Automated Malware Analysis IOC Report for

Details

Filetype:	URL
Filename:	https://naitreetgrandir.com/fr/magazine/?&utm_source=infolettre&utm_medium=email&date=2025-03-24&utm_campaign=infolettre58ans-w287&utm_content=magazine&ic=c4904cb2-c621-4abd-a527-da6cb48ddef4

Signature Hits	Behavior Group	Mitre Attack
Creates files inside the system directory	System Summary	Masquerading
Deletes files inside the Windows folder	System Summary	File Deletion
Allocates a big amount of memory (probably used for heap spraying)	Software Vulnerabilities	Extra Window Memory Injection
Classification label	System Summary	Extra Window Memory Injection
Connects to IPs without corresponding DNS lookups	Networking	Extra Window Memory Injection
Downloads files from webservers via HTTP	Networking	Extra Window Memory Injection Ingress Tool Transfer
HTML page is missing a favicon	Phishing	Extra Window Memory Injection
Performs DNS lookups	Networking	Non-Application Layer Protocol
Posts data to webserver	Networking
Spawns processes	System Summary	Process Injection
Uses HTTPS	Networking	Encrypted Channel Application Layer Protocol
Uses secure TLS version for HTTPS connections	Compliance, Networking
Found graphical window changes (likely an installer)	System Summary

