Edit tour

Windows Analysis Report
http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r

Overview

General Information

Sample URL:http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r
Analysis ID:1322363

Detection

Score:1
Range:0 - 100
Whitelisted:false
Confidence:80%

Signatures

Stores files to the Windows start menu directory
Creates files inside the system directory

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
  • System is w10x64_ra
  • chrome.exe (PID: 5624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 3788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,15802485787850025466,9600212843098341206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup
No yara matches
No Sigma rule has matched
No Snort rule has matched

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://refinance.quickenloans.com/?pkey1=809&pkey2=2&pkey3=42890da93af048dfbf5f25085bec81c3&sourceid=lmb-54867-113582-809&sid=9&cmpid=9&crtid=&oid=9&affid=809&_ef_transaction_id=42890da93af048dfbf5f25085bec81c3HTTP Parser: No favicon
Source: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4bed9e1a00006400050b9bca#locale=en-US&styleHeight=130px&styleWidth=100%25&theme=light&stars=5HTTP Parser: No favicon
Source: https://api.pushnami.com/scripts/v1/hubHTTP Parser: No favicon
Source: https://tr.snapchat.com/cm/i?pid=409e6a74-8d7f-465e-87b0-cc6eb99f3a76&u_scsid=69d3e808-b7cb-400e-a94b-e37f3f82c37c&u_sclid=9d4bf7f8-1726-4ce4-8ae2-dd0c5e6decd4HTTP Parser: No favicon
Source: https://pixel.mathtag.com/sync/iframe?mt_uuid=6c216524-3ebc-4200-85c3-4c0d4ae6e6c1&no_iframe=1&mt_adid=245296&source=mathtagHTTP Parser: No favicon
Source: https://refinance.quickenloans.com/?pkey1=809&pkey2=2&pkey3=42890da93af048dfbf5f25085bec81c3&sourceid=lmb-54867-113582-809&sid=9&cmpid=9&crtid=&oid=9&affid=809&_ef_transaction_id=42890da93af048dfbf5f25085bec81c3HTTP Parser: No favicon
Source: unknownHTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknownHTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49779 version: TLS 1.2
Source: unknownHTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50037 version: TLS 1.2
Source: unknownDNS traffic detected: queries for: echo4.bluehornet.com
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49744
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49865
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49986
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49864
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49741
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49982
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49860
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49981
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49980
Source: unknownNetwork traffic detected: HTTP traffic on port 49852 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49990 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49739
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49738
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49737
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49857
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49978
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49856
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49977
Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49855
Source: unknownNetwork traffic detected: HTTP traffic on port 49841 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49854
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49975
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49852
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49731
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49972
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49851
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49730
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49970
Source: unknownNetwork traffic detected: HTTP traffic on port 49967 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49784 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50004 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49729
Source: unknownNetwork traffic detected: HTTP traffic on port 49943 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49728
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49727
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49969
Source: unknownNetwork traffic detected: HTTP traffic on port 49978 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49726
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49847
Source: unknownNetwork traffic detected: HTTP traffic on port 49886 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49968
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49846
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49967
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49724
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49845
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49966
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49723
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49965
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49964
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49721
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49720
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49841
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49840
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49960
Source: unknownNetwork traffic detected: HTTP traffic on port 50015 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49966 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49760 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49828 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49933 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49719
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49717
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49959
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49837
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49716
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49958
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49957
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49834
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49832
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49953
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49831
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49952
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49951
Source: unknownNetwork traffic detected: HTTP traffic on port 49864 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49950
Source: unknownNetwork traffic detected: HTTP traffic on port 49944 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49726 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49910 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50051 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49829
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49828
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49949
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49705
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49947
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49946
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49824
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49945
Source: unknownNetwork traffic detected: HTTP traffic on port 49737 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49944
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49943
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49788
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
Source: unknownNetwork traffic detected: HTTP traffic on port 49922 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49784
Source: unknownNetwork traffic detected: HTTP traffic on port 49945 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49783
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49782
Source: unknownNetwork traffic detected: HTTP traffic on port 50017 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49781
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49780
Source: unknownNetwork traffic detected: HTTP traffic on port 49968 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49785 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49980 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49779
Source: unknownNetwork traffic detected: HTTP traffic on port 49885 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49899
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49897
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49896
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49774
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49895
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49773
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49892
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49770
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49891
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49890
Source: unknownNetwork traffic detected: HTTP traffic on port 49724 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49897 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49911 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49957 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49851 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49889
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49765
Source: unknownNetwork traffic detected: HTTP traffic on port 49758 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49886
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49764
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49885
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49884
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49763
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49883
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49881
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49760
Source: unknownNetwork traffic detected: HTTP traffic on port 49840 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49880
Source: unknownNetwork traffic detected: HTTP traffic on port 49896 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49770 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50050 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49797 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50005 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49758
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49879
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49757
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49878
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49999
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49998
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49754
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49996
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49995
Source: unknownNetwork traffic detected: HTTP traffic on port 49923 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49994
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49751
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49993
Source: unknownNetwork traffic detected: HTTP traffic on port 50016 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49871
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49992
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49990
Source: unknownNetwork traffic detected: HTTP traffic on port 49747 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49829 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49934 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50027 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49747
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49868
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49746
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49988
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49745
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49866
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49987
Source: unknownNetwork traffic detected: HTTP traffic on port 49672 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49746 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49803 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49906 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49837 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49975 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49929 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50025 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49964 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49798 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49999 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49918 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49787 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49930 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49745 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50001 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49986 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49799
Source: unknownNetwork traffic detected: HTTP traffic on port 49757 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50007
Source: unknownNetwork traffic detected: HTTP traffic on port 50037 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49798
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50006
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49797
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50009
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50008
Source: unknownNetwork traffic detected: HTTP traffic on port 49952 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49794
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49793
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49792
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49791
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49790
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50001
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50000
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50003
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50002
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50005
Source: unknownNetwork traffic detected: HTTP traffic on port 49895 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50004
Source: unknownNetwork traffic detected: HTTP traffic on port 49723 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50048 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49884 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49789
Source: unknownNetwork traffic detected: HTTP traffic on port 49779 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49871 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50003 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49965 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49799 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49942 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49977 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49816 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50014 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49788 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49988 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49721 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50046 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49953 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49815 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50047 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50024 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49860 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49883 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49998 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49673 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49931 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50058 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49804 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50002 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49987 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49949 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50054
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50053
Source: unknownNetwork traffic detected: HTTP traffic on port 49789 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49800 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50056
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50055
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50058
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50057
Source: unknownNetwork traffic detected: HTTP traffic on port 49720 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50045 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49881 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49950 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49996 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50010 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49812 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50056 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49915 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49790 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49674 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49731 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50009 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50034 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49972 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49834 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50057 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49892 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49904 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49847 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49927 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49765 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49938 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49811 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49754 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50018
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50017
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50019
Source: unknownNetwork traffic detected: HTTP traffic on port 49951 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50032 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50010
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50011
Source: unknownNetwork traffic detected: HTTP traffic on port 50055 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50014
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50016
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50015
Source: unknownNetwork traffic detected: HTTP traffic on port 49845 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49791 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49868 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50029
Source: unknownNetwork traffic detected: HTTP traffic on port 49707 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50021
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50020
Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50025
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50024
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50027
Source: unknownNetwork traffic detected: HTTP traffic on port 49780 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49879 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50000 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49802 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50021 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50030
Source: unknownNetwork traffic detected: HTTP traffic on port 49905 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49995 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50011 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49928 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50032
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50031
Source: unknownNetwork traffic detected: HTTP traffic on port 49741 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49857 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50034
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50033
Source: unknownNetwork traffic detected: HTTP traffic on port 49764 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50037
Source: unknownNetwork traffic detected: HTTP traffic on port 49719 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49801 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49940 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49824 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50041
Source: unknownNetwork traffic detected: HTTP traffic on port 49891 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49730 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50033 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50043
Source: unknownNetwork traffic detected: HTTP traffic on port 49917 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50042
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50045
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50047
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50046
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50048
Source: unknownNetwork traffic detected: HTTP traffic on port 49880 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50050
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50052
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 50051
Source: unknownNetwork traffic detected: HTTP traffic on port 49846 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49792 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49890 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49970 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50042 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50007 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49781 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49878 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49912 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49958 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49717 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49889 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49866 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49820 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49946 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50018 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49728 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49763 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49855 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50053 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49981 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49901 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49924 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49819 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49947 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49729 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49793 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49831 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50031 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49751 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49992 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50043 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49774 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49782 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49969 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49994 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50020 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50054 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49740 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49856 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49913 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50006 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49821
Source: unknownNetwork traffic detected: HTTP traffic on port 49865 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49942
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49820
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49940
Source: unknownNetwork traffic detected: HTTP traffic on port 49727 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50052 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49819
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49938
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49937
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49816
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49815
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49936
Source: unknownNetwork traffic detected: HTTP traffic on port 49902 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49934
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49812
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49933
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49811
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49931
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49930
Source: unknownNetwork traffic detected: HTTP traffic on port 49925 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50008 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49794 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49936 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49960 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49929
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49928
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49927
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49805
Source: unknownNetwork traffic detected: HTTP traffic on port 50029 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49804
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49925
Source: unknownNetwork traffic detected: HTTP traffic on port 49773 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49803
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49924
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49802
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49923
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49801
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49922
Source: unknownNetwork traffic detected: HTTP traffic on port 49739 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49800
Source: unknownNetwork traffic detected: HTTP traffic on port 49783 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49821 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50019 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49854 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49914 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49982 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49937 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49918
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49917
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49915
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49914
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49913
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49912
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49911
Source: unknownNetwork traffic detected: HTTP traffic on port 49738 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49910
Source: unknownNetwork traffic detected: HTTP traffic on port 49705 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50041 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49761 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49899 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49959 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49832 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 50030 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49906
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49905
Source: unknownNetwork traffic detected: HTTP traffic on port 49716 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49750 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49904
Source: unknownNetwork traffic detected: HTTP traffic on port 49993 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49903
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49902
Source: unknownNetwork traffic detected: HTTP traffic on port 49903 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49901
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownTCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global trafficHTTP traffic detected: GET /ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r HTTP/1.1Host: echo4.bluehornet.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: unknownHTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknownHTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49779 version: TLS 1.2
Source: unknownHTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50037 version: TLS 1.2
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Windows\SystemTemp\chrome_BITS_5624_984218621
Source: classification engineClassification label: clean1.win@22/249@221/991
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,15802485787850025466,9600212843098341206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1980,i,15802485787850025466,9600212843098341206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management Instrumentation1
Registry Run Keys / Startup Folder
1
Process Injection
11
Masquerading
OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local SystemExfiltration Over Other Network Medium2
Encrypted Channel
Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization Scripts1
Registry Run Keys / Startup Folder
1
Process Injection
LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over Bluetooth2
Non-Application Layer Protocol
Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveAutomated Exfiltration3
Application Layer Protocol
Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
Local AccountsAt (Windows)Logon Script (Mac)Logon Script (Mac)Binary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput CaptureScheduled Transfer1
Ingress Tool Transfer
SIM Card SwapCarrier Billing Fraud

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand
SourceDetectionScannerLabelLink
http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r0%Avira URL Cloudsafe
No Antivirus matches
No Antivirus matches
No Antivirus matches
No Antivirus matches
NameIPActiveMaliciousAntivirus DetectionReputation
tls13.taboola.map.fastly.net
151.101.193.44
truefalse
    unknown
    stun.anura.io
    35.167.52.199
    truefalse
      unknown
      mobile-gtalk.l.google.com
      74.125.137.188
      truefalse
        high
        d20qwf0wrdtevy.cloudfront.net
        18.65.25.6
        truefalse
          high
          stats.g.doubleclick.net
          142.250.101.157
          truefalse
            high
            pix.revjet.com
            107.6.88.62
            truefalse
              high
              ads.anura.io
              13.33.21.14
              truefalse
                unknown
                livepixel-production.bln.liveintent.com
                52.6.65.93
                truefalse
                  high
                  dualstack.tls13.taboola.map.fastly.net
                  151.101.129.44
                  truefalse
                    unknown
                    cm.g.doubleclick.net
                    142.250.68.2
                    truefalse
                      high
                      q4e6t8h7.stackpathcdn.com
                      151.139.128.10
                      truefalse
                        unknown
                        www.google.com
                        142.250.68.68
                        truefalse
                          high
                          rocketmortgage.com.ssl.sc.omtrdc.net
                          63.140.36.121
                          truefalse
                            unknown
                            static-msql-prod.refinance.quickenloans.com
                            104.18.12.43
                            truefalse
                              high
                              www.npvnt7trk.com
                              34.36.162.171
                              truefalse
                                unknown
                                cdn.mortgage.quickenloans.com
                                104.18.8.75
                                truefalse
                                  high
                                  star-mini.c10r.facebook.com
                                  31.13.70.36
