Play interactive tourEdit tour

Windows Analysis Report
http://url9106.loopup.com/ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6ZFtcerw6jU0VP-2BZYoaCm4ueFrOwfz-2FyY-2BFGeBAMLJHNfbLNPZQ-2FT6-2FXCuh0O665iAeqbwhGIdja-2FqyZGqfrJAsjJ

Overview

General Information

Sample URL:	http://url9106.loopup.com/ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6
Analysis ID:	715066
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

No HTML title found

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Phishing

HTML body contains low number of good links

Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: Number of links: 0
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: Number of links: 0

No HTML title found

Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: HTML title missing
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: HTML title missing

META copyright tag missing

Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: No <meta name="copyright".. found
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: No <meta name="copyright".. found

META author tag missing

Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: No <meta name="author".. found
Source: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q	HTTP Parser: No <meta name="author".. found

Networking

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5Q HTTP/1.1Host: account.loopup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib-login-55dc6eaf1e2d88feae20.css HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login-1bf734ac65e784b01c3f.css HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/polyfill.js HTTP/1.1Host: cdn.polyfill.ioConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor-c605e28acee1608bdf2a.js HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /set-password-843b75cabf5b10af7d2c.js HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js/v1/B8FzKqGyLPvZEr2Nba5HROK8ChLNnqAk/analytics.min.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/projects/B8FzKqGyLPvZEr2Nba5HROK8ChLNnqAk/settings HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://account.loopup.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spritemap-b09c8813136ef89a548157b5ec780fa7.svg HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/870.bundle.323974846b6d45afb45e.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/ajs-destination.bundle.35a8f6f19959bf2f455f.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics-next/bundles/schemaFilter.bundle.debb169c1abb431faaa6.js HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/mixpanel/3.2.1/mixpanel.dynamic.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next-integrations/integrations/vendor/commons.c42222c4cb2f8913500f.js.gz HTTP/1.1Host: cdn.segment.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/mixpanel-2-latest.min.js HTTP/1.1Host: cdn.mxpnl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.loopup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ajs_anonymous_id=70454b91-c2ff-4066-aeb8-c9c4d75bd378; mp_a3ae95b743019d5b7ce3044021eb2fdd_mixpanel=%7B%22distinct_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22%24device_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22mp_lib%22%3A%20%22Segment%3A%20web%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Source: global traffic	HTTP traffic detected: GET /android-chrome-144x144.png HTTP/1.1Host: account.loopup.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.loopup.com/set-password/eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJMb29wVXAuQXBpIiwiYXVkIjoiZjcyNzVjMzQtOTk4OC00OWFmLWEzNWUtNDBkYTVjMzBjYWUzIiwiaWF0IjoxNjY0NzE2NTYzLCJpc0FjdGl2YXRpb24iOnRydWV9.1e0PvUoFGlUt1VTuK63rIQP7OVdlgYcrO6Y95_mbQ5QAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ajs_anonymous_id=70454b91-c2ff-4066-aeb8-c9c4d75bd378; mp_a3ae95b743019d5b7ce3044021eb2fdd_mixpanel=%7B%22distinct_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22%24device_id%22%3A%20%22183a00b2e64269-0b8d445013ed18-26021d51-140000-183a00b2e653c2%22%2C%22mp_lib%22%3A%20%22Segment%3A%20web%22%2C%22%24initial_referrer%22%3A%20%22%24direct%22%2C%22%24initial_referring_domain%22%3A%20%22%24direct%22%7D
Source: global traffic	HTTP traffic detected: GET /ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6ZFtcerw6jU0VP-2BZYoaCm4ueFrOwfz-2FyY-2BFGeBAMLJHNfbLNPZQ-2FT6-2FXCuh0O665iAeqbwhGIdja-2FqyZGqfrJAsjJa6WmUe0Xd3VT1OXu3-2F3bR3D10VOV-2BEVAw7Ovp-2Fbj2ldIuGwy8t9cEDhzNZDd379DYOEuWGd5khLoCSvnzj2M6r93HYa9V1t9DoJ6KqtJDRFr-2B1q9g3XuwTlcS-2Bw4w0-3DB-xY_-2Bf7U4f-2FcA3eglWKxOUvEGek0SZ8zf-2BjU2dBJ2-2FD3ryk1OnsRAzFCY6eUsa5GuArLj584tMmc86KT8HXvoDZhY4Y4QO1b-2FHXvxE0aeR87r8rhf0P4SLr53QgCGLDSSeg-2BDiyCpJVLTQX27XfLZaKssG7aVpqtAmo9Kpxpbb1bw1bpnRXHhO-2FuPAIFApxW6siNmlLhfprKt4p9G1DSeX-2B4ZVmK5vS5lo3wHzPocFDUEylxCEL-2Brmx8U9vmL1RzKZgsZa-2FPRJG8f8Srzedh-2FuUiX4wllqCTsoVyAbrdYbZeXHvOvaKIoNfyy7XsKh8-2B6gNguqOCvCs4-2FJ0OjWI-2FXVWJDFKfQq4yQnxEC9dtH6mez-2BLlfRiFyI6zEDFEKmGv6yBfNNAUoqUaT-2Bfb6YrdAfHzzKMxrYBWlaTSDKsz8-2FHR9pN-2FJ2jM35lOsd7pMXb00Jps HTTP/1.1Host: url9106.loopup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: url9106.loopup.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-ENID=6.SE=Md0Ynyf9ahpkx1CxTGF0vY434NJ6ymH-gDI2Tl5Ly-NQYGPjnNfggtiFRMAwx4JRDOC_gavEPcD5cTBJzUgtbJobmBEuJ8xi2UuotxvOZgApoqSIg1b0RP47U08XG8Bz_SExSzKy0ETSsajbToDlYyFsxfI93p7AyRAd-OeIBA0; CONSENT=PENDING+070