Details

Name:	https://yt3.ggpht.com/1cLvk74DmRIKBMYznsembdHZiTrpi5pYuPSt0KqqfkvC6s0UB6vfqFazrXL_W6PpgSoVfTbj=s88-c-k-c0x00ffffff-no-rj
IP:	142.250.65.225
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/flecheBasSubMenuGris.gif
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/generate_204?vMhTIg
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://youtube.com/embed/FHccWFtgCGs?rel=0&wmode=transparent&autoplay=1
IP:	142.251.32.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/WebResource.axd?d=u6a1ShgHp8oy3Xk0QdrLMpAZkyIUYqBxBKeldwOU4P6dLogVK-mcAZiul1SNKO3WalmoIvcUlz-B2l6Ph35V17fFBus1&t=638628063619783110
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://unpkg.com/scrollreveal@4.0.0/dist/scrollreveal.min.js
IP:	104.17.249.203
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi/epwoKNgDL6c/mqdefault.jpg?sqp=-oaymwEoCMACELQB8quKqQMcGADwAQH4AbYIgAK4CIoCDAgAEAEYXyBfKF8wDw==&rs=AOn4CLBB8FUQE5flTZLmgo-VsAfFxTaE8Q
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/application/img/bouton-google-play.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://pagestates-tracking.crazyegg.com/healthcheck
IP:	13.226.94.106
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/ptracking?html5=1&video_id=FHccWFtgCGs&cpn=_1B_J4jRqNZRQbIY&ei=eD3kZ5qhKdepkucP5eOOoQo&ptk=youtube_none&pltype=contentugc
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/pin-trou-verte.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://ct.pinterest.com/v3/?tid=2614146496923&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fnaitreetgrandir.com%2Ffr%2Fmagazine%2F%3F%26utm_source%3Dinfolettre%26utm_medium%3Demail%26date%3D2025-03-24%26utm_campaign%3Dinfolettre58ans-w287%26utm_content%3Dmagazine%26ic%3Dc4904cb2-c621-4abd-a527-da6cb48ddef4%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%228821a9da%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22134%22%7D%2C%7B%22brand%22%3A%22Not%3AA-Brand%22%2C%22version%22%3A%2224%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22134%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22134.0.6998.36%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1743011169093
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/css/normalize.min.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/swiper-11.0.5/package/swiper.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/flecheBasSubMenuBleu.gif
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/youtubei/v1/next?prettyPrint=false
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/css/fontawesome.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/colorbox-master/jquery.colorbox-min.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/s/player/4fcd6e4a/player_ias.vflset/en_US/embed.js
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/pinottes/pinotte-beige-magazine.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://connect.facebook.net/en_US/fbevents.js
IP:	57.144.180.128
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://sb.scorecardresearch.com/b2?c1=2&c2=18909054&cs_it=b1&cv=4.12.0%2B2412121612&ns__t=1743011167766&ns_c=UTF-8&cs_cfg=1001110&c7=https%3A%2F%2Fnaitreetgrandir.com%2Ffr%2Fmagazine%2F%3F%26utm_source%3Dinfolettre%26utm_medium%3Demail%26date%3D2025-03-24%26utm_campaign%3Dinfolettre58ans-w287%26utm_content%3Dmagazine%26ic%3Dc4904cb2-c621-4abd-a527-da6cb48ddef4&c8=Le%20magazine%20gratuit%20des%20jeunes%20familles&c9=
IP:	13.226.94.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/logo/logo-noir-bulle-verte-15-ans.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/sb/FHccWFtgCGs/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBgjdvZe-Bg==&sigh=rs%24AOn4CLDstKM00hZLM-duZVHsedkEcUAKfQ
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/webfonts/fa-brands-400.woff2
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://analytics.naitreetgrandir.com/_/service_worker/53k0/sw.js?origin=https%3A%2F%2Fnaitreetgrandir.com
IP:	216.239.36.21
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://code.jquery.com/ui/1.9.2/themes/base/jquery-ui.css
IP:	151.101.66.137
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://yt3.ggpht.com/1cLvk74DmRIKBMYznsembdHZiTrpi5pYuPSt0KqqfkvC6s0UB6vfqFazrXL_W6PpgSoVfTbj=s68-c-k-c0x00ffffff-no-rj
IP:	142.250.65.225
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://tracking.crazyegg.com/clock?u=178399&st=87651&t=1743011170339&tk=b909ac8914d4c0d5ab67ff807dd78faf
IP:	52.51.149.14
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://analytics.naitreetgrandir.com/_/service_worker/53k0/sw_iframe.html?origin=https%3A%2F%2Fnaitreetgrandir.com&1p=1
IP:	216.239.36.21
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/footer/app-desktop.png
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://static.doubleclick.net/instream/ad_status.js
IP:	142.251.32.102
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi/4KYIrQ1w37Q/mqdefault.jpg?sqp=-oaymwEoCMACELQB8quKqQMcGADwAQH4AbYIgAK4CIoCDAgAEAEYSCBlKGAwDw==&rs=AOn4CLDXX69ZTNkS0XDkiWgko8yxBZkJig
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi_webp/qINJhYMqfrw/mqdefault.webp
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout/sous-menu-shadow.png
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/swiper-11.0.5/package/swiper-bundle.min.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi/GktsZsl6c7U/mqdefault.jpg?sqp=-oaymwEoCMACELQB8quKqQMcGADwAQH4AbYIgAK4CIoCDAgAEAEYOCBlKDwwDw==&rs=AOn4CLC-LTzV-0U6KhrEIkMD_erY6tw_qg
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/application/img/bouton-app-store.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/css/images/loading.gif
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://script.crazyegg.com/pages/data-scripts/0017/8399/site/naitreetgrandir.com.json?t=1
IP:	104.19.148.8
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/ScriptResource.axd?d=Vuo1A-JX6MBacXB_LZ4djyr8WPkawjwNr4h0STdXJwVokmmZvLToRyclrBf8nyG5i8qbu2AsyNQpKV9cL85FGNUTuB8RH1pcP5nIKOfLRlfwgDgyNFhGMmFTFlmlADqN8lvtzCU3EeXtiW5dKrZRJoBxVPbReHeFMCukvr_tSdueaDFa0&t=2a9d95e3
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://connect.facebook.net/signals/config/510432165800250?v=2.9.190&r=stable&domain=naitreetgrandir.com&hme=c1f2cecb0bd2e60711f2156ceae0254b57f69ec526dbc6c13633615b2168eda4&ex_m=71%2C124%2C109%2C113%2C62%2C4%2C102%2C70%2C16%2C98%2C90%2C51%2C55%2C178%2C181%2C193%2C189%2C190%2C192%2C29%2C103%2C53%2C78%2C191%2C173%2C176%2C186%2C187%2C194%2C135%2C41%2C199%2C196%2C197%2C34%2C148%2C15%2C50%2C203%2C202%2C137%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C110%2C52%2C112%2C39%2C111%2C30%2C95%2C26%2C174%2C177%2C145%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C104%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C106%2C105%2C107%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C244%2C171%2C122%2C160%2C153%2C2%2C36%2C64%2C42%2C108%2C45%2C80%2C69%2C114%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C101%2C115
IP:	57.144.180.128
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/css/colorbox.css?r=20231013
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/documentsng/images/imagemagazine/couvertures/2025/couverture-2025-03-04-shadow.png
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/s/player/4fcd6e4a/player_ias.vflset/en_US/endscreen.js
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/play-cercle.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/webfonts/fa-regular-400.woff2
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/fr/magazine/?&utm_source=infolettre&utm_medium=email&date=2025-03-24&utm_campaign=infolettre58ans-w287&utm_content=magazine&ic=c4904cb2-c621-4abd-a527-da6cb48ddef4
TargetID:	0
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	browser

