Windows Analysis Report
https://springtail-lute-g4wp.squarespace.com/

Overview

General Information

Sample URL:	https://springtail-lute-g4wp.squarespace.com/
Analysis ID:	1432042
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

HTML body contains low number of good links

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://springtail-lute-g4wp.squarespace.com/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

HTML body contains low number of good links

Source: https://springtail-lute-g4wp.squarespace.com/

HTTP Parser: Number of links: 0

Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No favicon
Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No favicon

Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="author".. found
Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="author".. found

Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="copyright".. found

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49737 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49727 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49737 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: springtail-lute-g4wp.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/common-ee76d44c9a56068a6ff6-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/dialog-081be79078914b908a1a-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-1102744cfb68e7dc9164-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6f117db4eb7fd4392375-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/system-page-c12115d305b5f15ab66f-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/cldr-resource-pack-e94539391642d3b99900-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-70736932c490ae0713e6-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-24ffb21b424f235e16e6-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-5c2b5c9b1687bfe753f6-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/dialog-e9ffabce9f75104c66df-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/system-page-cf938be2d5afeda1b3ba-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /universal/images-v6/damask/logomark-dark.png?20181218 HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.squarespace.com/universal/styles-compressed/system-page-c12115d305b5f15ab66f-min.en-US.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: springtail-lute-g4wp.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: crumb=BW7mvpwp4gstYzFmMzQzZjZjNDIxMWFhNTdiMDE5Njk0MWQ2ZGQy
Source: global traffic	HTTP traffic detected: GET /universal/images-v6/damask/logomark-dark.png?20181218 HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: springtail-lute-g4wp.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: assets.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714120735049&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 223Content-Length: 3047Content-Type: text/html;charset=utf-8Date: Fri, 26 Apr 2024 08:35:29 GMTExpires: Thu, 01 Jan 1970 00:00:00 GMTServer: SquarespaceSet-Cookie: crumb=BW7mvpwp4gstYzFmMzQzZjZjNDIxMWFhNTdiMDE5Njk0MWQ2ZGQy;Secure;Path=/Strict-Transport-Security: max-age=15552000X-Content-Type-Options: nosniffX-Contextid: GVpYuhbd/sfbx5tGHX-Frame-Options: SAMEORIGINConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html;charset=utf-8Date: Fri, 26 Apr 2024 08:39:22 GMTServer: SquarespaceStrict-Transport-Security: max-age=15552000X-Content-Type-Options: nosniffX-Contextid: ThDPL9Ey/fx2zDaf3Connection: closeTransfer-Encoding: chunked

