. ..>..."y..2.......`.00.1.?...#..........endstream.endobj.startxref..0..%%EOF.. ..81 0 obj.<</Filter/FlateDecode/I 164/Length 152/S 66/V 142>>stream..h.b```g``.c`a`.g.b@.!..+.s\|87...C.H...=m..........8.p0.N....X.$... ...(..wA:...[.P...1...#.1....tN.......=.A!.Ai.C..VN... #....w....h.(#.@...X.!$..endstream.endobj.26 0 obj.<</AcroForm 50 0 R/Metadata 10 0 R/Pages 23 0 R/Type/Catalog>>.endobj.27 0 obj.<</Contents[31 0 R 32 0 R 33 0 R 35 0 R 36 0 R 37 0 R 38 0 R 39 0 R]/CropBox[0.0 0.0 612.0 792.0]/MediaBox[0.0 0.0 612.0 792.0]/Pa

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://upbring.org/foster-training-calendar

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

C:\Users\user\Downloads\downloaded.pdf (copy)

C:\Users\user\Downloads\downloaded.pdf.crdownload

C:\Users\user\Downloads\eac4976b-d06b-4d8e-bd79-a939517799d1.tmp

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 131

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 138

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 153

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 160

Chrome Cache Entry: 162

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 175

Windows Analysis Report
https://upbring.org/foster-training-calendar