                                  truefalse
                                    high
                                    android.l.google.com
                                    142.250.72.174
                                    truefalse
                                      high
                                      us-u.openx.net
                                      34.98.64.218
                                      truefalse
                                        high
                                        script.anura.io
                                        52.12.119.177
                                        truefalse
                                          unknown
                                          sc-static.net
                                          52.84.244.253
                                          truefalse
                                            unknown
                                            refinance.quickenloans.com
                                            104.18.12.43
                                            truefalse
                                              high
                                              detgh1asa1dg4.cloudfront.net
                                              18.164.174.129
                                              truefalse
                                                high
                                                www.lmbahsj2.com
                                                35.201.76.131
                                                truefalse
                                                  unknown
                                                  dualstack.reddit.map.fastly.net
                                                  151.101.193.140
                                                  truefalse
                                                    unknown
                                                    analytics-alv.google.com
                                                    216.239.38.181
                                                    truefalse
                                                      high
                                                      prod.pinterest.global.map.fastly.net
                                                      151.101.128.84
                                                      truefalse
                                                        unknown
                                                        cs-cdn.deviceatlas.com
                                                        3.18.206.181
                                                        truefalse
                                                          high
                                                          googleads.g.doubleclick.net
                                                          142.250.72.226
                                                          truefalse
                                                            high
                                                            reddit.map.fastly.net
                                                            151.101.129.140
                                                            truefalse
                                                              unknown
                                                              dualstack.pinterest.map.fastly.net
                                                              146.75.92.84
                                                              truefalse
                                                                unknown
                                                                td.doubleclick.net
                                                                142.250.176.2
                                                                truefalse
                                                                  high
                                                                  clients.l.google.com
                                                                  142.250.176.14
                                                                  truefalse
                                                                    high
                                                                    api.pushnami.com
                                                                    18.154.206.105
                                                                    truefalse
                                                                      high
                                                                      static.cloudflareinsights.com
                                                                      104.16.56.101
                                                                      truefalse
                                                                        unknown
                                                                        pug-sv3c.pubmnet.com
                                                                        204.237.133.120
                                                                        truefalse
                                                                          unknown
                                                                          prod-ems-app-elb-01-1227721391.us-west-2.elb.amazonaws.com
                                                                          52.11.71.220
                                                                          truefalse
                                                                            high
                                                                            spdc-global.pbp.gysm.yahoodns.net
                                                                            98.137.11.144
                                                                            truefalse
                                                                              unknown
                                                                              d2bempapugykx0.cloudfront.net
                                                                              18.164.174.59
                                                                              truefalse
                                                                                high
                                                                                scontent.xx.fbcdn.net
                                                                                31.13.70.7
                                                                                truefalse
                                                                                  high
                                                                                  demdex.net.ssl.sc.omtrdc.net
                                                                                  63.140.36.148
                                                                                  truefalse
                                                                                    unknown
                                                                                    gcp.api.sc-gw.com
                                                                                    35.190.43.134
                                                                                    truefalse
                                                                                      unknown
                                                                                      pixel.tapad.com
                                                                                      34.111.113.62
                                                                                      truefalse
                                                                                        high
                                                                                        fonts.cdnfonts.com
                                                                                        172.64.132.22
                                                                                        truefalse
                                                                                          unknown
                                                                                          accounts.google.com
                                                                                          142.250.176.13
                                                                                          truefalse
                                                                                            high
                                                                                            ads.revjet.com
                                                                                            15.204.44.78
                                                                                            truefalse
                                                                                              high
                                                                                              s.amazon-adsystem.com
                                                                                              52.46.128.147
                                                                                              truefalse
                                                                                                high
                                                                                                psp.pushnami.com
                                                                                                52.23.4.238
                                                                                                truefalse
                                                                                                  high
                                                                                                  trc.pushnami.com
                                                                                                  44.215.12.4
                                                                                                  truefalse
                                                                                                    high
                                                                                                    content.refinance.quickenloans.com
                                                                                                    104.18.13.43
                                                                                                    truefalse
                                                                                                      high
                                                                                                      g7j5m5i6.stackpathcdn.com
                                                                                                      151.139.128.10
                                                                                                      truefalse
                                                                                                        unknown
                                                                                                        dsum-sec.casalemedia.com
                                                                                                        104.18.26.193
                                                                                                        truefalse
                                                                                                          high
                                                                                                          www.datadoghq-browser-agent.com
                                                                                                          18.164.178.211
                                                                                                          truefalse
                                                                                                            unknown
                                                                                                            trackpixel.refinance.quickenloans.com
                                                                                                            104.18.13.43
                                                                                                            truefalse
                                                                                                              high
                                                                                                              widget.trustpilot.com
                                                                                                              18.154.132.124
                                                                                                              truefalse
                                                                                                                high
                                                                                                                dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.com
                                                                                                                52.39.147.20
                                                                                                                truefalse
                                                                                                                  high
                                                                                                                  ib.anycast.adnxs.com
                                                                                                                  104.254.151.36
                                                                                                                  truefalse
                                                                                                                    high
                                                                                                                    edge.gycpi.b.yahoodns.net
                                                                                                                    209.73.190.11
                                                                                                                    truefalse
                                                                                                                      unknown
                                                                                                                      pug-sfo-bc.pubmnet.com
                                                                                                                      104.36.113.107
                                                                                                                      truefalse
                                                                                                                        unknown
                                                                                                                        alb.reddit.com
                                                                                                                        unknown
                                                                                                                        unknownfalse
                                                                                                                          high
                                                                                                                          tr.snapchat.com
                                                                                                                          unknown
                                                                                                                          unknownfalse
                                                                                                                            high
                                                                                                                            cdn1.lockerdomecdn.com
                                                                                                                            unknown
                                                                                                                            unknownfalse
                                                                                                                              high
                                                                                                                              cm.everesttech.net
                                                                                                                              unknown
                                                                                                                              unknownfalse
                                                                                                                                high
                                                                                                                                pixel.everesttech.net
                                                                                                                                unknown
                                                                                                                                unknownfalse
                                                                                                                                  high
                                                                                                                                  clients2.google.com
                                                                                                                                  unknown
                                                                                                                                  unknownfalse
                                                                                                                                    high
                                                                                                                                    adobedc.demdex.net
                                                                                                                                    unknown
                                                                                                                                    unknownfalse
                                                                                                                                      high
                                                                                                                                      somni.rocketmortgage.com
                                                                                                                                      unknown
                                                                                                                                      unknownfalse
                                                                                                                                        high
                                                                                                                                        www.redditstatic.com
                                                                                                                                        unknown
                                                                                                                                        unknownfalse
                                                                                                                                          high
                                                                                                                                          assets.adobedtm.com
                                                                                                                                          unknown
                                                                                                                                          unknownfalse
                                                                                                                                            high
                                                                                                                                            pixel.rubiconproject.com
                                                                                                                                            unknown
                                                                                                                                            unknownfalse
                                                                                                                                              high
                                                                                                                                              echo4.bluehornet.com
                                                                                                                                              unknown
                                                                                                                                              unknownfalse
                                                                                                                                                high
                                                                                                                                                trc.taboola.com
                                                                                                                                                unknown
                                                                                                                                                unknownfalse
                                                                                                                                                  high
                                                                                                                                                  b-code.liadm.com
                                                                                                                                                  unknown
                                                                                                                                                  unknownfalse
                                                                                                                                                    high
                                                                                                                                                    connect.facebook.net
                                                                                                                                                    unknown
                                                                                                                                                    unknownfalse
                                                                                                                                                      high
                                                                                                                                                      s.yimg.com
                                                                                                                                                      unknown
                                                                                                                                                      unknownfalse
                                                                                                                                                        high
                                                                                                                                                        cdn.taboola.com
                                                                                                                                                        unknown
                                                                                                                                                        unknownfalse
                                                                                                                                                          high
                                                                                                                                                          sync-tm.everesttech.net
                                                                                                                                                          unknown
                                                                                                                                                          unknownfalse
                                                                                                                                                            high
                                                                                                                                                            pixel.mathtag.com
                                                                                                                                                            unknown
                                                                                                                                                            unknownfalse
                                                                                                                                                              high
                                                                                                                                                              sp.analytics.yahoo.com
                                                                                                                                                              unknown
                                                                                                                                                              unknownfalse
                                                                                                                                                                high
                                                                                                                                                                quicken.demdex.net
                                                                                                                                                                unknown
                                                                                                                                                                unknownfalse
                                                                                                                                                                  high
                                                                                                                                                                  cdn1.decide.dev
                                                                                                                                                                  unknown
                                                                                                                                                                  unknownfalse
                                                                                                                                                                    unknown
                                                                                                                                                                    ct.pinterest.com
                                                                                                                                                                    unknown
                                                                                                                                                                    unknownfalse
                                                                                                                                                                      high
                                                                                                                                                                      ads.yahoo.com
                                                                                                                                                                      unknown
                                                                                                                                                                      unknownfalse
                                                                                                                                                                        high
                                                                                                                                                                        image2.pubmatic.com
                                                                                                                                                                        unknown
                                                                                                                                                                        unknownfalse
                                                                                                                                                                          high
                                                                                                                                                                          dpm.demdex.net
                                                                                                                                                                          unknown
                                                                                                                                                                          unknownfalse
                                                                                                                                                                            high
                                                                                                                                                                            aa.agkn.com
                                                                                                                                                                            unknown
                                                                                                                                                                            unknownfalse
                                                                                                                                                                              high
                                                                                                                                                                              c.pmsrv.co
                                                                                                                                                                              unknown
                                                                                                                                                                              unknownfalse