System Summary

Classification label

Source: classification engine

Classification label: clean1.win@24/0@14/13

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1968 --field-trial-handle=1696,i,18024863391692357054,13729395438895295201,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://url9106.loopup.com/ls/click?upn=m2FkTpuxf3MMDVE4-2BUdo6OZ1ogZ1i7-2BItXVpxfGySsFXTjIbgrW3plPpeWNQT8-2B8IKeKWdgC-2FZLYEDyTScfdtzC0D2boMTgfmcYgujGh85K9V1zT3NO14DQb3vPIAw9N-2BoldR-2Byp5Hy9QCdMkLsz6ZFtcerw6jU0VP-2BZYoaCm4ueFrOwfz-2FyY-2BFGeBAMLJHNfbLNPZQ-2FT6-2FXCuh0O665iAeqbwhGIdja-2FqyZGqfrJAsjJa6WmUe0Xd3VT1OXu3-2F3bR3D10VOV-2BEVAw7Ovp-2Fbj2ldIuGwy8t9cEDhzNZDd379DYOEuWGd5khLoCSvnzj2M6r93HYa9V1t9DoJ6KqtJDRFr-2B1q9g3XuwTlcS-2Bw4w0-3DB-xY_-2Bf7U4f-2FcA3eglWKxOUvEGek0SZ8zf-2BjU2dBJ2-2FD3ryk1OnsRAzFCY6eUsa5GuArLj584tMmc86KT8HXvoDZhY4Y4QO1b-2FHXvxE0aeR87r8rhf0P4SLr53QgCGLDSSeg-2BDiyCpJVLTQX27XfLZaKssG7aVpqtAmo9Kpxpbb1bw1bpnRXHhO-2FuPAIFApxW6siNmlLhfprKt4p9G1DSeX-2B4ZVmK5vS5lo3wHzPocFDUEylxCEL-2Brmx8U9vmL1RzKZgsZa-2FPRJG8f8Srzedh-2FuUiX4wllqCTsoVyAbrdYbZeXHvOvaKIoNfyy7XsKh8-2B6gNguqOCvCs4-2FJ0OjWI-2FXVWJDFKfQq4yQnxEC9dtH6mez-2BLlfRiFyI6zEDFEKmGv6yBfNNAUoqUaT-2Bfb6YrdAfHzzKMxrYBWlaTSDKsz8-2FHR9pN-2FJ2jM35lOsd7pMXb00Jps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1968 --field-trial-handle=1696,i,18024863391692357054,13729395438895295201,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.