Source: chromecache_81.2.dr	String found in binary or memory: http://brm.io/matter-js/
Source: chromecache_81.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_87.2.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: chromecache_85.2.dr, chromecache_77.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_87.2.dr	String found in binary or memory: http://praleska.pro/
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_91.2.dr	String found in binary or memory: http://yuilibrary.com/license/
Source: chromecache_82.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Amine27
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/B0k0
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/BYK
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/DevelopmentIL
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ElFadiliY
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/IrakliJani
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/JanisE
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Kaushik1987
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/MadMG
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Manfre98
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Oire
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Quenty31
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ShahramMebashar
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/TalAter
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Viktorminator
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/WikiDiscoverer
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ZackVision
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/abdelsaid
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/adambrunner
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/alesma
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/aliem
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/amaranthrose
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/andela-batolagbe
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/andrewhood125
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/anthonylau
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/armendarabyan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ashwoolford
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/askpt
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/atamyratabdy
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/avaly
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bangnk
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/baryon
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ben-lin
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bkyceh
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bleadof
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bmarkovic
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/boyaq
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bustta
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/cepem
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chienkira
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chrisrodz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chyngyz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/colindean
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/crnjakovic
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/demidov91
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ebraminio
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/eillarra
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/erhangundogan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/estellecomment
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/evoL
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/fadsel
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/flakerimi
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/floydpink
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/forabi
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/frontyard
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/gaspard
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/gholadr
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/gurdiga
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/hagmandan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/harpreetkhalsagtbit
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/hehachris
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/hinrik
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ibnesayeed
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jalex79
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jarcoal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jatinag22
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/javkhaanj7
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jawish
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jbleduigou
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jcfranco
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jfroffice
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/johnideal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jonashdown
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jonbca
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jorisroling
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/joshbrooks
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/juanghurtado
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/k2s
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kalehv
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/karamell
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kaushikgandhi
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kcthota
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kikoanis
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kraz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kruyvanna
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kwisatz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kyungw00k
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/lantip
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/le0tan
Source: chromecache_81.2.dr	String found in binary or memory: https://github.com/liabru/matter-wrap
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/lluchs
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/madhenry
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/majdal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/marobo
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/matthewdeeco
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mayanksinghal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mechuwind
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mehiel
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mergehez
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/middagj
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/miestasmia
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mik01aj
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/milan-j
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/miodragnikac
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mirontoli
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mmozuras
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mrbase
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/muminoff
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mweimerskirch
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/naderio
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/narainsagar
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nicolaidavies
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/noureddinem
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nurlan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nusretparlak
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/oerd
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/orif-jr
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/passatgt
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/petrbela
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ragnar123
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ragulka
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/rajeevnaikte
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/rasidre
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/rexxars
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/robgallen
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ryangreaves
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ryanhart2
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sakarisson
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sampathsris
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sedovsek
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sigurdga
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sirn
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/skakri
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/skfd
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/socketpair
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/soniasimoes
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sschueller
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/stephenramthun
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/suupic
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/suvash
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/techdimension
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/thanyawzinmin
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/tk120404
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/tomer
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/topchiyev
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/tyok
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ulmus
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/uu109
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/vajradog
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/vnathalye
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/weldan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/wernerm
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/xfh
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/xsoh
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/zemlanin
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/zenozeng
Source: chromecache_86.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_86.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_85.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/258e5b3481787f248acfb9b8e
Source: chromecache_92.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/28b39537fbd40b31a78cc7b7c
Source: chromecache_82.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/3df8d4f8582351347d10168ef
Source: chromecache_81.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/455470591ffbf5e53d164abb7
Source: chromecache_77.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/901edcd5f2eb8eeb56ba9b3c1
Source: chromecache_91.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/ca345414d3962ef6cdaca8d28
Source: chromecache_87.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/e7c36e4e52f3f35484a4d7e33
Source: chromecache_79.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/f2c5d6fd265b78313ef5d39b4
Source: chromecache_78.2.dr	String found in binary or memory: https://support.squarespace.com/hc/en-us/requests/new

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/37@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,2800097577801916186,13105312776878611873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://springtail-lute-g4wp.squarespace.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,2800097577801916186,13105312776878611873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.128.237	unknown	United States	54113	FASTLYUS	false
198.185.159.177	springtail-lute-g4wp.squarespace.com	United States	53831	SQUARESPACEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.217.228	www.google.com	United States	15169	GOOGLEUS	false
151.101.0.237	static.squarespace.map.fastly.net	United States	54113	FASTLYUS	false

Private

IP
192.168.2.5

Contacted Domains

Name	IP	Active
static.squarespace.map.fastly.net	151.101.0.237	true
www.google.com	142.250.217.228	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
springtail-lute-g4wp.squarespace.com	198.185.159.177	true
assets.squarespace.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://springtail-lute-g4wp.squarespace.com/favicon.ico	false	high
https://assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-e94539391642d3b99900-min.en-US.js	false	high
https://assets.squarespace.com/@sqs/polyfiller/1.6/modern.js	false	high
https://springtail-lute-g4wp.squarespace.com/	false	high
https://assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-70736932c490ae0713e6-min.en-US.js	false	high
https://assets.squarespace.com/universal/scripts-compressed/system-page-cf938be2d5afeda1b3ba-min.en-US.js	false	high
https://assets.squarespace.com/universal/scripts-compressed/common-5c2b5c9b1687bfe753f6-min.en-US.js	false	high
https://assets.squarespace.com/universal/styles-compressed/dialog-081be79078914b908a1a-min.en-US.css	false	high