                                                                                                                                                                                high
                                                                                                                                                                                clients1.google.com
                                                                                                                                                                                unknown
                                                                                                                                                                                unknownfalse
                                                                                                                                                                                  high
                                                                                                                                                                                  www.facebook.com
                                                                                                                                                                                  unknown
                                                                                                                                                                                  unknownfalse
                                                                                                                                                                                    high
                                                                                                                                                                                    navapi-lb.lowermybills.com
                                                                                                                                                                                    unknown
                                                                                                                                                                                    unknownfalse
                                                                                                                                                                                      high
                                                                                                                                                                                      s.pinimg.com
                                                                                                                                                                                      unknown
                                                                                                                                                                                      unknownfalse
                                                                                                                                                                                        high
                                                                                                                                                                                        analytics.google.com
                                                                                                                                                                                        unknown
                                                                                                                                                                                        unknownfalse
                                                                                                                                                                                          high
                                                                                                                                                                                          ib.adnxs.com
                                                                                                                                                                                          unknown
                                                                                                                                                                                          unknownfalse
                                                                                                                                                                                            high
                                                                                                                                                                                            sync.search.spotxchange.com
                                                                                                                                                                                            unknown
                                                                                                                                                                                            unknownfalse
                                                                                                                                                                                              high
                                                                                                                                                                                              www.rockomni.com
                                                                                                                                                                                              unknown
                                                                                                                                                                                              unknownfalse
                                                                                                                                                                                                unknown
                                                                                                                                                                                                rp.liadm.com
                                                                                                                                                                                                unknown
                                                                                                                                                                                                unknownfalse
                                                                                                                                                                                                  high
                                                                                                                                                                                                  NameMaliciousAntivirus DetectionReputation
                                                                                                                                                                                                  http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:rfalse
                                                                                                                                                                                                    high
                                                                                                                                                                                                    about:srcdocfalse
                                                                                                                                                                                                      low
                                                                                                                                                                                                      https://api.pushnami.com/scripts/v1/hubfalse
                                                                                                                                                                                                        high
                                                                                                                                                                                                        https://refinance.quickenloans.com/?pkey1=809&pkey2=2&pkey3=42890da93af048dfbf5f25085bec81c3&sourceid=lmb-54867-113582-809&sid=9&cmpid=9&crtid=&oid=9&affid=809&_ef_transaction_id=42890da93af048dfbf5f25085bec81c3false
                                                                                                                                                                                                          high
                                                                                                                                                                                                          https://tr.snapchat.com/cm/i?pid=409e6a74-8d7f-465e-87b0-cc6eb99f3a76&u_scsid=69d3e808-b7cb-400e-a94b-e37f3f82c37c&u_sclid=9d4bf7f8-1726-4ce4-8ae2-dd0c5e6decd4false
                                                                                                                                                                                                            high
                                                                                                                                                                                                            https://quicken.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Frefinance.quickenloans.comfalse
                                                                                                                                                                                                              high
                                                                                                                                                                                                              https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4bed9e1a00006400050b9bca#locale=en-US&styleHeight=130px&styleWidth=100%25&theme=light&stars=5false
                                                                                                                                                                                                                high
                                                                                                                                                                                                                https://pixel.mathtag.com/sync/iframe?mt_uuid=6c216524-3ebc-4200-85c3-4c0d4ae6e6c1&no_iframe=1&mt_adid=245296&source=mathtagfalse
                                                                                                                                                                                                                  high
                                                                                                                                                                                                                  • No. of IPs < 25%
                                                                                                                                                                                                                  • 25% < No. of IPs < 50%
                                                                                                                                                                                                                  • 50% < No. of IPs < 75%
                                                                                                                                                                                                                  • 75% < No. of IPs
                                                                                                                                                                                                                  IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                                                  172.64.132.22
                                                                                                                                                                                                                  fonts.cdnfonts.comUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  184.26.157.112
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16625AKAMAI-ASUSfalse
                                                                                                                                                                                                                  142.250.68.68
                                                                                                                                                                                                                  www.google.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  151.101.128.84
                                                                                                                                                                                                                  prod.pinterest.global.map.fastly.netUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  142.250.176.14
                                                                                                                                                                                                                  clients.l.google.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  142.250.176.13
                                                                                                                                                                                                                  accounts.google.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  151.101.193.140
                                                                                                                                                                                                                  dualstack.reddit.map.fastly.netUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  52.12.119.177
                                                                                                                                                                                                                  script.anura.ioUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  18.164.174.129
                                                                                                                                                                                                                  detgh1asa1dg4.cloudfront.netUnited States
                                                                                                                                                                                                                  3MIT-GATEWAYSUSfalse
                                                                                                                                                                                                                  151.101.65.140
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  54.191.115.213
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  63.140.36.148
                                                                                                                                                                                                                  demdex.net.ssl.sc.omtrdc.netUnited States
                                                                                                                                                                                                                  4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                                                                                                                                                                                                                  151.101.193.44
                                                                                                                                                                                                                  tls13.taboola.map.fastly.netUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  31.13.70.36
                                                                                                                                                                                                                  star-mini.c10r.facebook.comIreland
                                                                                                                                                                                                                  32934FACEBOOKUSfalse
                                                                                                                                                                                                                  157.240.11.35
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  32934FACEBOOKUSfalse
                                                                                                                                                                                                                  52.39.147.20
                                                                                                                                                                                                                  dcs-edge-usw2-620097651.us-west-2.elb.amazonaws.comUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  239.255.255.250
                                                                                                                                                                                                                  unknownReserved
                                                                                                                                                                                                                  unknownunknownfalse
                                                                                                                                                                                                                  151.101.65.44
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  151.101.192.84
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  18.154.132.87
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  107.6.88.62
                                                                                                                                                                                                                  pix.revjet.comUnited States
                                                                                                                                                                                                                  29791VOXEL-DOT-NETUSfalse
                                                                                                                                                                                                                  216.239.38.181
                                                                                                                                                                                                                  analytics-alv.google.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  104.254.151.36
                                                                                                                                                                                                                  ib.anycast.adnxs.comUnited States
                                                                                                                                                                                                                  29990ASN-APPNEXUSfalse
                                                                                                                                                                                                                  18.65.25.6
                                                                                                                                                                                                                  d20qwf0wrdtevy.cloudfront.netUnited States
                                                                                                                                                                                                                  3MIT-GATEWAYSUSfalse
                                                                                                                                                                                                                  18.154.206.105
                                                                                                                                                                                                                  api.pushnami.comUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  18.164.174.59
                                                                                                                                                                                                                  d2bempapugykx0.cloudfront.netUnited States
                                                                                                                                                                                                                  3MIT-GATEWAYSUSfalse
                                                                                                                                                                                                                  63.140.36.121
                                                                                                                                                                                                                  rocketmortgage.com.ssl.sc.omtrdc.netUnited States
                                                                                                                                                                                                                  4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                                                                                                                                                                                                                  142.250.188.227
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  23.208.10.21
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  33662CMCSUSfalse
                                                                                                                                                                                                                  104.18.12.43
                                                                                                                                                                                                                  static-msql-prod.refinance.quickenloans.comUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  142.250.72.168
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  172.217.14.67
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  23.62.176.208
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  3257GTT-BACKBONEGTTDEfalse
                                                                                                                                                                                                                  35.190.43.134
                                                                                                                                                                                                                  gcp.api.sc-gw.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  104.18.26.193
                                                                                                                                                                                                                  dsum-sec.casalemedia.comUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  209.73.190.12
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  36229YAHOO-YSM-SC8USfalse
                                                                                                                                                                                                                  52.84.244.253
                                                                                                                                                                                                                  sc-static.netUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  104.254.148.251
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  29990ASN-APPNEXUSfalse
                                                                                                                                                                                                                  204.237.133.120
                                                                                                                                                                                                                  pug-sv3c.pubmnet.comUnited States
                                                                                                                                                                                                                  62713AS-PUBMATICUSfalse
                                                                                                                                                                                                                  3.18.206.181
                                                                                                                                                                                                                  cs-cdn.deviceatlas.comUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  209.73.190.11
                                                                                                                                                                                                                  edge.gycpi.b.yahoodns.netUnited States
                                                                                                                                                                                                                  36229YAHOO-YSM-SC8USfalse
                                                                                                                                                                                                                  35.167.52.199
                                                                                                                                                                                                                  stun.anura.ioUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  151.101.129.140
                                                                                                                                                                                                                  reddit.map.fastly.netUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  98.137.11.144
                                                                                                                                                                                                                  spdc-global.pbp.gysm.yahoodns.netUnited States
                                                                                                                                                                                                                  36647YAHOO-GQ1USfalse
                                                                                                                                                                                                                  142.250.72.174
                                                                                                                                                                                                                  android.l.google.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  63.140.36.139
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                                                                                                                                                                                                                  52.35.189.231
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  52.11.71.220
                                                                                                                                                                                                                  prod-ems-app-elb-01-1227721391.us-west-2.elb.amazonaws.comUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  142.250.72.234
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  52.6.65.93
                                                                                                                                                                                                                  livepixel-production.bln.liveintent.comUnited States
                                                                                                                                                                                                                  14618AMAZON-AESUSfalse
                                                                                                                                                                                                                  52.46.128.147
                                                                                                                                                                                                                  s.amazon-adsystem.comUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  142.250.101.157
                                                                                                                                                                                                                  stats.g.doubleclick.netUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  142.250.176.2
                                                                                                                                                                                                                  td.doubleclick.netUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  18.154.206.9
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  151.101.66.49
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  52.39.106.225
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  142.250.72.226
                                                                                                                                                                                                                  googleads.g.doubleclick.netUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  44.215.12.4
                                                                                                                                                                                                                  trc.pushnami.comUnited States
                                                                                                                                                                                                                  14618AMAZON-AESUSfalse