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
HTML page is missing a favicon	Phishing
Spawns processes	System Summary	Process Injection

Details

Name:	https://script.crazyegg.com/pages/data-scripts/0017/8399/sampling/naitreetgrandir.com.json?t=1
IP:	104.19.148.8
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/css/solid.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=_1B_J4jRqNZRQbIY&ver=2&cmt=18.05&fmt=134&fs=0&rt=21.001&euri=https%3A%2F%2Fnaitreetgrandir.com%2F&lact=9052&cl=740099560&state=playing&volume=100&cbr=Chrome&cbrver=134.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20250324.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=30&rtn=31&afmt=251&idpj=-2&ldpj=-20&rti=21&size=640%3A390&inview=1&st=8.051&et=18.05&muted=1&docid=FHccWFtgCGs&ei=eD3kZ5qhKdepkucP5eOOoQo&plid=AAYxQmr6200LRaBS&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FFHccWFtgCGs%3Frel%3D0%26wmode%3Dtransparent%26autoplay%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJdndDZEQtV1plVlFqck8za2ExRWZUVFJoTy02NUdmTzZCbjkxdGZodnVqQWJgQUZVQTZSUVlJaWZ1NFYyLTJqUUgtbWY3SHZfX1BzYmZZNE1BaFY4RTBtdHVLTGZHUEpkVWFUcTlYNV90bjdTRXd6S3lHV0lveXdSTE5tYW4zMk1NSTQ4TDMwNzRoSnRR
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/css/brands.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/pinottes/pinotte-mauve.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/sb/FHccWFtgCGs/storyboard3_L2/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBgjdvZe-Bg==&sigh=rs%24AOn4CLARNon30Mx273DskZeafqvK2cvpxQ
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/documentsng/images/imagemagazine/couvertures/2025/couverture-2025-03-04.jpg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://ct.pinterest.com/user/?event=pagevisit&ed=%7B%22event_id%22%3A%221743012065573_17430113848603%22%2C%22np%22%3A%22gtm%22%7D&tid=2614146496923&cb=1743011169091&dep=5%2CEVENT_TAGS_ABSENT
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://sb.scorecardresearch.com/b?c1=2&c2=18909054&cs_it=b1&cv=4.12.0%2B2412121612&ns__t=1743011167766&ns_c=UTF-8&cs_cfg=1001110&c7=https%3A%2F%2Fnaitreetgrandir.com%2Ffr%2Fmagazine%2F%3F%26utm_source%3Dinfolettre%26utm_medium%3Demail%26date%3D2025-03-24%26utm_campaign%3Dinfolettre58ans-w287%26utm_content%3Dmagazine%26ic%3Dc4904cb2-c621-4abd-a527-da6cb48ddef4&c8=Le%20magazine%20gratuit%20des%20jeunes%20familles&c9=
IP:	13.226.94.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/ScriptResource.axd?d=UU3HUg2YM0pE-eGqFr4wtPWCcAV8KkfaGR8Z-QpRtQnLhKeixngxLPE4hweDTTJDiuUA2jdNcB_RdtJ_Oy2QZhDHf1PI471g_vH9UaEVciogQxm-jd4W-nBo2Wn8NAd7gj4ntKY9PG-hWg9t45QQYlMzHsoZDkMvYZmTIRpJK97JLUm_RaAZ1Ic668F8k4n8QHBM1w2&t=2a9d95e3
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi/zQiBnw1efBQ/mqdefault.jpg?sqp=-oaymwEoCMACELQB8quKqQMcGADwAQH4AbYIgAK4CIoCDAgAEAEYTiBlKGIwDw==&rs=AOn4CLCftuY2HRr2rXBU4VDgFJ1SHLycPA
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://s.pinimg.com/ct/core.js
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/jquery.touchSwipe.min.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout/logo-flac-noir.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://ad.doubleclick.net/.well-known/attribution-reporting/debug/verbose
IP:	142.251.35.166
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi_webp/FHccWFtgCGs/sddefault.webp