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:39:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	54FC88BF3F03E5FEB9481AD7E23B59B9	3E1400B17C29A3289100F93B82E0B89150485A4A	237AC2EBC048DC9543EA47D48C624E7AF1801280BF9CC67A35345B430BEE0354
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:39:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	CB3E6FD6AAC655CB758F9A39FF150C6B	248D0F2ECB81E2A3CE13F93FF1E5802406804270	A59A98E273B10A61859453888556DD2AF5B9654EF8441677C99DBA0FC95B02DD
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	63132BC33DE40F1880ACB6066E1B6271	3EB9F68E4C74017B58ED5416C744FF23C6961C1E	968C7319A60043820B1E99A7B587DD2BB58CA680AD60DAC50FB2D3739945A617
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:39:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EE90FE6ED840B2C6466D486E2BF171C3	A319306C2D3B62B60FBA998BF044A2AE3993F0F2	467DF07BD2FB9DB62DCC755F8C3EF58A9CC561B8E984C79FB14BB8E25107140E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:39:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	2664D6E4885FBCB42A8A82ED9E84E511	BCC4B0304F259CF03860BE73E9BBA64C91E98347	EE11DC3F617C9DB8EDD6260BF0B453C20FE82871F8E2FE9624BF52BB76C78B32
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 07:39:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	4CFD33491D6E9B86ADD852CEB68EBC37	33969BB19E7FE72E986E6219EAFFA92FD89B383C	94C8CCB475381162269B82E69A2E01DF9735A3D98BD30D605875859D494241B5
Chrome Cache Entry: 77	ASCII text, with very long lines (65536), with no line terminators	9F6C8B592A159E7474B9F0B64EA1EF83	A71BDA4BBEE9524EE8881A25AD9933365F79B01F	E4959574C5C35D0DCC2FEBC19891EA7E9F98CA7E77705FB0DC4849C641DE9B17
Chrome Cache Entry: 78	HTML document, ASCII text, with very long lines (1071)	F237D9C6C70AAA4163C705DCD3A63B55	95FBB15EF281D2AED2DC4C3B398A8F4F859886D5	C43B75D0970E58C7FC737AA6F307BCBD366683B005607D38CABDC901E749212C
Chrome Cache Entry: 79	ASCII text, with very long lines (65536), with no line terminators	7250BBDBC0D08115F4337C95638FC8C2	A28CEFAB39EF36633765DECDED25CAFC652AD8F2	F36A7154507349D2E76810431CD793DF20299BFC41D68D3800F67474C2B9BFF1
Chrome Cache Entry: 80	ASCII text, with very long lines (25224), with no line terminators	7D219D45C123A0A97BA117CF0C71456E	E3625112B7D5264D5D08A2C5E6D756079EFD2001	0B6BA635EE7EF2E0A9DBE24AF68F12806E1A7E2AD291F6859A82C77A0389E4A2
Chrome Cache Entry: 81	ASCII text, with very long lines (65536), with no line terminators	85845F08E802DF9CE068DE784AD83143	9B91CDBB376B8FC66389EDE484A0928FC095F49D	4F3D4DC506F7F503140A9748F0B50533956AE7A8CE00B627BA807A92AAFBFAF6
Chrome Cache Entry: 82	HTML document, ASCII text, with very long lines (65536), with no line terminators	9967D09005230BC2547AC636FD2D306D	219B0C2D4FBDFDD6DAE93665DAB875B65702AB76	B51DC9C61861344DBC38ACD3448185A8A49E9B5C40597C981AEE7A6BF4B43920
Chrome Cache Entry: 83	ASCII text, with very long lines (65536), with no line terminators	9147D65CC87FEAB8198ED93F3B69D59D	769E0B3B87659362EEC831A68727FD16E4823321	17B4D047A35C3748AA7A416AA3BF76D34001EB05D825EFB0B282EF7DE075D97B
Chrome Cache Entry: 84	ASCII text, with very long lines (65536), with no line terminators	B975C5A4D7397495B066B89480A71BA8	420827DD3BC3AE24CFB17E882CBB8008261AE7A5	ED1D6FC8DE895E1B185487F514A2AD58585CCAB9BCD8CF8693F19FA7BFC4C624
Chrome Cache Entry: 85	ASCII text, with very long lines (65536), with no line terminators	E584E6C949FBDAEC2ABDA58B19190BCD	B753C0E761359138566B215CD8CD26697CB74AE1	D648519E74EA9DB0B91F80CC799B23EA480F92F145DB53BA4EFB4D563F8CA2C8
Chrome Cache Entry: 86	Unicode text, UTF-8 text, with very long lines (43878), with NEL line terminators	93A2AEA230D421D550375C528B22583E	E8D88B00DB1C30510928A7C6618F0F7CFFA9B4C2	54E832663426C696B1F603379026E5E15720E8C812BBBC60D63AA2AD8A479F75
Chrome Cache Entry: 87	Unicode text, UTF-8 text, with very long lines (7601)	E5175488E8BD587DDD58916B88E2666B	4885C70FDA8237D3A87EA1B98C27E857B7BF2FF1	26406777F9AF4DDC05D094CAD0FF9015CDBBFB393B13678E676D3A4A6292C5D8
Chrome Cache Entry: 88	HTML document, ASCII text, with very long lines (1071)	E08E8CDD88B3231E23FBFC0991AA2174	DAD08D5A094783DD41538B584567ADA125F88931	99491B805CEA9E52000681D9BA6E573E6900E3F01F1B3FCF4D3FDAFA04000EB1
Chrome Cache Entry: 89	PNG image data, 300 x 109, 8-bit/color RGBA, non-interlaced	17D69E81029AD8A161677B86063BED43	4EC1AA8EE1BA7BFCCA67842A565B3E3C46EA03B1	0DA6105F37D7DF7D1B5A144060975496300C27F669793311345E90017FE76A1D
Chrome Cache Entry: 90	PNG image data, 300 x 109, 8-bit/color RGBA, non-interlaced	17D69E81029AD8A161677B86063BED43	4EC1AA8EE1BA7BFCCA67842A565B3E3C46EA03B1	0DA6105F37D7DF7D1B5A144060975496300C27F669793311345E90017FE76A1D
Chrome Cache Entry: 91	ASCII text, with very long lines (65202)	7AE78E27CD044109D117822F9A1E5821	A681434076977E16D6B5365B5EB0E70F76BB0155	8B59983709A1C98A6354EE69626D3EC51CC9838FD0F4FF00BA579976A0E9A1E1
Chrome Cache Entry: 92	ASCII text, with very long lines (44343)	5C3D699E4AFA7A5DBDD19AFC56DB5429	0B935BAB03DA63A795DF19D0E34B089299A2C457	07173827919D030757D6EAEC976865E470622C7E2BD057DFE13A4F18BF758439