                                                                                                                                                                                                                  184.72.239.108
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  14618AMAZON-AESUSfalse
                                                                                                                                                                                                                  74.125.137.188
                                                                                                                                                                                                                  mobile-gtalk.l.google.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  35.82.171.163
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  237MERIT-AS-14USfalse
                                                                                                                                                                                                                  13.33.21.14
                                                                                                                                                                                                                  ads.anura.ioUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  54.68.218.135
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  18.154.132.124
                                                                                                                                                                                                                  widget.trustpilot.comUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  63.140.36.117
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                                                                                                                                                                                                                  52.43.151.139
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  172.217.14.98
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  8.39.36.142
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  26667RUBICONPROJECTUSfalse
                                                                                                                                                                                                                  104.18.13.43
                                                                                                                                                                                                                  content.refinance.quickenloans.comUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  8.39.36.141
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  26667RUBICONPROJECTUSfalse
                                                                                                                                                                                                                  151.101.64.84
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  104.16.56.101
                                                                                                                                                                                                                  static.cloudflareinsights.comUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  15.204.44.78
                                                                                                                                                                                                                  ads.revjet.comUnited States
                                                                                                                                                                                                                  71HP-INTERNET-ASUSfalse
                                                                                                                                                                                                                  18.154.206.43
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  96.7.140.207
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  21342AKAMAI-ASN2EUfalse
                                                                                                                                                                                                                  35.201.76.131
                                                                                                                                                                                                                  www.lmbahsj2.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  142.250.68.4
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  104.18.27.193
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  52.23.4.238
                                                                                                                                                                                                                  psp.pushnami.comUnited States
                                                                                                                                                                                                                  14618AMAZON-AESUSfalse
                                                                                                                                                                                                                  54.164.67.84
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  14618AMAZON-AESUSfalse
                                                                                                                                                                                                                  104.36.113.107
                                                                                                                                                                                                                  pug-sfo-bc.pubmnet.comUnited States
                                                                                                                                                                                                                  62713AS-PUBMATICUSfalse
                                                                                                                                                                                                                  104.18.8.75
                                                                                                                                                                                                                  cdn.mortgage.quickenloans.comUnited States
                                                                                                                                                                                                                  13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                  142.250.68.2
                                                                                                                                                                                                                  cm.g.doubleclick.netUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  34.111.113.62
                                                                                                                                                                                                                  pixel.tapad.comUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  34.36.162.171
                                                                                                                                                                                                                  www.npvnt7trk.comUnited States
                                                                                                                                                                                                                  2686ATGS-MMD-ASUSfalse
                                                                                                                                                                                                                  18.164.178.211
                                                                                                                                                                                                                  www.datadoghq-browser-agent.comUnited States
                                                                                                                                                                                                                  3MIT-GATEWAYSUSfalse
                                                                                                                                                                                                                  142.250.217.131
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  151.101.129.44
                                                                                                                                                                                                                  dualstack.tls13.taboola.map.fastly.netUnited States
                                                                                                                                                                                                                  54113FASTLYUSfalse
                                                                                                                                                                                                                  34.98.64.218
                                                                                                                                                                                                                  us-u.openx.netUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  31.13.70.7
                                                                                                                                                                                                                  scontent.xx.fbcdn.netIreland
                                                                                                                                                                                                                  32934FACEBOOKUSfalse
                                                                                                                                                                                                                  54.69.69.48
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  52.46.151.131
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  16509AMAZON-02USfalse
                                                                                                                                                                                                                  151.139.128.10
                                                                                                                                                                                                                  q4e6t8h7.stackpathcdn.comUnited States
                                                                                                                                                                                                                  20446HIGHWINDS3USfalse
                                                                                                                                                                                                                  142.250.72.130
                                                                                                                                                                                                                  unknownUnited States
                                                                                                                                                                                                                  15169GOOGLEUSfalse
                                                                                                                                                                                                                  146.75.92.84
                                                                                                                                                                                                                  dualstack.pinterest.map.fastly.netSweden
                                                                                                                                                                                                                  30051SCCGOVUSfalse
                                                                                                                                                                                                                  IP
                                                                                                                                                                                                                  192.168.2.16
                                                                                                                                                                                                                  Joe Sandbox Version:38.0.0 Ammolite
                                                                                                                                                                                                                  Analysis ID:1322363
                                                                                                                                                                                                                  Start date and time:2023-10-09 19:55:24 +02:00
                                                                                                                                                                                                                  Joe Sandbox Product:CloudBasic
                                                                                                                                                                                                                  Overall analysis duration:
                                                                                                                                                                                                                  Hypervisor based Inspection enabled:false
                                                                                                                                                                                                                  Report type:full
                                                                                                                                                                                                                  Cookbook file name:defaultwindowsinteractivecookbook.jbs
                                                                                                                                                                                                                  Sample URL:http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r
                                                                                                                                                                                                                  Analysis system description:Windows 10 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                                                                                                                                                  Number of analysed new started processes analysed:8
                                                                                                                                                                                                                  Number of new started drivers analysed:0
                                                                                                                                                                                                                  Number of existing processes analysed:0
                                                                                                                                                                                                                  Number of existing drivers analysed:0
                                                                                                                                                                                                                  Number of injected processes analysed:0
                                                                                                                                                                                                                  Technologies:
                                                                                                                                                                                                                  • EGA enabled
                                                                                                                                                                                                                  Analysis Mode:stream
                                                                                                                                                                                                                  Analysis stop reason:Timeout
                                                                                                                                                                                                                  Detection:CLEAN
                                                                                                                                                                                                                  Classification:clean1.win@22/249@221/991
                                                                                                                                                                                                                  • Exclude process from analysis (whitelisted): SIHClient.exe
                                                                                                                                                                                                                  • Excluded IPs from analysis (whitelisted): 142.250.188.227, 34.104.35.123
                                                                                                                                                                                                                  • Excluded domains from analysis (whitelisted): edgedl.me.gvt1.com, clientservices.googleapis.com
                                                                                                                                                                                                                  • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                                                  • VT rate limit hit for: http://echo4.bluehornet.com/ct/102382314:7iRrY3GNo:m:1:3704804765:08FA3081E51DED790A08854867171A03:r
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 9 16:55:55 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):2673
                                                                                                                                                                                                                  Entropy (8bit):3.9807348022898768
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:5CE983A6280B69068F343C1AE03C8CF7
                                                                                                                                                                                                                  SHA1:E19544C7D3DA93AFA1E40A8A515EE4A87874B873
                                                                                                                                                                                                                  SHA-256:DAAA5D7EBE1E5B0643518C2140219030F6F4D27DDA0331F77319736AFC0CF762
                                                                                                                                                                                                                  SHA-512:06388F19DCA878848EF8D73F555BC1D2303A0D3C4CCF483AAC9B4A7557C628662004E7B880ED052572380B3C6C00F0078782D63828B714D6F4D0259150B83668
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:L..................F.@.. ...$+.,....?3......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIW.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VIW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........:.4H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 9 16:55:55 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):2675
                                                                                                                                                                                                                  Entropy (8bit):3.9980819625503807
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:803CE74B422EB4DFA3052D3ED5BB27B4
                                                                                                                                                                                                                  SHA1:BFD39AE9165C4F81D3CF46F7AF8B43BF17BFA298
                                                                                                                                                                                                                  SHA-256:1B625BC659C6BEF9C6698327907190471AA8881BC9C3E144A4815DFAB5C588F6
                                                                                                                                                                                                                  SHA-512:61C7D974C1ED4070ACB565FB6ED922EC77D0FE6D946F681F6ADF686AE79F72F0032CA3AA05E925C9CDF1BDD332FDBD015936E6E42D4247F919DF1B9D844B2C45
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:L..................F.@.. ...$+.,....X.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIW.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VIW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........:.4H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):2689
                                                                                                                                                                                                                  Entropy (8bit):4.005293638124571
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:DB6B7840A73FCC106B655796AEB72FE8
                                                                                                                                                                                                                  SHA1:D1CD80AC239656BCF47A2DE3779AFFCE24758925
                                                                                                                                                                                                                  SHA-256:6D344321EF5357C58E35464DCF05B8F736A239944C95231415484A2FFE516247
                                                                                                                                                                                                                  SHA-512:665DE4D4A93C7176414EE949BC4B4223F3D7D6CB2CDD06C5F75D7DA61DA139EE7DE6BBF86E92A24C2E9849E45C7B8B479D447F2A920C5E4A1AA69049DEAFDED1
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIW.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........:.4H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 9 16:55:55 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):2677
                                                                                                                                                                                                                  Entropy (8bit):3.9929089178874193
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:4A078FC4186B996147B4EAB326BA4933
                                                                                                                                                                                                                  SHA1:A08A2CE334A9D4851C8776AC6BCEA69BFBC8404C
                                                                                                                                                                                                                  SHA-256:E4773207C85D9A1C9E91402D55CC561767C1379985E58D47F561287BB935132D
                                                                                                                                                                                                                  SHA-512:15862CB40EB3B7C6375367F09B661C7B78A874E4DD50AD247475D50F1ABDA3BBFAD77307A98957E31DC1B119C55FF54720EA5F4466D9EBEB6091668DE8C26D6C
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:L..................F.@.. ...$+.,.....r......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIW.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VIW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........:.4H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 9 16:55:55 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):2677
                                                                                                                                                                                                                  Entropy (8bit):3.98247549271104
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:42ADE5C742F0FEF6AE17B9E9664CB9A4
                                                                                                                                                                                                                  SHA1:6BAD69D2AD30D9FF68849D3070DF334D227DF74B
                                                                                                                                                                                                                  SHA-256:C7F625B1279A9FEC3687C2D29BBED083AFB2F5295984F8D1DDB68EA5A29C19AE
                                                                                                                                                                                                                  SHA-512:9A2D051A8D2BA6E6DCDE01F01DA72DC698B22460BD96404B85D5D006754BBC1517140AD78D4BE2BDA31D53F5B26CDBDF56C80A40EC5138082013DFB64ACA65FE
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:L..................F.@.. ...$+.,.....f......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIW.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VIW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........:.4H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 9 16:55:55 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):2679
                                                                                                                                                                                                                  Entropy (8bit):3.9944699280848153
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:74C3BF08327CC83A26739874A4373596
                                                                                                                                                                                                                  SHA1:4F5B0D6B8E10AD3D9BE192CE850586422651E3AC
                                                                                                                                                                                                                  SHA-256:7C1347A9A361609C808F6CCCE9D6CFFDB64E61985E5EA09B70A2BE7CC880C2DC
                                                                                                                                                                                                                  SHA-512:274F04C3AB7202B6E3778614C9A69601DC1E9E4FF148C351DD1AC833EBF040B0D8079B87F695452D36706BE206BAA7577D80815439D101B9EB75A1B5E847FD64
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:L..................F.@.. ...$+.,....!.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIW.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VIW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........:.4H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2394)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2617
                                                                                                                                                                                                                  Entropy (8bit):5.823531728269388
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:2494428232BBD713AD61E54852AC7880
                                                                                                                                                                                                                  SHA1:4FC93CE3A285AFF280504CA31B400BBE83AB0E4E
                                                                                                                                                                                                                  SHA-256:64D675C839C1F1385D56346EFB8B29671E5F8F6DAC9F521AB389FB13CE984504
                                                                                                                                                                                                                  SHA-512:E23F791BB60231409D35F9F28379B5C87AB70B9D6576A3C82B36E1A8E606C979867CA5ABCD3B455FDB1C2BC2D5DA9A8E5C62127693036DB1E87B1BEED65B14D2
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/966730890/?random=1696874167340&cv=11&fst=1696874167340&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (64347)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):202266
                                                                                                                                                                                                                  Entropy (8bit):5.451235405459401
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:7795E34265E63DFAAA321067F3C7EAE6
                                                                                                                                                                                                                  SHA1:FD58077E7189D5385B89DE051005B28CDE12072A
                                                                                                                                                                                                                  SHA-256:805270B078CDE87B61BB57C8BD44F8B58B0D128F5A8EFDD4395470B45B291D65
                                                                                                                                                                                                                  SHA-512:ACAF0627DF9B778899CEA96699E2FCFDD845BF5EC7E9F4BE938D2752673D8C92C188FE7F717EB2FF86D26B878D50ED11FE0110182CB16D3F75A3E84C8B701DEE
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://connect.facebook.net/en_US/fbevents.js
                                                                                                                                                                                                                  Preview:/**.* Copyright (c) 2017-present, Facebook, Inc. All rights reserved..*.* You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook..*.* As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software..*.* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):209374