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=_1B_J4jRqNZRQbIY&ver=2&cmt=29.521&fmt=134&fs=0&rt=32.479&euri=https%3A%2F%2Fnaitreetgrandir.com%2F&lact=20531&cl=740099560&state=paused&volume=100&cbr=Chrome&cbrver=134.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20250324.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=30&afmt=251&idpj=-2&ldpj=-20&rti=53&size=640%3A390&inview=1&st=28.05&et=29.521&muted=1&docid=FHccWFtgCGs&ei=eD3kZ5qhKdepkucP5eOOoQo&plid=AAYxQmr6200LRaBS&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FFHccWFtgCGs%3Frel%3D0%26wmode%3Dtransparent%26autoplay%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJdndDZEQtV1plVlFqck8za2ExRWZUVFJoTy02NUdmTzZCbjkxdGZodnVqQWJgQUZVQTZSUVlJaWZ1NFYyLTJqUUgtbWY3SHZfX1BzYmZZNE1BaFY4RTBtdHVLTGZHUEpkVWFUcTlYNV90bjdTRXd6S3lHV0lveXdSTE5tYW4zMk1NSTQ4TDMwNzRoSnRR
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/favicon.ico
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/tooltip.js?r=20240925
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/s/player/4fcd6e4a/player_ias.vflset/en_US/base.js
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/jquery.maskedinput-1.4.1.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://connect.facebook.net/signals/config/421453048573804?v=2.9.190&r=stable&domain=naitreetgrandir.com&hme=c1f2cecb0bd2e60711f2156ceae0254b57f69ec526dbc6c13633615b2168eda4&ex_m=71%2C124%2C109%2C113%2C62%2C4%2C102%2C70%2C16%2C98%2C90%2C51%2C55%2C178%2C181%2C193%2C189%2C190%2C192%2C29%2C103%2C53%2C78%2C191%2C173%2C176%2C186%2C187%2C194%2C135%2C41%2C199%2C196%2C197%2C34%2C148%2C15%2C50%2C203%2C202%2C137%2C18%2C40%2C1%2C43%2C66%2C67%2C68%2C72%2C94%2C17%2C14%2C97%2C93%2C92%2C110%2C52%2C112%2C39%2C111%2C30%2C95%2C26%2C174%2C177%2C145%2C87%2C57%2C85%2C33%2C74%2C0%2C96%2C32%2C28%2C83%2C84%2C89%2C47%2C46%2C88%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C58%2C63%2C65%2C76%2C54%2C104%2C27%2C77%2C9%2C8%2C81%2C48%2C21%2C106%2C105%2C107%2C99%2C10%2C20%2C3%2C38%2C75%2C19%2C5%2C91%2C82%2C44%2C35%2C86%2C244%2C171%2C122%2C160%2C153%2C2%2C36%2C64%2C42%2C108%2C45%2C80%2C69%2C114%2C61%2C60%2C31%2C100%2C59%2C56%2C49%2C79%2C73%2C24%2C101%2C115%2C169%2C204%2C206%2C246%2C172%2C230%2C125%2C163%2C150%2C157%2C133%2C243%2C119%2C131%2C151%2C179%2C165%2C121%2C140%2C126%2C201%2C116%2C132
IP:	57.144.180.128
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://i.ytimg.com/vi/ams43i_m0rg/mqdefault.jpg
IP:	142.250.81.246
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/css/images/loading_background.png
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/s/player/4fcd6e4a/player_ias.vflset/en_US/remote.js
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://script.crazyegg.com/pages/versioned/common-scripts/4e6efdfb40bb89aaad9d548f38acbfa7.js
IP:	104.19.148.8
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/pinottes/pinotte-ronde-verte-pale.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://ct.pinterest.com/ct.html
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/embed/FHccWFtgCGs?rel=0&wmode=transparent&autoplay=1
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/css/style2023.min.css?r=20250127
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://sb.scorecardresearch.com/beacon.js
IP:	13.226.94.67
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/pinottes/pinotte-bleu-magazine.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/css/light.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.google.com/js/th/Z2srF_f-EumjWP-Ic636YChOPTKgVpmQEoQ4qH5djVU.js
IP:	142.250.64.68
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/css/images/controls.png
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://ct.pinterest.com/static/ct/token_create.js
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/css/regular.css