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://springtail-lute-g4wp.squarespace.com/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

HTML body contains low number of good links

Source: https://springtail-lute-g4wp.squarespace.com/

HTTP Parser: Number of links: 0

Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No favicon
Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No favicon

Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="author".. found
Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="author".. found

Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://springtail-lute-g4wp.squarespace.com/	HTTP Parser: No <meta name="copyright".. found

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49737 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49727 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49737 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: springtail-lute-g4wp.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/common-ee76d44c9a56068a6ff6-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/dialog-081be79078914b908a1a-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-runtime-1102744cfb68e7dc9164-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/extract-css-moment-js-vendor-6f117db4eb7fd4392375-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/styles-compressed/system-page-c12115d305b5f15ab66f-min.en-US.css HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/cldr-resource-pack-e94539391642d3b99900-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-stable-70736932c490ae0713e6-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-vendors-24ffb21b424f235e16e6-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/common-5c2b5c9b1687bfe753f6-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/dialog-e9ffabce9f75104c66df-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/scripts-compressed/system-page-cf938be2d5afeda1b3ba-min.en-US.js HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://springtail-lute-g4wp.squarespace.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /universal/images-v6/damask/logomark-dark.png?20181218 HTTP/1.1Host: assets.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.squarespace.com/universal/styles-compressed/system-page-c12115d305b5f15ab66f-min.en-US.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: springtail-lute-g4wp.squarespace.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://springtail-lute-g4wp.squarespace.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: crumb=BW7mvpwp4gstYzFmMzQzZjZjNDIxMWFhNTdiMDE5Njk0MWQ2ZGQy
Source: global traffic	HTTP traffic detected: GET /universal/images-v6/damask/logomark-dark.png?20181218 HTTP/1.1Host: assets.squarespace.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: springtail-lute-g4wp.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: assets.squarespace.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 223Content-Length: 3047Content-Type: text/html;charset=utf-8Date: Fri, 26 Apr 2024 08:35:29 GMTExpires: Thu, 01 Jan 1970 00:00:00 GMTServer: SquarespaceSet-Cookie: crumb=BW7mvpwp4gstYzFmMzQzZjZjNDIxMWFhNTdiMDE5Njk0MWQ2ZGQy;Secure;Path=/Strict-Transport-Security: max-age=15552000X-Content-Type-Options: nosniffX-Contextid: GVpYuhbd/sfbx5tGHX-Frame-Options: SAMEORIGINConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html;charset=utf-8Date: Fri, 26 Apr 2024 08:39:22 GMTServer: SquarespaceStrict-Transport-Security: max-age=15552000X-Content-Type-Options: nosniffX-Contextid: ThDPL9Ey/fx2zDaf3Connection: closeTransfer-Encoding: chunked