                                                                                                                                                                                                                  Entropy (8bit):5.552981505271921
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:E7BC47344916878D431BA6F7F1D9F284
                                                                                                                                                                                                                  SHA1:9750F085B9440269AD647F7759DAE7545A80B73E
                                                                                                                                                                                                                  SHA-256:36E968B5EB5D63358A140542285EB232C7B62F7E24E1260EAA58C27C3E33E756
                                                                                                                                                                                                                  SHA-512:F6BCFADDAA5C62AEFA4BA8A8EA066D6A99AA8323FDEA8BDCE5BAAE8788F912676EEE7C461E8FAC07F8028F1B71B516D64B90F95982047BF525EE04F11B5FA81F
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-857412364
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-857412364","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":3,"vtp_instanceDestinationId":"AW-857412364","tag_id":9},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-857412364","tag_id":7},{"function":"__rep","vtp_containerId":"AW-857412364","vtp_remoteConfig":["map","enhanced_conversions",["map","QQP7CPzToPoCEIym7JgD",["map","enhanced_conversions_mode","off","enhanced_conversions_automatic_settings",["map"]],"f39_CPHsovo
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2393)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2616
                                                                                                                                                                                                                  Entropy (8bit):5.826219613719443
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:CD4D42914673A4D31393B8E949C363F7
                                                                                                                                                                                                                  SHA1:D41C1BF1D440EC0487AEEC7480574B7C861EB0AD
                                                                                                                                                                                                                  SHA-256:6723073490DC6079941C923C5B9BFF57689C52F939C7E69A5BC432026649911A
                                                                                                                                                                                                                  SHA-512:50B8B34B1E39A6CC6B65ECEB604D2F17C6F1B06D3E29DFAD96E7C42B68064046E1C1967F7F0388B9B1197AAD08B67381BBDB090F0029E52DDC7F5C7441B11EB1
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/857412364/?random=1696874171399&cv=11&fst=1696874171399&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):875
                                                                                                                                                                                                                  Entropy (8bit):5.47069135844615
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:2363A18C3A0EF81A2CD6366EDD91AB47
                                                                                                                                                                                                                  SHA1:516C120D0B730A71BE5B03602FAA3CE2BCAE9BC7
                                                                                                                                                                                                                  SHA-256:0DD1971699F19F33219608023CD1F3294E8C0BED22CD575610C85644E5942271
                                                                                                                                                                                                                  SHA-512:DE5CC8B8DD635A03C6960390A63CF3AA8175C08B919F60178976BCAAFC48C6A109011B4592EDA324293454C8E055A68390CFCBF27EA368FB33361D3AA1A303AD
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://fonts.googleapis.com/css2?family=Shadows+Into+Light+Two&display=swap
                                                                                                                                                                                                                  Preview:/* latin-ext */.@font-face {. font-family: 'Shadows Into Light Two';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/shadowsintolighttwo/v17/4iC86LVlZsRSjQhpWGedwyOoW-0A6_kpsyNmpALHGYNn.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./* latin */.@font-face {. font-family: 'Shadows Into Light Two';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/shadowsintolighttwo/v17/4iC86LVlZsRSjQhpWGedwyOoW-0A6_kpsyNmpAzHGQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):13
                                                                                                                                                                                                                  Entropy (8bit):3.5465935642949384
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:97EFE0B7EE61E154D57E80758BB797D8
                                                                                                                                                                                                                  SHA1:810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
                                                                                                                                                                                                                  SHA-256:EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
                                                                                                                                                                                                                  SHA-512:AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:{"bakers":[]}
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2394)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2617
                                                                                                                                                                                                                  Entropy (8bit):5.8251000276320335
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:88D9228F5D975677E2069D98644D7058
                                                                                                                                                                                                                  SHA1:FF9F5F19D0B77ACAD6F077C0344B52583A374850
                                                                                                                                                                                                                  SHA-256:7F44A404BEE02936FB649C08143BCFE3B4A079475202F5A5FEE5BEEF414365B3
                                                                                                                                                                                                                  SHA-512:A602EE1CF2C94582CA17735F3B9E7D880B4A8E079F36E1BC347A510602D70E8CC1F031BB12094B301EB394E023D594A55B9F5A86ED4743C3D9239A12CEB80DC5
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/755089552/?random=1696874170720&cv=11&fst=1696874170720&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (1152), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):1152
                                                                                                                                                                                                                  Entropy (8bit):4.864005644344307
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:C528D2845D7D04A6C2FC9D8B411A07FA
                                                                                                                                                                                                                  SHA1:4A5CDE705A03ECB08F43AE89C1D7300D391A6A6A
                                                                                                                                                                                                                  SHA-256:76B65310895E8341F3804E1F3D436A0910928874964DAF20F6E2D7A8A69553F4
                                                                                                                                                                                                                  SHA-512:D9E37F3C3C67C368CDDF5CA26400D1F33EE64CEE0DB2D4DC9D303AD75BF8083EAB984AAB06AB800163CAF3DA264D319AC1B93EA4696842D857C15E532C556D6D
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://fonts.cdnfonts.com/css/stack-ssi
                                                                                                                                                                                                                  Preview:@font-face{font-family:stag sans;font-style:normal;font-weight:400;src:local('Stag Sans'),url(https://fonts.cdnfonts.com/s/87552/StagSansRegular.woff) format('woff')}@font-face{font-family:stag sans;font-style:normal;font-weight:100;src:local('Stag Sans'),url(https://fonts.cdnfonts.com/s/87552/StagSansThin.woff) format('woff')}@font-face{font-family:stag sans;font-style:normal;font-weight:300;src:local('Stag Sans'),url(https://fonts.cdnfonts.com/s/87552/StagSansLight.woff) format('woff')}@font-face{font-family:stag sans;font-style:normal;font-weight:500;src:local('Stag Sans'),url(https://fonts.cdnfonts.com/s/87552/StagSansMedium.woff) format('woff')}@font-face{font-family:stag sans;font-style:normal;font-weight:600;src:local('Stag Sans'),url(https://fonts.cdnfonts.com/s/87552/StagSansSemiBold.woff) format('woff')}@font-face{font-family:stag sans;font-style:normal;font-weight:700;src:local('Stag Sans'),url(https://fonts.cdnfonts.com/s/87552/StagSansBold.woff) format('woff')}@font-face{f
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:Unicode text, UTF-8 text, with very long lines (61195)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):61202
                                                                                                                                                                                                                  Entropy (8bit):5.408485529253717
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:0640ECFDC8583A2577A8F10BA8FA25D2
                                                                                                                                                                                                                  SHA1:127BFFA6BB3C37FA1D5DD83839699A2B6724337A
                                                                                                                                                                                                                  SHA-256:7579FEA8B4D6EA390F1A708A3B08B08911F3DF414F650FA850780D0B3211CAB7
                                                                                                                                                                                                                  SHA-512:F95F1F766814C48FFDB1B1C401025E8085A18C5DE79741F1B9AAA15CB2B2AF2299E753B364BA24A54C4E6E1F9601B3B0A3A7A7E81B313B3422044961482F57A2
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.lmbahsj2.com/scripts/sdk/everflow.js
                                                                                                                                                                                                                  Preview:var EF=function(){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function r(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable||!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}function i(e,t,n){return t&&r(e.prototype,t),n&&r(e,n),e}function t(e){return(t=Object.setPrototypeOf?Object.getPrototypeOf:function(e){return e.__proto__||Object.getPrototypeOf(e)})(e)}function a(e,t){return(a=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e})(e,t)}function o(e,t){return!t||"object"!=typeof t&&"function"!=typeof t?function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}(e):t}var s="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};var e,c=(function(e){var t,n;t=s,n=function(){function l(e,t){e=[e[0]>>>16,65535&e[0],e[
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:Unicode text, UTF-8 text, with very long lines (45465)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):45469
                                                                                                                                                                                                                  Entropy (8bit):5.307186847695382
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:36E033BB33476C126283251EA526E86C
                                                                                                                                                                                                                  SHA1:DAAAD301D8BAB3D1003913DA6DC1770CC9EFB3E8
                                                                                                                                                                                                                  SHA-256:15CE766C8C680F1EF58C8001D05B5014A9677096A51EB3EFEB01B11760485956
                                                                                                                                                                                                                  SHA-512:2590EFB36ECD64EF45F6C0D5083D96F6E227AB13D61A8DA508989FC77978DBD5ACD4CA293BBD224443CB55F128746282C6ADE8FB1AFC9BE57E36B8B97D16E516
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://b-code.liadm.com/a-06d7.min.js
                                                                                                                                                                                                                  Preview:!function(){window.LI={appId:"a-06d7",advertiserId:66674,sync:!1,euns:!1,identifiersToResolve:"_sharedid,s_vi,trc_cookie_storage,gup_anonid,_li_uuid,hid,_parrable_id,tmguid,ajs_user_id,globalTI_SID,muuid,dtm_token,_shopify_y,_pubcid,IXWRAPPERLiveIntentIp,_aalyticsuid,s_ecid",contextSelectors:"title,meta[name='description'],h1,link[rel='canonical']",contextElementsLength:5000}}();!function(){"use strict";var e="__us_privacy",t="__tcfapi",r="li_config",n="pre_lips",o="__uspapiLocator",i="__tcfapiLocator";"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self&&self;function a(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){return this instanceof e?Reflect.construct(t,arguments,this.constructor):t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyD
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (65360)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):65387
                                                                                                                                                                                                                  Entropy (8bit):5.346963286995481
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:8165B6B216511ADC5DF39CC88DF556E2
                                                                                                                                                                                                                  SHA1:E8D76806183B844BA5AB1939E5C3A1E591B812B4
                                                                                                                                                                                                                  SHA-256:10BD26E353A86C9C2E0A3D6BDD2D08015D8DBC4168AB908E85FE38D8C01E898B
                                                                                                                                                                                                                  SHA-512:BA6F04AF22E5F47EA7230FB92C4B3C5B18DF319ACB937BF27AED466190037A3D3A8F0D79CD0CD9498E8B1D505C4302E2A1CCDB20FFCBEDCE65DD50ADA7101CC8
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://cdn.taboola.com/libtrc/unip/1390358/tfa.js
                                                                                                                                                                                                                  Preview:/*! 20231009-1-RELEASE */..function _typeof(e){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}!function(e){var t="${jsScope}";t.indexOf("{jsScope}")>-1&&(t="TRC"),e[t]||(e[t]={})}(window),function(e,t){e.TRC=e.TRC||{};var n=function e(){return!0},r=function n(r,i,o,s){var a=r+"/"+encodeURIComponent(o||e.TRC.publisherId)+"/log/3"+"/"+i;return s&&(a+="?"+t.TRCLogger.formatParams(s)),a},i=function t(r,i,s){var a,c=new(e.XDomainRequest||e.XMLHttpRequest);return c.open(r,i),c.onload=n,c.onerror=n,c.ontimeout=n,c.onprogress=n,c.withCredentials=!0,s&&o(c,s),c},o=function e(t,n){for(var r in n)n.hasOwnProperty(r)&&t.setRequestHeader(r,n[r])};e.TRC.TRCLogger=t.TRCLogger={post:function n(o,s,a,c,u,l){var f=r(o,s,c,u),d=i("POST",f);l&&"function"==typeof e.navigator.sendBeacon?e.navigator.sendBeacon(f
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (18187), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):18187
                                                                                                                                                                                                                  Entropy (8bit):5.347759003709589
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:5C6ED25DCE803FD84288922B8928409E
                                                                                                                                                                                                                  SHA1:3CCC10546AE12F160BACAC1E9E422AF091EA4A41
                                                                                                                                                                                                                  SHA-256:480B06B23E574B4BF386FDE1A91145A4171F97AEB5EE800E4BE1850F29B1AD91
                                                                                                                                                                                                                  SHA-512:FE9265D2E6EA4ACB7E0A87E08BEDFAF48BCBAD62BB7A86E73F9AE21C8437AF3334D2A9733C6BC47A12BBF54F97EC79271CB5300F90231614F407599D1B4C05E5
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://s.yimg.com/wi/ytc.js
                                                                                                                                                                                                                  Preview:!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)||Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):70
                                                                                                                                                                                                                  Entropy (8bit):4.46909731110833
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:E5F6E0555B000AC24E7EAF8953743E3F
                                                                                                                                                                                                                  SHA1:8A983DAEC0942B43F84A95C4136E06FAED7DB877
                                                                                                                                                                                                                  SHA-256:5FEB700E15AC4596C246FA7D341549C4535665C9B314D3B9230D5C610469F232
                                                                                                                                                                                                                  SHA-512:534994A53DA0662585E5FA90055D2A786D9F5848B560B091ACD1CC62DAA6412879066C93C6C50E8EAE0A3D2F58F84AEF4AEAF206EEEFA7FCF4D43D89458E2472
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:{"statusCode":404,"message":"Cannot GET /api/psp","error":"Not Found"}
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:GIF image data, version 89a, 1 x 1
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):43
                                                                                                                                                                                                                  Entropy (8bit):2.9889835948335506
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:B4491705564909DA7F9EAF749DBBFBB1
                                                                                                                                                                                                                  SHA1:279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
                                                                                                                                                                                                                  SHA-256:4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
                                                                                                                                                                                                                  SHA-512:B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:GIF89a.............!.......,...........D..;
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, Unicode text, UTF-8 text, with very long lines (60361)
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):104921
                                                                                                                                                                                                                  Entropy (8bit):5.0782661923687105
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:9FB86E8618FF660169509D5579E345B4
                                                                                                                                                                                                                  SHA1:62FB26BAC8C66924B3AB11F0B1EF06784A9A11E5
                                                                                                                                                                                                                  SHA-256:99B00029043D06E43A563DC936EEBAC71ECD1C40A33EADAB6A1442AB7BB26360
                                                                                                                                                                                                                  SHA-512:7A96100609C91B1323BD6FDB1738DB8F7D4F33D9E064AB2251ACF5D44600B7432D925BA703F69F102A11BE0373020BC09ADEC8C4C21CC64EE88A5A003E6113A7
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:<!DOCTYPE html><html lang="en" data-reactroot=""><head>. <link rel="stylesheet" href="https://static-msql-prod.refinance.quickenloans.com/main.2901f6d1a91191c18d39.css" />. <meta name='viewport' content='width=device-width, initial-scale=1.0, maximum-scale=1.0'>. <title>Refinance Mortgage, Refinancing Rates, Mortgage Rates</title>. <meta name="description" content="If you haven't refinanced yet, it's not too late! There has never been a better time to refinance. Rates are at near historic lows, and we could help you land a low rate.">. <meta name="keywords" content="refinance, mortgage, mortgages, refinancing, mortgage rates, refinance mortgage, refinance rates, refinancing rates, refinancing home, home loan, home loans, equity loans, home equity loans, home equity loan, second mortgage, home equity loan rates, credit card consolidation, debt loans, credit card debt consolidation, bad credit loans, debt free, bad credit, debt help, debt solutions, mon
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):427
                                                                                                                                                                                                                  Entropy (8bit):5.301039880753351
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:2CE44CEB49AAD02D8F5EC1B7713FC2BD
                                                                                                                                                                                                                  SHA1:2A91CC32C55FFBE1E36FD0832FD5B9C025BC5D99
                                                                                                                                                                                                                  SHA-256:4F1F80216A63E56CE52CB1660993E5688ED78059D87116DE59C43E4C2839D18B
                                                                                                                                                                                                                  SHA-512:CF2234BA2341C875908B45B8692BD800E52C52BAC3DC84D9DBE7C15219D011DEB0375D55EBDDF1E8897038CB144F463F179B69B487187EC486C9E38BAC89C4B0
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://fonts.googleapis.com/css2?family=Antic+Didone&display=swap
                                                                                                                                                                                                                  Preview:/* latin */.@font-face {. font-family: 'Antic Didone';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/anticdidone/v16/RWmPoKKX6u8sp8fIWdnDKqDSroEH.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):13760
                                                                                                                                                                                                                  Entropy (8bit):5.435136211660439
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:7ED56460047EF251FA28CE4A5BC843B8
                                                                                                                                                                                                                  SHA1:BDE0ABAF3D9CE089EF0C326152E0329846C76857
                                                                                                                                                                                                                  SHA-256:EAD030154A651DBF216D5C043E974BB3F78B640078472F63D4277DB7DEB1FAAE
                                                                                                                                                                                                                  SHA-512:E21B7495D8FFC878E00E9677CC9471DE3C0DAFADDD9E6B00DA6499764E82F980058465CB3BF4278E01F39969CAAA9700193701649EE9AD2A64EA07C1C7E4BB7C
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:"https://fonts.googleapis.com/css?family=Montserrat:thin,extra-light,light,100,200,300,400,500,600,700,800"
                                                                                                                                                                                                                  Preview:/* cyrillic-ext */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./* cyrillic */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./* vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./* latin-ext */.@font-face {. font-f
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (3460), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):3460
                                                                                                                                                                                                                  Entropy (8bit):5.352717460624549
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:EC7D1B53D4248D0A41D3A97D1102C98E
                                                                                                                                                                                                                  SHA1:845631A050DFCA1A62E8D7986FE7793844163B31
                                                                                                                                                                                                                  SHA-256:DF822E44EFC31160C2E2CFF9D29435159054BCCEB67FA2512C3899F02DFB7557
                                                                                                                                                                                                                  SHA-512:E8EBACA33E8AD9348E2B8EBED1CAFC486C1DAC76EE610CF350C305FC000FF9B0F0ECC2F628865C8F8E96B4C46A23664A52DA9378AED4230C57CB657AA9ED3852
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://s.pinimg.com/ct/core.js
                                                                                                                                                                                                                  Preview:!function(e){var r={};function o(n){var t;return(r[n]||(t=r[n]={i:n,l:!1,exports:{}},e[n].call(t.exports,t,t.exports,o),t.l=!0,t)).exports}o.m=e,o.c=r,o.d=function(n,t,e){o.o(n,t)||Object.defineProperty(n,t,{enumerable:!0,get:e})},o.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},o.t=function(t,n){if(1&n&&(t=o(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.u)return t;var e=Object.create(null);if(o.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var r in t)o.d(e,r,function(n){return t[n]}.bind(null,r));return e},o.n=function(n){var t=n&&n.u?function(){return n.default}:function(){return n};return o.d(t,"a",t),t},o.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},o.p="",o(o.s=1)}([function(n,t){function e(n,t){return function(n){if(Array.isArray(n))return n}(n)||function(n,t){var e=null==n?null:"undefined"!=typ
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2952)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):169683
                                                                                                                                                                                                                  Entropy (8bit):5.535056442005785
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:F318B20EBDE96D9171437CB5B2B4EB7B
                                                                                                                                                                                                                  SHA1:9CF87A38E5E1D8922EF2792866665229CCCBB108
                                                                                                                                                                                                                  SHA-256:332BAF62CE4F84B0904DD2EA53D399E732102E56DFB9592DDA15225AAF674B40
                                                                                                                                                                                                                  SHA-512:46807D69386EC53633B457CFD5D0D272CC6DE5CCBF8B1978514D82EAAC9D019D8D7BE616096CBCD94A67385FCA4EB8A08CB357D78B6CB9A3F283C8CA43AD03DC
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtm.js?id=GTM-5B82MZ73
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-8ZZTRFCYKX","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__googtag",[46,"a"],[50,"m",[46,"v","w"],[66,"x",[2,[15,"b"],"keys",[7,[15,"w"]]],[46,[43,[15,"v"],[15,"x"],[16,[15,"w"],[15,"x"]]]]]],[50,"n",[46],[36,[7,[17,[17,[15,"e"],"SCHEMA"],"EP_SERVER_CONTAINER_URL"
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2952)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):196816
                                                                                                                                                                                                                  Entropy (8bit):5.538078942776581