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Downloads files from webservers via HTTP	Networking	Application Layer Protocol Non-Application Layer Protocol Ingress Tool Transfer
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/fontawesome-pro-6.4.0-web/webfonts/fa-light-300.woff2
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/api/stats/watchtime?ns=yt&el=embedded&cpn=_1B_J4jRqNZRQbIY&ver=2&cmt=8.051&fmt=134&fs=0&rt=11.002&euri=https%3A%2F%2Fnaitreetgrandir.com%2F&lact=178&cl=740099560&state=playing&volume=100%2C100&cbr=Chrome&cbrver=134.0.0.0&c=WEB_EMBEDDED_PLAYER&cver=1.20250324.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=30&rtn=21&afmt=251&idpj=-2&ldpj=-20&rti=11&size=640%3A390&inview=1&st=0%2C2.203&et=2.088%2C8.051&muted=0%2C1&docid=FHccWFtgCGs&ei=eD3kZ5qhKdepkucP5eOOoQo&plid=AAYxQmr6200LRaBS&referrer=https%3A%2F%2Fwww.youtube.com%2Fembed%2FFHccWFtgCGs%3Frel%3D0%26wmode%3Dtransparent%26autoplay%3D1&of=wbAUJoLFDaeeOSJrHXH1sg&vm=CAEQABgEOjJBSHFpSlRJdndDZEQtV1plVlFqck8za2ExRWZUVFJoTy02NUdmTzZCbjkxdGZodnVqQWJgQUZVQTZSUVlJaWZ1NFYyLTJqUUgtbWY3SHZfX1BzYmZZNE1BaFY4RTBtdHVLTGZHUEpkVWFUcTlYNV90bjdTRXd6S3lHV0lveXdSTE5tYW4zMk1NSTQ4TDMwNzRoSnRR
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/layout2023/pinottes/pinotte-ronde-blanche.svg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://play.google.com/log?hasfast=true&authuser=0&format=json
IP:	142.251.40.174
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://ct.pinterest.com/user/?tid=2614146496923&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1743011169088&dep=2%2CPAGE_LOAD
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/youtubei/v1/log_event?alt=json
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://s.pinimg.com/ct/lib/main.8821a9da.js
IP:	199.232.88.84
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/youtubei/v1/player?prettyPrint=false
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/img/magazine/julie-fortier-signature.png
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/documentsng/images/imagemagazine/edito/julie-fortier.jpg
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://assets-tracking.crazyegg.com/healthcheck
IP:	18.238.49.90
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/colorbox-master/jquery.colorbox-fr.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://www.youtube.com/s/player/4fcd6e4a/www-embed-player.vflset/www-embed-player.js
IP:	142.250.80.110
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Details

Name:	https://naitreetgrandir.com/js/jquery-ui-1.12.1.min.js
IP:	64.187.177.113
TargetID:	1
From Memory:	false
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Source:	network

Signature Hits	Behavior Group	Mitre Attack
Uses secure TLS version for HTTPS connections	Compliance, Networking

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
https://naitreetgrandir.com/fr/magazine/?&utm_source=infolettre&utm_medium=email&date=2025-03-24&utm_campaign=infolettre58ans-w287&utm_content=magazine&ic=c4904cb2-c621-4abd-a527-da6cb48ddef4

URLs

Domains

IPs

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Reporthttps://naitreetgrandir.com/fr/magazine/?&utm_source=infolettre&utm_medium=email&date=2025-03-24&utm_campaign=infolettre58ans-w287&utm_content=magazine&ic=c4904cb2-c621-4abd-a527-da6cb48ddef4

URLs

Domains

IPs

IOC Report
https://naitreetgrandir.com/fr/magazine/?&utm_source=infolettre&utm_medium=email&date=2025-03-24&utm_campaign=infolettre58ans-w287&utm_content=magazine&ic=c4904cb2-c621-4abd-a527-da6cb48ddef4