Source: chromecache_81.2.dr	String found in binary or memory: http://brm.io/matter-js/
Source: chromecache_81.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_87.2.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: chromecache_85.2.dr, chromecache_77.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_87.2.dr	String found in binary or memory: http://praleska.pro/
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_91.2.dr	String found in binary or memory: http://yuilibrary.com/license/
Source: chromecache_82.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Amine27
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/B0k0
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/BYK
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/DevelopmentIL
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ElFadiliY
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/IrakliJani
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/JanisE
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Kaushik1987
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/MadMG
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Manfre98
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Oire
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Quenty31
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ShahramMebashar
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/TalAter
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/Viktorminator
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/WikiDiscoverer
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ZackVision
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/abdelsaid
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/adambrunner
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/alesma
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/aliem
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/amaranthrose
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/andela-batolagbe
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/andrewhood125
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/anthonylau
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/armendarabyan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ashwoolford
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/askpt
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/atamyratabdy
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/avaly
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bangnk
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/baryon
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ben-lin
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bkyceh
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bleadof
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bmarkovic
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/boyaq
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/bustta
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/cepem
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chienkira
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chrisrodz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/chyngyz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/colindean
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/crnjakovic
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/demidov91
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ebraminio
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/eillarra
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/erhangundogan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/estellecomment
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/evoL
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/fadsel
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/flakerimi
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/floydpink
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/forabi
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/frontyard
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/gaspard
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/gholadr
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/gurdiga
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/hagmandan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/harpreetkhalsagtbit
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/hehachris
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/hinrik
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ibnesayeed
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jalex79
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jarcoal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jatinag22
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/javkhaanj7
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jawish
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jbleduigou
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jcfranco
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jfroffice
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/johnideal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jonashdown
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jonbca
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/jorisroling
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/joshbrooks
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/juanghurtado
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/k2s
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kalehv
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/karamell
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kaushikgandhi
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kcthota
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kikoanis
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kraz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kruyvanna
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kwisatz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/kyungw00k
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/lantip
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/le0tan
Source: chromecache_81.2.dr	String found in binary or memory: https://github.com/liabru/matter-wrap
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/lluchs
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/madhenry
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/majdal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/marobo
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/matthewdeeco
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mayanksinghal
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mechuwind
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mehiel
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mergehez
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/middagj
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/miestasmia
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mik01aj
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/milan-j
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/miodragnikac
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mirontoli
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mmozuras
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mrbase
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/muminoff
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/mweimerskirch
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/naderio
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/narainsagar
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nicolaidavies
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/noureddinem
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nurlan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/nusretparlak
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/oerd
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/orif-jr
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/passatgt
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/petrbela
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ragnar123
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ragulka
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/rajeevnaikte
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/rasidre
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/rexxars
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/robgallen
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ryangreaves
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ryanhart2
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sakarisson
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sampathsris
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sedovsek
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sigurdga
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sirn
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/skakri
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/skfd
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/socketpair
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/soniasimoes
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/sschueller
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/stephenramthun
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/suupic
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/suvash
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/techdimension
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/thanyawzinmin
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/tk120404
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/tomer
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/topchiyev
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/tyok
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/ulmus
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/uu109
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/vajradog
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/vnathalye
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/weldan
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/wernerm
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/xfh
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/xsoh
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/zemlanin
Source: chromecache_87.2.dr	String found in binary or memory: https://github.com/zenozeng
Source: chromecache_86.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_86.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_81.2.dr, chromecache_77.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_85.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/258e5b3481787f248acfb9b8e
Source: chromecache_92.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/28b39537fbd40b31a78cc7b7c
Source: chromecache_82.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/3df8d4f8582351347d10168ef
Source: chromecache_81.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/455470591ffbf5e53d164abb7
Source: chromecache_77.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/901edcd5f2eb8eeb56ba9b3c1
Source: chromecache_91.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/ca345414d3962ef6cdaca8d28
Source: chromecache_87.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/e7c36e4e52f3f35484a4d7e33
Source: chromecache_79.2.dr	String found in binary or memory: https://sourcemaps.squarespace.net/universal/scripts-compressed/sourcemaps/f2c5d6fd265b78313ef5d39b4
Source: chromecache_78.2.dr	String found in binary or memory: https://support.squarespace.com/hc/en-us/requests/new

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/37@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,2800097577801916186,13105312776878611873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://springtail-lute-g4wp.squarespace.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2208,i,2800097577801916186,13105312776878611873,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1432042
Product:	CloudBasic
Start time:	10:38:23
Start date:	26.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://springtail-lute-g4wp.squarespace.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://springtail-lute-g4wp.squarespace.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://springtail-lute-g4wp.squarespace.com/