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:8A2AD652D3D4B04F3FED4F07ECBB44D6
                                                                                                                                                                                                                  SHA1:C6D766DEC95D362CDED2F2618D1291D83CF57ED1
                                                                                                                                                                                                                  SHA-256:7E82033B5C4D385E448AAE93FDB4FC92E0EC712BB3A2E59EBF971FB66008D0FA
                                                                                                                                                                                                                  SHA-512:E6A145B18DC735EAD018845A90FA8EE289AE1658318BD44C42248956BFE82EEBF6FE85ADC16D67DEAF57417E397B36C4AB7655B6ADEABBD4A4CFFAC8BEBB6F4E
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-848879802&l=dataLayer&cx=c
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){return a.raw=a},da=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error(String
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                  Entropy (8bit):4.144413829577611
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:98DB852F61504F975F136DA683B58305
                                                                                                                                                                                                                  SHA1:F9B9C6A7454289A5E2029B0411A8C4CD60A8D6B8
                                                                                                                                                                                                                  SHA-256:F006BBD60894452B80C7D19E1C832D1E30F457540DC5E52E567BC1FFE522615D
                                                                                                                                                                                                                  SHA-512:37CF66B9D554DCC0BAEC9C20FF5E025D9F24B56D50BDAA88C006A9E92C0B19CC424ECEC7C3FC6566EB61D7124C6F953E36F9B0CDD751DFBC44D7A20CE7A57AAD
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:{"statusCode":404,"error":"Not Found","message":"Not Found"}
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text, with very long lines (565), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):565
                                                                                                                                                                                                                  Entropy (8bit):5.013395369899308
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:433CBAC690542626F503B4269A8DA12A
                                                                                                                                                                                                                  SHA1:3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
                                                                                                                                                                                                                  SHA-256:F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
                                                                                                                                                                                                                  SHA-512:569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://ct.pinterest.com/ct.html
                                                                                                                                                                                                                  Preview:<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (306)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):164302
                                                                                                                                                                                                                  Entropy (8bit):5.013524101463052
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:043C6BBE1E8E3505F8552BD328833224
                                                                                                                                                                                                                  SHA1:4BE3ACFAE9D997C0C212075C8F105D7AE9E2BE00
                                                                                                                                                                                                                  SHA-256:A368BC77123DAC82D00827E2882BB77FA7EDBB487E4E1118F03E337A4E5C658F
                                                                                                                                                                                                                  SHA-512:E3A2E2323DD8C702E221E3EAFE9A31B02A0695654EBE717689864360A0B032E1D11073BC9D3102C1D217C07C15A8EA298271562528A15FCCC32607D4E9578CE7
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://static-msql-prod.refinance.quickenloans.com/main.2901f6d1a91191c18d39.css
                                                                                                                                                                                                                  Preview:@import url(https://fonts.cdnfonts.com/css/stack-ssi);.@import url(https://fonts.googleapis.com/css2?family=Shadows+Into+Light+Two&display=swap);.@import url(https://fonts.googleapis.com/css?family=Montserrat:thin,extra-light,light,100,200,300,400,500,600,700,800);.@import url(https://fonts.googleapis.com/css2?family=Roboto+Slab:wght@100;200;300;400;500&display=swap);.@import url(https://fonts.googleapis.com/css2?family=Antic+Didone&display=swap);..questions__dropdown-container > .dropdown {. margin-bottom: 20px;.}..questions__dropdown-container {. margin-left: 15%;. max-width: calc(60% + 10px);. text-align: left;. z-index: 1;. position: relative;.}...questions__dropdown-container > .text-input-fieldset {. margin-inline-start: 0px;. margin-inline-end: 0px;. padding-block-start: 0em;. padding-inline-start: 0em;. padding-inline-end: 0em;. padding-block-end: 0em;. border: none;.}...questions__dropdown-container > .dropdown > .dropdown__select,..questions__dropdown-container >
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (3258)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):50707
                                                                                                                                                                                                                  Entropy (8bit):5.540075432184795
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:0C810D42A3A1046086712F6334E4C34B
                                                                                                                                                                                                                  SHA1:08844339CF9E9FF0C57E1384AE07CF049FB5F8AD
                                                                                                                                                                                                                  SHA-256:39534116E06AF8E76D223FD8D14511A23B1D53C51F50C92FAED79D263B83771B
                                                                                                                                                                                                                  SHA-512:0F80A58F5A7C7BC5EAE2B89124473C25453364FCCC109FA49E559520D99539D9FD556E81693977D3563D4C7AA73C5F5A17151C4844CCD8CB9D88A9A62A993A7C
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googleadservices.com/pagead/conversion.js
                                                                                                                                                                                                                  Preview:(function(){var l,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},ia={};function u(a,b,c){if(!c||null!=a){c=ia[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function v(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in r?f=r:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?da(r,d,{configurable:!0,writable:!0,value:b}):b!==c&
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):11840
                                                                                                                                                                                                                  Entropy (8bit):5.498181989566483
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:D5E8AC7898D22A8B4C36680A0E569E3F
                                                                                                                                                                                                                  SHA1:4D9864D2787EF955B1D0E513454CDB35B61CEEC3
                                                                                                                                                                                                                  SHA-256:8EB072483E96C9BAF13945A9EC7A1EE671D075BF6C073C18CEFBB09C31E3C7AB
                                                                                                                                                                                                                  SHA-512:9BDFDCA4215EFF697DF0E903CDC845B756F63C1DFB652D766C0EA22C6B13EF86C31535BF65DB00FDE8EE9DB6C606EBBE64FB8D97A2EF7A95BA3C135F49C57C51
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://fonts.googleapis.com/css2?family=Roboto+Slab:wght@100;200;300;400;500&display=swap
                                                                                                                                                                                                                  Preview:/* cyrillic-ext */.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/robotoslab/v33/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./* cyrillic */.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/robotoslab/v33/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./* greek-ext */.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/robotoslab/v33/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./* greek */.@font-face {. font-family: 'Roboto Slab';. font-style: normal;. font-weight: 100;. font-
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2952)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):183154
                                                                                                                                                                                                                  Entropy (8bit):5.538352056870488
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:FF0CC1788AEC5641BA2683B4BDE801AA
                                                                                                                                                                                                                  SHA1:8421A440F7302880855D801D7A514090E7324D83
                                                                                                                                                                                                                  SHA-256:D71D001F373D4586AC2F925A1B1BAA113F2290A63020B2392036F8512DF7D96B
                                                                                                                                                                                                                  SHA-512:804F6E68E74BBB7CF76C394EAD345E8C5F4AC1DA24A3D2A160E5ED2806F1181A587D62434A8D1B5643ACE2289180FF666EA278410CBD62466DCDD33DF21A8A01
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=DC-852807
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){return a.raw=a},da=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error(String
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):209225
                                                                                                                                                                                                                  Entropy (8bit):5.5543195245062424
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:CD6C7A0BB22779E6BB3C6BE34A77F7C3
                                                                                                                                                                                                                  SHA1:9384588565D4683B8D0F8A7135A18A0267811B63
                                                                                                                                                                                                                  SHA-256:9D2009511D8269A1104C89B97DB6DD119F9AFCD8DAAA50C43C32A61B4EDA355A
                                                                                                                                                                                                                  SHA-512:4BA4BEA7B78920766C4CC48BBFA2E3FBBB3E33B51B4673AC636569591858EA4F9384DDF80202FDCBA5CF41B20BA66E6E5E774D8E3CC076C3B1F5BF21751649DF
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-10866179376
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-10866179376","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regio
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:GIF image data, version 89a, 1 x 1
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):43
                                                                                                                                                                                                                  Entropy (8bit):2.7374910194847146
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:DF3E567D6F16D040326C7A0EA29A4F41
                                                                                                                                                                                                                  SHA1:EA7DF583983133B62712B5E73BFFBCD45CC53736
                                                                                                                                                                                                                  SHA-256:548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
                                                                                                                                                                                                                  SHA-512:B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.facebook.com/fr/b.php?p=1531105787105294&e=ZSQ_tQAAAL7erwOY&t=2592000&o=0
                                                                                                                                                                                                                  Preview:GIF89a.............!.......,...........D..;
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text, with very long lines (2319), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2319
                                                                                                                                                                                                                  Entropy (8bit):5.155835672860843
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:5CE420330A1150B64D4F04B6169BB9D4
                                                                                                                                                                                                                  SHA1:C268230DD962837161187710F65B38C5AB49984A
                                                                                                                                                                                                                  SHA-256:2843128D287DA3614565182DE89A84DEB0E43FD049BE6A4ED4D3A682BDD186C4
                                                                                                                                                                                                                  SHA-512:F3488666DE82EABAF871AE24CC7DE6D03ED5233CCCDBD59C86FED0F890267FBC11745FC0415147B105747E09A635052ECA4FEEF359AB23BDCC9D94CDD9F11234
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://api.pushnami.com/scripts/v1/hub
                                                                                                                                                                                                                  Preview:<!doctype html><html><head><title>Pushnami Hub</title></head><body><script type="text/javascript">!function(e){var t={};t.init=function(e){var r=!0;try{window.localStorage||(r=!1)}catch(n){r=!1}if(!r)try{return window.parent.postMessage("cross-storage:unavailable","*")}catch(n){return}t._permissions=e||[],t._installListener(),window.parent.postMessage("cross-storage:ready","*")},t._installListener=function(){var e=t._listener;window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onmessage",e)},t._listener=function(e){var r,n,o,i,s,a,l;if(r="null"===e.origin?"file://":e.origin,"cross-storage:poll"===e.data)return window.parent.postMessage("cross-storage:ready",e.origin);if("cross-storage:ready"!==e.data){try{o=JSON.parse(e.data)}catch(c){return}if(o&&"string"==typeof o.method&&(i=o.method.split("cross-storage:")[1])){if(t._permitted(r,i))try{a=t["_"+i](o.params)}catch(c){s=c.message}else s="Invalid permissions for "+i;l=JSON.stringify({id:o.id,error:s,resul
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, Unicode text, UTF-8 text, with very long lines (60361)
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):104921
                                                                                                                                                                                                                  Entropy (8bit):5.07829882238198
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:B0081D7E5164C0DC23A6DB072B958212
                                                                                                                                                                                                                  SHA1:3A9627F12B7528CE431EBA51C5A01BC11FC6B4AA
                                                                                                                                                                                                                  SHA-256:A3A2E42054C788C57DBDEC26ED58A85CCDAEDB5337BF1D5302B18692B080ABFB
                                                                                                                                                                                                                  SHA-512:14B357FC6BCD07B6011133179273F37C6384F3D04A3DAB8AC68B4B9420D59648735F1BF5061B1B8DBF5FAD3543F2F14AC965C8FF5448FACBA87A2DF68649C864
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:<!DOCTYPE html><html lang="en" data-reactroot=""><head>. <link rel="stylesheet" href="https://static-msql-prod.refinance.quickenloans.com/main.2901f6d1a91191c18d39.css" />. <meta name='viewport' content='width=device-width, initial-scale=1.0, maximum-scale=1.0'>. <title>Refinance Mortgage, Refinancing Rates, Mortgage Rates</title>. <meta name="description" content="If you haven't refinanced yet, it's not too late! There has never been a better time to refinance. Rates are at near historic lows, and we could help you land a low rate.">. <meta name="keywords" content="refinance, mortgage, mortgages, refinancing, mortgage rates, refinance mortgage, refinance rates, refinancing rates, refinancing home, home loan, home loans, equity loans, home equity loans, home equity loan, second mortgage, home equity loan rates, credit card consolidation, debt loans, credit card debt consolidation, bad credit loans, debt free, bad credit, debt help, debt solutions, mon
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):205212
                                                                                                                                                                                                                  Entropy (8bit):5.550964503398472
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:40D08262668BED078DDFD1928AFD609A
                                                                                                                                                                                                                  SHA1:ED48AF1A82C880CA7AA60FF59315623B9D3849B4
                                                                                                                                                                                                                  SHA-256:31AF1E3C87D3CE4DE1A768807FA31766A68FA1DE55467237E9554A6ADFE2FB1A
                                                                                                                                                                                                                  SHA-512:B1850C0B41536A38045C1D8765F359CD9A8E90D2C25A18662777A786FCAECCF55AB0B3B24FAD9797691239ACBFC64B2D363CCBD159F6893755D10CFAF3280172
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-10866176763
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-10866176763","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regio
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):209487
                                                                                                                                                                                                                  Entropy (8bit):5.554361294875718
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:FC20E9D1B34758F5736D88BFC096ADB3
                                                                                                                                                                                                                  SHA1:3DF48998AA37B820B4ADFB81390D52BC599E59F3
                                                                                                                                                                                                                  SHA-256:F608AADAC384932498DE8E09875D4C86F62C44DE580C5B5907DB368B5074ECC1
                                                                                                                                                                                                                  SHA-512:736DEB34DDBFDBA368125EA2FD17D087A2E8B986C9A0A574D68323CB489D127704F810DF60BB41D779A6E35DABCF4808A3EF18E150393784F8B26F594E9C3DB0
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-10910338944&l=dataLayer&cx=c
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-10910338944","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regio
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:GIF image data, version 89a, 1 x 1
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):43
                                                                                                                                                                                                                  Entropy (8bit):3.366634665454505
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:BFF56CE49DD485D195FDFA0A02342568
                                                                                                                                                                                                                  SHA1:74FB4071DEAB7D3AB083562067B735DF32C43397
                                                                                                                                                                                                                  SHA-256:0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
                                                                                                                                                                                                                  SHA-512:15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Mon%2C%2009%20Oct%202023%2017%3A56%3A11%20GMT&n=-2d&.yp=10182570&f=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&e=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&enc=UTF-8&yv=1.15.1&isIframe=1
                                                                                                                                                                                                                  Preview:GIF89a.............!.......,...........D..;
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2952)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):196781
                                                                                                                                                                                                                  Entropy (8bit):5.537995226068621
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:E7BD1BCB63221AE0599D90841567B388
                                                                                                                                                                                                                  SHA1:E4739F42A403FB19350D08001F7FA7E280D409A2
                                                                                                                                                                                                                  SHA-256:73798AE7A8B5BA9C02F10C7B0053B08D9DBE4FF62AA5B2C15127B69EB8A06BF7
                                                                                                                                                                                                                  SHA-512:AEEB467186354A7A4468287B182CF2AD13907A92FAE3E27FDBC7A5573BCA7D7665EC669EAD14F9EB7C8763D6B72DAED0C300669F680BD0DB75E9285839311274
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-966730890
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){return a.raw=a},da=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error(String
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):5540
                                                                                                                                                                                                                  Entropy (8bit):5.071267598964481
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:38756BE57FBD8EFB513EE50F9D7F2C66
                                                                                                                                                                                                                  SHA1:8ED46F150688733EED1A2987AF89103D42524B97
                                                                                                                                                                                                                  SHA-256:BC84BB638D92AE87DABB44CE4EBE0A2AF3FB357F19BF91A4EB6C3DFA1CE06ED7
                                                                                                                                                                                                                  SHA-512:BE20421D42A0BDF0D1A4EC2D1B288CBF7579BE20151FC8D033F69D414B1E5964CFC83E540973AE4687FDF9C9AF92392FFFAFBD82DCC275EB9D17A99A24240622
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://pixel.mathtag.com/event/js?mt_id=1541200&mt_adid=245296&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=
                                                                                                                                                                                                                  Preview:(function() {.try {. try {. if (typeof MtVoid === 'undefined') {..var MtVoid = {. loc_data : {},. scr_data : {. "mt_exem":"",. "s1":"",. "mt_id":"1541200",. "mt_gfp":"mt_fp_mt_aid",. "v1":"",. "mt_adid":"245296",. "mt_excl":"",. "v2":"",. "mt_pqc":"mt_aid",. "s3":"",. "v3":"",. "mt_fpa":"1",. "s2":"".},. acq_data : {},. get: function(obj_name, var_name) {...return this[obj_name][var_name];.. },. set: function(obj_name, var_name, value) {...this[obj_name][var_name] = value;...return value;.. },.. parse_qry: function(qs, destination) {...qs.replace(/[?&]([^=]+)=([^&]*)/g, function(all, key, value) {... destination[key]= value;...});. },.. makeqs : function() {...var qs = "";...var keys = [].concat.call(arguments);...if (keys.length < 2) {... keys = Object.keys(this.acq_data);...}...var pairs = [];...var self = this;...keys.forEach(function(key) {... pairs.push(key+'='
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:gzip compressed data, from Unix, original size modulo 2^32 23777
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):7409
                                                                                                                                                                                                                  Entropy (8bit):7.9724629571861945
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:4A205643A240CB95FA82289D62B5AF7E
                                                                                                                                                                                                                  SHA1:DDD2052DD14B028A6F438F3756F3BFC274C86330
                                                                                                                                                                                                                  SHA-256:E1BA5F1A4F9AD17BA3244445649A912C2960253EC9C52A27734B33BDED8F56E6
                                                                                                                                                                                                                  SHA-512:FFB18D1B8BB9FC8BCD280E81962AA7C4CAD2A5621CC6872AE949E8A40524C50634B49DD6EEC5DA652010CC4C11A15FE1DFA5EBF9DBF29C43AAD1F69AF2D8C914
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.redditstatic.com/ads/pixel.js
                                                                                                                                                                                                                  Preview:...........;.s....q.....`B2..w....m.....J..c7.....$...............U..nI.VKj..vv&..K.(..:%!I..........D....oQ.zp..h.Ts..iI.I%._WAL.U.h.I...1MWqX..N.@.J.V..\]'...^.G..u.0...$...".WsZ..V.j.?4......^.SG......W.....eW#...-...y..Q.&..f..5..G.......("W....,...5..G.ull...b.U...8.Dn&...`.#j".So.'.9..4...Z...u..l.g...#.^....&...L\/...v.t.$..d<8u'~Z..?..l.......*.)....1uS.\..I...=e..A.........O..Gu.....8J#.9@C....)Q..j>...F7H.y..x..;......M..`&k...4..\....O..4._....u/I.UAf..o}.......cx.GK..O...A...*24...8....vU.H..%+`...\..t...........(..`C0. uG.b.C.a...G.....g.XU..Sd"..!H..!L{9h...-....KwAa.B.7..V.....T......F.u.Z...8...djJ../.A...QX.P^........m6.s...8v....}.cI.\T.#..]........~..~...a@I...#..d.n.." m.\[>%.1.f.R...3..0.F.L......[..-...R}.......L|F.a.d .PX.....q..'...........!.ODd....BX7E...x.......4..?5w.....V..;u..'^;......$.2..yB+(.Vq...../.k.n(5RsT.L.....r`({U.pE....Nv..U..8n...o.....7.%..w...k..9.G...i....;...7.k.3...9.,......u......h....N...{.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (19978), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):19978
                                                                                                                                                                                                                  Entropy (8bit):5.254652254361427
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:EFEB2542712DCE8A2C51CF68396E4A05
                                                                                                                                                                                                                  SHA1:AC9CE350C598644C7B7F6186AAF0368EB077D396
                                                                                                                                                                                                                  SHA-256:C235F21017BCC11FCAA31D7DFD9855AAEBCBF5F6D7EE9BF9F2E98A910907C391
                                                                                                                                                                                                                  SHA-512:6E382750A5F86B3BB774B4D5B627BDBBA4CAAA0C76F510707E3DD05D8B7910A7D633FF613D2008FF8A9C5793400A3C00A3C52D4DE59E7F1E99AB93C770C9BB4E
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854
                                                                                                                                                                                                                  Preview:!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n||0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)||"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n||0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e||{}).random||(e.rng||r)();if(
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):167
                                                                                                                                                                                                                  Entropy (8bit):5.141536560449306
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:3A16730FFB8953021CFD47BE5AC003B4
                                                                                                                                                                                                                  SHA1:27EEF13B0712AE2078985B8CDF8D1A20BE115B0A
                                                                                                                                                                                                                  SHA-256:40E22FC9A0AB914B1332FCAF6C29B04183795410EDBD64F749BAF6411FD28701
                                                                                                                                                                                                                  SHA-512:C615B8C130F04998B4EA314FA2E5722E7E273E0C505A77D25BB1CFF54B9B529E00AF4C4F369EA56E7E3C068087C61A92010F62D9AE839C64D625CBDC453332D7
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://tr.snapchat.com/config/com/409e6a74-8d7f-465e-87b0-cc6eb99f3a76.js?v=3.4.10-2310061912
                                                                                                                                                                                                                  Preview:!function(){"use strict";try{window.snaptr.cfg('409e6a74-8d7f-465e-87b0-cc6eb99f3a76',{"asc":[],"a":[],"ipg":"1","b":[],"t":"","v":"3.4.10-2310061912"})}catch(e){}}();
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (58661)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):115284
                                                                                                                                                                                                                  Entropy (8bit):5.419203846657862
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:A539B28A5A0DDC3488011E7E55C23533
                                                                                                                                                                                                                  SHA1:7AAD8526B864812240E6B05BA75D9DDA8AD78CEF
                                                                                                                                                                                                                  SHA-256:C4C9DFDC13A949C37C49D41CE484E5E72FE163A433CC86830A5DB199A587F73B
                                                                                                                                                                                                                  SHA-512:A6D0447A6675EDEBEB4D8D0F520178209E7FD2BC11D143005457F4ACFD4FDB4DA831E2B6B6C3E92EC2D9FCADB1B1BF43AFF0887516C11628A8CA687EB94B2438
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://connect.facebook.net/signals/config/1736491679707345?v=2.9.132&r=stable&domain=refinance.quickenloans.com
                                                                                                                                                                                                                  Preview:/**.* Copyright (c) 2017-present, Facebook, Inc. All rights reserved..*.* You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook..*.* As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software..*.* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):204955
                                                                                                                                                                                                                  Entropy (8bit):5.550487200009464
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:02C9E92077B8B98401AF2A772B3A8EA5
                                                                                                                                                                                                                  SHA1:0E2E12925610AA04F8335C91EFD99444F928DD66
                                                                                                                                                                                                                  SHA-256:33F298A082072AD2480FB2584C4A174759CB9E794D98229B7E85CB5C366DCE83
                                                                                                                                                                                                                  SHA-512:B5144890DCD273B55A58071B0FD7ADB7490107FDD07BDD4F03B7EFFFD48F99351679497A708B265F93740ABF3CD66A615505C4F30DB315A91CAA8910DA82E370
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-813495030
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-813495030","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionV
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (22341)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):22434
                                                                                                                                                                                                                  Entropy (8bit):5.218836297154487
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:769D09C7299A6028D88D7EA29AF7CF5A
                                                                                                                                                                                                                  SHA1:10FB3585259F1DA71D1AFDF814B87DED718CBC50
                                                                                                                                                                                                                  SHA-256:56BF11E572A300366CBE062F74C51F0D7A94AAA8F27E56CA0A880CE43183DE01
                                                                                                                                                                                                                  SHA-512:7922F71C39856A4BE2D6AD19495236BB83B1AF02E4C900DA690665F1B0A698F58240D7C2CBE622FF0A9172C8705F969D395F249F3A49A3753A4814E3B2E9896A
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://cs-cdn.deviceatlas.com/dacs.js
                                                                                                                                                                                                                  Preview:/*. * Copyright 2023 DeviceAtlas Limited. All rights reserved.. * http://deviceatlas.com. */.var DeviceAtlas=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)||Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.ca
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 31740, version 0.0
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):31740
                                                                                                                                                                                                                  Entropy (8bit):7.992265636107872
                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:A7F15D99D4FB96AA889F0426DEB51238
                                                                                                                                                                                                                  SHA1:DD1927B2322B88E9F024EE69A5A02E9EB151EFDE
                                                                                                                                                                                                                  SHA-256:0A41695DA386AB1E9F821482EFF2188EBF85D7BE90448B7A3CED635C0D1E04AC
                                                                                                                                                                                                                  SHA-512:677D3D949FEB62051AE05141B8A07FA33D8630CDA7CD9D9E815582E53A5447F089DFBBB815F894B182DAE50C01B6FD63AD0586F4CAC03163D5D6409DFF824121
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.rockomni.com/mcds/assets/GlobalContent/NonStockImages/Fonts/RocketSans-Bold.woff2
                                                                                                                                                                                                                  Preview:wOF2......{...........{..............................r..<.`..`........n.....`..C.6.$..\..z.. .... ..D.......N...U..."5......cBp......~.............*0v7.:....yX......."..1bFLZ..H..iD).w.T<I....t..{.`...tQ...X....9.s.....x...?....n....u..:M59.n.R3?S..qi..5e..N....`.0.t...s.....e9@*..#.,.A.a......(8Z..x.vO.....WQ.)...N|L.....Of...d.....b...dQ..[e[O$.X..^.NsW..v...J....r:...qg..+M...u...A3...~.=..!FS6.&)..5...{.$R0c........l.6...}.*..w.... 7m........p,a.;.1d..L..g.....M.....c.4........Kj......5A..K.....Z.7.g...?s......}....^.;^.3B).3..=|g.$Y.,.e...7dz...;.%{y...!.<.q......4>.>....y.x.9..n..P.....CE..GE$...}Q.w.n...m...Z..X._...6U...cfH..q.Uuk.N.@U.@.A.$.UF. .MK....# .X..h.y.v..(.$s....b.e.B..........h..S.~v.E#........]....!....!.!./...(.E.,...Cj......... AiIEp#.G.9Wt....E..M..U.:.R.l.4...2..*aV>......b....T..|~...E..T.82.}..7..!xf7...p...-.......=..}l.&g.>$..........J1...,Atr....G<...y.... v.H*..W..b-A:V..t..!W..V7....+t58W.j.:W.\.kD..5.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):411
                                                                                                                                                                                                                  Entropy (8bit):5.014966433599147
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:931166239000268F955364B455832B12
                                                                                                                                                                                                                  SHA1:E67156337F599F93B85268AB7C9CFD4BE7D45780
                                                                                                                                                                                                                  SHA-256:FA89CFB6CF180FD9E63925109FEA0D3671BAD72769E2CE4296F6EBC241BAE929
                                                                                                                                                                                                                  SHA-512:E70FC2BDE85D097B5B80B4AE933F7C61A2FE0591B44F608C84CC794A4C463C415317CCA2BFFA51BF225FC88AD372E67038CEE81AB9EC2CBDECE6EAFF1CBC2D5B
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://trackpixel.refinance.quickenloans.com/msql-lre/pixel.js
                                                                                                                                                                                                                  Preview:(function(){. if (document.getElementById('pixel-bundle')) {. return false;. }. var src = '';. var s = document.getElementsByTagName('script');. for(var i = 0;i < s.length; i++) {. if (s[i].src.match('pixel.js')) {. src = s[i].src + '';. break;. }. }. document.write('<script id="pixel-bundle" src="' + src.replace('pixel.js', 'pixel-13a69dbd205c0925b826.js') + '"></script>');.})();.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (32756)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):263677
                                                                                                                                                                                                                  Entropy (8bit):5.313085895784709
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:B31A1F9E9F88D2133E2B3A9ABEEDDCD7
                                                                                                                                                                                                                  SHA1:30ED1497C1F6F56ABE727DCF711608F427BC836F
                                                                                                                                                                                                                  SHA-256:AFEDDE1315A1103168065FF8A76BEF2F117CFAD411B3D19B80DDF2C29272D5B7
                                                                                                                                                                                                                  SHA-512:7F32FA2AEE7596A3655D7CB21657DCED672D46F043DEFC9DF033B0F10B6BD71B47A9F63F98AA3E3D71EB82B1B7A39F208BFCBE05CB85C251B60669BE2DDB0806
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://assets.adobedtm.com/b14636b10888/a3ec7ef1f366/launch-099982a746cc.min.js
                                                                                                                                                                                                                  Preview:// For license information, see `https://assets.adobedtm.com/b14636b10888/a3ec7ef1f366/launch-099982a746cc.js`..window._satellite=window._satellite||{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2023-10-02T19:55:02Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"EN9c7e63e0cfb24ee296af1d83b21b56a1",stage:"production"},dataElements:{"CDM_LINK_CLICK.XDM":{modulePath:"adobe-alloy/dist/lib/dataElements/xdmObject/index.js",settings:{data:{web:{webInteraction:{name:"%metadata.custom_link_click%",type:"other",linkClicks:{value:1}}},producedBy:"user",_experience:{analytics:{event1to100:{event16:{value:1}},customDimensions:{eVars:{eVar14:"%url%",eVar16:"%metadata.custom_link_click%",eVar30:"%metadata.page_name%"},props:{prop18:"%url%",prop19:"core digital media",prop20:"%metadata.custom_link_click%",prop22:"%pathname%"}}}},_quickenloansinc:{customLinkName:"%metadata.custom_link_click%"}},sandbox:{name:"prod"}}},ECID:{modulePath:"adobe-mcid/
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (39499)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):39525
                                                                                                                                                                                                                  Entropy (8bit):5.491007500121929
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:CDF116444DC1EB545D5AA9BF35BB5B82
                                                                                                                                                                                                                  SHA1:0697A9A53DB91E0E0E2B7324FBCAC3169EF49881
                                                                                                                                                                                                                  SHA-256:320C9EAB98D659EEA8674DB00ABEAE224CAED94E532D7B758A32A5097D8F2821
                                                                                                                                                                                                                  SHA-512:8027C80DFDE2AA592D0F93396EEA8D49EC46C568DD15A1CED488BEFB33FA89616A649EA4ECA62275509E278C105605AB22FDC1E75B63165FA3A3E4B3F6F67183
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://sc-static.net/scevent.min.js
                                                                                                                                                                                                                  Preview:/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign||function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r||(r=Promise))((function(i,a){function o(t){try{u(e.next(t))}catch(t){a(t)}}function c(t){try{u(e.throw(t))}catch(t){a(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(o,c)}u((e=e.apply(t,n||[])).next())}))}function r(t,n){var r,e,i,a,o={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return a={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(a[Symbol.iterator]=function(){return this}),a;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;a&&(a=0,c[0]&&(o=0)),o;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw||((i=e.return)&&i.call(e),0):e.nex
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):46
                                                                                                                                                                                                                  Entropy (8bit):4.604764945046351
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:F31ACA15AE5B24F87583E3DE167C9828
                                                                                                                                                                                                                  SHA1:1B4C9676261882C21DFE20A575B72F1B1056DC29
                                                                                                                                                                                                                  SHA-256:D2D82C5822B8884CFC04854300EFA606C998504AA9DA2AD681422E7F3EEEC321
                                                                                                                                                                                                                  SHA-512:44E7EEDBD3113EF1343255B4E4480075A350AB15517503715E5BA8359DBC5CE38A160353806AF10905A866784B20F45BD14AE82C3FF2675FF0378A52A42F3C62
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:{"pixelId":10182570,"use1stPartyCookies":true}
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:GIF image data, version 89a, 1 x 1
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):42
                                                                                                                                                                                                                  Entropy (8bit):2.9881439641616536
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:D89746888DA2D9510B64A9F031EAECD5
                                                                                                                                                                                                                  SHA1:D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
                                                                                                                                                                                                                  SHA-256:EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
                                                                                                                                                                                                                  SHA-512:D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:GIF89a.............!.......,...........D.;
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):205409
                                                                                                                                                                                                                  Entropy (8bit):5.551161473870439
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:7CED85F4E419538C95DC650FD1ED7B5F
                                                                                                                                                                                                                  SHA1:10EDA86E71778A8BBBB934EBD12DB48348648A61
                                                                                                                                                                                                                  SHA-256:8401EB31CF771F3227CBEEDD7684334AE34EFDBC26C042F9F7517366375E01CA
                                                                                                                                                                                                                  SHA-512:6775284D56377A0788BD2CEE56AD1C2846C3A12DE0EE5ACF9D77404B23AF4359622986B98FF628F11DD4B7340C0046B4B2F486ED900B9DAFC0AAA9110500B5B0
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-865435318
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-865435318","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionV
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (65536), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):117677
                                                                                                                                                                                                                  Entropy (8bit):5.383075568356783
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:647FDA9A4D3D74344732D76CF1FFF47C
                                                                                                                                                                                                                  SHA1:01720D421CE3373F1A1958A1D85EDFAE5AB5F442
                                                                                                                                                                                                                  SHA-256:4375EBB4771E6DBB66555214B78781F96A3F6FC43F26B6E9ACC4A4751551706B
                                                                                                                                                                                                                  SHA-512:7A3C35CB75C6387A8C4F4359287CDAD42C5722B7C1362C8189F8EF3D36F1F7642453CA830BF7B315F79947B384034D216E165B5B8B4F79A7596DB760CEB86CAD
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.datadoghq-browser-agent.com/datadog-rum-v3.js
                                                                                                                                                                                                                  Preview:!function(){"use strict";var t=function(){return(t=Object.assign||function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var i in e=arguments[n])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};function e(t,e){var n,r,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:s(0),throw:s(1),return:s(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function s(o){return function(s){return function(o){if(n)throw new TypeError("Generator is already executing.");for(;a;)try{if(n=1,r&&(i=2&o[0]?r.return:o[0]?r.throw||((i=r.return)&&i.call(r),0):r.next)&&!(i=i.call(r,o[1])).done)return i;switch(r=0,i&&(o=[2&o[0],i.value]),o[0]){case 0:case 1:i=o;break;case 4:return a.label++,{value:o[1],done:!1};case 5:a.label++,r=o[1],o=[0];continue;case 7:o=a.ops.pop(),a.trys.pop();continue;default:if(!(i=a.trys,(i=i.length>0&&i[i.length-1])||6!==o[0]&&2!==o[0])){a=0;continue}if(3===o[0]&&(!i||o[1]>i
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, Unicode text, UTF-8 text, with very long lines (60361)
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):104921
                                                                                                                                                                                                                  Entropy (8bit):5.078317882322358
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:A34E2221F248FF59E99D7388FCF30D45
                                                                                                                                                                                                                  SHA1:5B18BB88937C64F3D76A131D1061AF804EAEC610
                                                                                                                                                                                                                  SHA-256:BF15813ED508369A844497CC316446E3C6A516B976C5CB912A4DFBEDD1C6A9D1
                                                                                                                                                                                                                  SHA-512:09AE0649537B921ED1E5BEC4643B13BE1C93DBE614DF378B41BB3F59AE3D66B1FA3352A9FD5A1EA4805C5018639CCEFD979A9344692CE9E0B762C528966636F7
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:<!DOCTYPE html><html lang="en" data-reactroot=""><head>. <link rel="stylesheet" href="https://static-msql-prod.refinance.quickenloans.com/main.2901f6d1a91191c18d39.css" />. <meta name='viewport' content='width=device-width, initial-scale=1.0, maximum-scale=1.0'>. <title>Refinance Mortgage, Refinancing Rates, Mortgage Rates</title>. <meta name="description" content="If you haven't refinanced yet, it's not too late! There has never been a better time to refinance. Rates are at near historic lows, and we could help you land a low rate.">. <meta name="keywords" content="refinance, mortgage, mortgages, refinancing, mortgage rates, refinance mortgage, refinance rates, refinancing rates, refinancing home, home loan, home loans, equity loans, home equity loans, home equity loan, second mortgage, home equity loan rates, credit card consolidation, debt loans, credit card debt consolidation, bad credit loans, debt free, bad credit, debt help, debt solutions, mon
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):170
                                                                                                                                                                                                                  Entropy (8bit):5.335916817166796
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:E7673C60AF825466F83D46DA72CA1635
                                                                                                                                                                                                                  SHA1:FC0FCBEE0835709BA2D28798A612BFD687903FB5
                                                                                                                                                                                                                  SHA-256:0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
                                                                                                                                                                                                                  SHA-512:F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text, with very long lines (65452)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):187318
                                                                                                                                                                                                                  Entropy (8bit):5.656215475104569
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:B11770E6988D7D8C58EEEBA700BDA0D0
                                                                                                                                                                                                                  SHA1:8FE1022FA8331CA371B2AFEF94BD1BE7EE199799
                                                                                                                                                                                                                  SHA-256:46E4D8CB7933958EEE88B643B3AA94AEF62508B7BD214AEC59390E02C59D771A
                                                                                                                                                                                                                  SHA-512:98C8F338C07EB75D5BB55FB20D37950321B55CD6AE4446C63798DD15F34AA5D090C6CD392840D84FEBEFFAEB655783FAD71FA4EA1A57A5917A060EABABD2D1FB
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://trackpixel.refinance.quickenloans.com/msql-lre/pixel-13a69dbd205c0925b826.js
                                                                                                                                                                                                                  Preview:/*! For license information please see pixel-13a69dbd205c0925b826.js.LICENSE.txt */.(()=>{var e={984:e=>{"use strict";e.exports=function(){var e=document.createElement("div");e.style.display="none",e.className="pixels",e.id="pixels";var t=document.createElement("iframe");t.src="about:blank",t.id="pixels-iframe",t.className="pixels-iframe",t.style.display="none",t.width="0",t.height="0";var n=new Event("pixelFrameLoaded");window.addEventListener("load",(function(){document.body.appendChild(e),document.body.appendChild(t),t.contentDocument.write("<html>"),t.contentDocument.write("<head>"),t.contentDocument.write("<script>function addPixelHTML(html) { document.body.innerHTML += html; }<\/script>"),t.contentDocument.write("</head>"),t.contentDocument.write("<body>"),t.contentDocument.write("</body>"),t.contentDocument.write("</html>"),t.contentDocument.close(),window.dispatchEvent(n)}));var i=document.createElement("iframe");return i.src="https://www.lowermybills.com/lending-images/pixels/
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (533)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):89510
                                                                                                                                                                                                                  Entropy (8bit):4.1036674458063755
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:A3689F58ABF75D9827B3E7B37487E831
                                                                                                                                                                                                                  SHA1:F80F748C4F0261E2E8D3DA13D28C844066F41EE7
                                                                                                                                                                                                                  SHA-256:6596EA36BF758C2F1D6DD8D40249AB6DAE02D46A4AA02C393D65ACB0FAB0866F
                                                                                                                                                                                                                  SHA-512:2506D16816738B914A09A1D71663534DF45DBF1F939FBA1640CD7CF692A7B4F3EAAA8028EAF30B25F36805BE762A915EF9727D72074A691828CE72D146680C65
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://api.pushnami.com/scripts/v1/push/623bac6703b37600138f67a3
                                                                                                                                                                                                                  Preview://.// The empty line above is critical for templating main.beta in the current implementation.// Start Test Mode Detection ;..// .var isRollbar = undefined;.// add rollbar .var pushWrap = {. wrapObj: function (service) {. for (var fn in service){. if (service.hasOwnProperty(fn) && typeof(service[fn]) === 'function') pushWrap.safeWrap(service, fn);. }. },. safeWrap: function(service, fn) {. var pushFn = service[fn];. service[fn] = function (a, b, c, d, e, f, g, h, i, j, k, l) {. try { return pushFn.call(service, a, b, c, d, e, f, g, h, i, j, k, l); }. catch (err) {. pushWrap.report(err);. }. };. },. report: function(err){. var opts = {. event: 'webpush-error-generic',. scope: 'Website',. scopeId: "623bac6703b37600138f67a2",. l: encodeURIComponent(location.href),. e: JSON.stringify(err, Object.getOwnPropertyNames(err)).
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):46
                                                                                                                                                                                                                  Entropy (8bit):4.751610325528165
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:06F475EB4937A3EBFCF7D531D3DA51BE
                                                                                                                                                                                                                  SHA1:687289205FD663F18B5293CB5CA997035197120C
                                                                                                                                                                                                                  SHA-256:E565912CDF04A96FB2B8C69314A7A8D64D6CFD1225621A2215600BF80C46CA46
                                                                                                                                                                                                                  SHA-512:801D51E244DD701F6008CA9A7CC25FF6127DB953D8787B97F2CE87FCE053EBF0688C593A6E76D42F3A54441594B5FEE8A5F3807E5F4B21DE62A11C2B09DD1277
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://pix.revjet.com/track/pd2259?__noscript=false&__cbf=revjet.callbacks.cb1696874167065&location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&referrer=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&creditProfile=&firstMortgageBalance=&firstMortgageInterestRate=&hasFHALoan=&homeValue=&loanToValue=&propertyCity=&propertyDescription=&propertyState=&propertyZipCode=&rateType=FIXED&typeOfLoan=&loanRefiPurpose=
                                                                                                                                                                                                                  Preview:revjet.callbacks.cb1696874167065({"tags":[]});
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):33092
                                                                                                                                                                                                                  Entropy (8bit):7.993894754675653
                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:057478083C1D55EA0C2182B24F6DD72F
                                                                                                                                                                                                                  SHA1:CAF557CD276A76992084EFC4C8857B66791A6B7F
                                                                                                                                                                                                                  SHA-256:BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
                                                                                                                                                                                                                  SHA-512:98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
                                                                                                                                                                                                                  Preview:wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..r*uM....[.**....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..|..%nEE.....+.x..7|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m*..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):46
                                                                                                                                                                                                                  Entropy (8bit):4.691721466785481
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:9D23D9839270FBCB12934FF48B94545F
                                                                                                                                                                                                                  SHA1:473D89C1CE71AFFCFDC5688DB02DEB69C8005653
                                                                                                                                                                                                                  SHA-256:777E78E9CA73CF80D0E0338EBE952B4DB982ED900227755F83B7E4383977B37F
                                                                                                                                                                                                                  SHA-512:9176616A2706CD28E5F92FD5D4B3F55BF777FF60F2A28EB96CC46ED5999EA0BAE351B9B17AEA8ECCA806632EE4488ED6AE99BC22BB8B82864534F95D3A2A2945
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://pix.revjet.com/track/pd3876?__noscript=false&__cbf=revjet.callbacks.cb1696874167067&location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&referrer=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&creditProfile=&firstMortgageBalance=&firstMortgageInterestRate=&hasFHALoan=&homeValue=&loanToValue=&propertyCity=&propertyDescription=&propertyState=&propertyZipCode=&rateType=FIXED&typeOfLoan=&loanRefiPurpose=
                                                                                                                                                                                                                  Preview:revjet.callbacks.cb1696874167067({"tags":[]});
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):128
                                                                                                                                                                                                                  Entropy (8bit):4.8280860194019155
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:D06D40E8B1FDE7BB11EB3609EB4E708D
                                                                                                                                                                                                                  SHA1:7D4923F8B6358C29A36123D65D672B9224C5D84A
                                                                                                                                                                                                                  SHA-256:BF94DB5C7D218F9A2A2EDFFF6C01BF65F5946A32000CD41835FEE5B564EFA62F
                                                                                                                                                                                                                  SHA-512:5065931218CE18DED3A022BD14E8208247F6D0900FFF3B41901F9DBA45DC417D84E386549E64446F390073431ED23A83D9F4C018DA389D2E43F59C26FEBFC0DE
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://pixel.everesttech.net/1x1
                                                                                                                                                                                                                  Preview:.PNG........IHDR....................bKGD..............pHYs...........~.....tIME......)........IDATx.c````........E@....IEND.B`.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 114672
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):31409
                                                                                                                                                                                                                  Entropy (8bit):7.990593558983198
                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:60FE166092712D93CC87039640675EF6
                                                                                                                                                                                                                  SHA1:D6FECA303438C5B9C717371E5492100FDF407EE4
                                                                                                                                                                                                                  SHA-256:15982E98201BB48C59CE28BA7E5C2EAC42BD8C76F20AD4924BADDE014F2A4892
                                                                                                                                                                                                                  SHA-512:E150F992F6C597398696D7C13A92262D712F5558386F51F5B9B8C1467B3B091F6C717F06C31BA5FAD86C3485B7B4A9DC0755871EECE9F13EF3987941BD84DC48
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js
                                                                                                                                                                                                                  Preview:...........{...u'.U....p.@..&.CQ.E.IjHJ.u..U..n..P.W.....Z...8.d.n^.,.q..I..I...r.5..O}..-;..p..<.N..t7E....F.y..>.y^..../.N.A......I......O....w+..O..:p##....'G...........a...k9b.4...@/...4_.%.(<,.~....Q.F%...ab.z......K.Z.f^2... ...y..+ol^........~..+..fQ.P...0Jb.d6.....vu..~)..,Ku...J.../koo..G.XyfEVV....f.4..2g.....:.......`/.....rX..jy].2+...V...XQ.......$.:.7....h.'......q'|X..1;.....x..^.../.7d.Y..~\:.uo<.X.S..e+x.........0....s.&......u.:e..]P=....sQ-a..&x....c"..9.....Q..>..?...d..@.Y.?^_.......s.W..U.OXt.=L..G.R..:..^.'oz...;.4.a.'..G-..:3...U..g.M^z.9'C..N..a..W./U7I...F*M....gQI...X.s...?Vh.....Yu..+n....Ppl}P.YBC.W..G8.K....~x../.n..5k.....I.t.l=..x.B?....O.....;...... .j0..... c\M...7Ja.Da...i.;.K.....q.....#.F.C...0E..Dn.....:.....a8..Y.T.Xr.g....a.L&.Co...a.N&\....`.3....0+...].|..".Z8C[..au....IrtW.`...R.x-...@&F......r.)M.%?.[A}.pY..P...Wt.....6:..*..B.....hy.I..z>...pm.2.P../Y.....W.......3.... ....p2%.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 21717
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):6676
                                                                                                                                                                                                                  Entropy (8bit):7.96543078542711
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:BEFEC09EB386FC68A0869C8D1B529DD6
                                                                                                                                                                                                                  SHA1:7136DD61D9C2ACE8035D7DF7B523EB17A896B13F
                                                                                                                                                                                                                  SHA-256:8D414F75A3E334E7487510749FCF1263D6973AC99B2D43E5E69C0BD8C0AE8F6A
                                                                                                                                                                                                                  SHA-512:5319C9562158C4595546E9C9A662DE347BFCCDFDEF0A70B1489201BA412D6F1FD2EECC14CE9B2CB6C59E9D906CF76A91D4C2EFBA032A19E541B042EA8AF8D0F9
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js
                                                                                                                                                                                                                  Preview:...........\.r.F..?OAaj.`.H.,.FilY.h.R...V.........M...'...H..{N.. .IN2U.U.JY@....|......{k...........$.....M...Z.'..>'E..i..x.S>.....V.nW?.......bQ....n..,.LY.....>.sz.9+.^..i..\t&,O;3..2.........4............o/....#t.b\r.._..e.\.........,.Y.....{..J|.vpsMo..i.".T.r.(..q&S.....:.K.Ch....E...NL.......Y..Y.._...j.D..,.EI;.(.Xx....t,........B<..x.....T...Y...V................................|.....1........W..49...'{.G.....^..=8.......^....$..{7+.\..g6.0%T.Kj.2 .{-....K.b..kv3.C./f.HF.0.....5 9.K>aw.U..'.$..`.n......]..f.R....@.`..j......<....,.{%L.A.*.Kr..."o...v......Q...RE..+..fY............7N.?>.F<.....^...p....c....A.R..`(.!....rJ.[o<eY....8;.C\.jV....5.?&.h..)M?...K)b../..#...n....0.'....SV.SI..M...V.D..(...*.....$.a.K.*..E.d.z.n...3..B.d+..'p<.>.,...x.xB..p8..6.#..H7N...^SR+.....'...z.J-...o.".~...BC....T.Qf.A...p....f./._...uEI.)vf..d>...|.e...[.jO.H...! .......L.........O..2...F.A..x..H.).#QP%P.|.0..M}Z..B...)0.^...TD.B.....jbj.[.A .
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):672
                                                                                                                                                                                                                  Entropy (8bit):4.88738061447812
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:67B95267FEC9BF5EE45786BEF9D2B01A
                                                                                                                                                                                                                  SHA1:346659BA1E68F661B9A0D897D15B9B38A3C1331D
                                                                                                                                                                                                                  SHA-256:6501140033C3BB20DA4B5AC73C90F687BA8A2053C4BA37C4B6F5275166DB7FA6
                                                                                                                                                                                                                  SHA-512:F5BECF4F2345D6E382665F700AFB5558AAA3CFD6B7A1336FA0592C303607AAD95FD724E8A3C5D52BB5FD37A8CB60AF31D20582C7B3FC5FEBC8BF9BB0F93A9C3E
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://tr.snapchat.com/cm/i?pid=409e6a74-8d7f-465e-87b0-cc6eb99f3a76&u_scsid=69d3e808-b7cb-400e-a94b-e37f3f82c37c&u_sclid=9d4bf7f8-1726-4ce4-8ae2-dd0c5e6decd4
                                                                                                                                                                                                                  Preview:<!DOCTYPE html>.<html>.<head>. <script>. (function(win, doc, sdk_url){. if(win.snaptr) return;. var tr=win.snaptr=function(){. tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments);. };. tr.queue = [];. var s='script';. var new_script_section=doc.createElement(s);. new_script_section.async=!0;. new_script_section.src=sdk_url;. var insert_pos=doc.getElementsByTagName(s)[0];. insert_pos.parentNode.insertBefore(new_script_section, insert_pos);. })(window, document, 'https://sc-static.net/scevent.min.js');. snaptr('cm', { 'sync_modes': [140] });. </script>.</head>.</html>.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):90
                                                                                                                                                                                                                  Entropy (8bit):4.689953203558289
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:CBB7F5466A3E8CAF2CC59CEFD0CBA39C
                                                                                                                                                                                                                  SHA1:F6D646A422FB5893955B25202E50815C6D245A93
                                                                                                                                                                                                                  SHA-256:C81F00CD6853B0EF2D7FF6E4837ADA4D5501711FEC1827939E2B701F73FA5B8E
                                                                                                                                                                                                                  SHA-512:EB0F4F051F1686CA092611B4D59B0A5F5BE0557F90DE56021979548A191764B3DA139F6163803B3C6B35D0AC47B2AA7F0CDD077B6457C6FFF95F6B7AB6BEA726
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://refinance.quickenloans.com/service-worker.js
                                                                                                                                                                                                                  Preview:importScripts("https://api.pushnami.com/scripts/v2/pushnami-sw/623bac6703b37600138f67a3");
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):205304
                                                                                                                                                                                                                  Entropy (8bit):5.551153649545771
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:A553CB69AF6F604507295CB3E9FFCD56
                                                                                                                                                                                                                  SHA1:DC35A3E2B0C98908CC7A8C95402EE5E292DB855D
                                                                                                                                                                                                                  SHA-256:BE75745401212F855EAE6B289B593B471EC7BD3271552AAAF40E9259B995F7F6
                                                                                                                                                                                                                  SHA-512:95BD852228A35D53809C412C2496B5B2EBE0BC06BE72B459A61B545491C18C61A77C10104A537DAE766FF0FB02317638CA27331938E0D1741095FEF092F6D798
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-755089552
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-755089552","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionV
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (922)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):8444
                                                                                                                                                                                                                  Entropy (8bit):5.279675888985729
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:C6498ADBD13C6CA93D6FD33E1483E243
                                                                                                                                                                                                                  SHA1:D14ED7FA0948CDA157E60B4DEB1A2690FF9EA15B
                                                                                                                                                                                                                  SHA-256:0CFF5DE0A6DDDCB01B664ACB7CCE79CD85B5A941E7E8F74423C8024E60704005
                                                                                                                                                                                                                  SHA-512:A28381DC127F61F34D670843A09096826C66C5093D40110BC4EA9D2992FE648A4DB91493D0616FB556E6349B944E3D132CE3C61C659BADEB021BD03EF0DB226F
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://cdn.mortgage.quickenloans.com/lending-images/presentations/common/navapi/deviceAtlasLmb.min.js
                                                                                                                                                                                                                  Preview:var DeviceAtlas=DeviceAtlas||{},DeviceAtlas={apiVersion:"1.2",propsCache:"",cookieName:DeviceAtlas.cookieName||"DAPROPS",cookieExpiryDays:DeviceAtlas.cookieExpiryDays||1,cookieDomain:DeviceAtlas.cookieDomain||null,cookiePath:DeviceAtlas.cookiePath||"/",divStyle:null,ns:{svg:"http://www.w3.org/2000/svg"},cssPrfxs:["Webkit","Moz","O","ms","Khtml"],fncPrfxs:["webkit","moz","o","ms","khtml"],properties:{"js.webGl":function(){return!!window.WebGLRenderingContext},"js.geoLocation":function(){return!!navigator.geolocation},."js.webSqlDatabase":function(){return!!window.openDatabase},"js.indexedDB":function(){return DeviceAtlas.testPrexifes(window,"indexedDB")},"js.webSockets":function(){return DeviceAtlas.testPrexifes(window,"WebSocket")},"js.localStorage":function(){try{return!!localStorage.getItem}catch(a){return!1}},"js.sessionStorage":function(){try{return!!sessionStorage.getItem}catch(a){return!1}},"js.webWorkers":function(){return!!window.Worker},"js.applicationCache":function(){return!
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2396)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2619
                                                                                                                                                                                                                  Entropy (8bit):5.825880936755849
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:2E6B4DB5B1D4CD477BE357B0C8B44F4B
                                                                                                                                                                                                                  SHA1:FEA67E68068BD6791D72A57F9366FD39CA932BD2
                                                                                                                                                                                                                  SHA-256:D6FC9D187517AEB7DFC31E4883258E5593679F1212EAA4635C4A5F469A3FE38E
                                                                                                                                                                                                                  SHA-512:57265CE25B6B76749F99EF9D9AA16BAEBA896FAC4A7E0789C99335D0EC40BF40769F292E8945BCE5A33282466593E658CD78B5A915CF4F17E145B42FF925D8CC
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10866176763/?random=1696874172949&cv=11&fst=1696874172949&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):677
                                                                                                                                                                                                                  Entropy (8bit):4.989775200026252
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:D40DCBEE218AF49ABBD15F61F5DA0FFD
                                                                                                                                                                                                                  SHA1:E3EC85D9073FA1CC0BE1FED18344A6D4A2076E9D
                                                                                                                                                                                                                  SHA-256:3EF64E4A0001CD55211FFF6BD306290F29C7482A6006D070EE21E52484B7EF22
                                                                                                                                                                                                                  SHA-512:BB292259097E863F89938387CA140EC5FD9D841778C611D3DA88B0CECBD51A3022E573A84C492F4BA84B5DA4284E8AD629EBF6DA69C8147B8A8CF86A60D69D21
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://pixel.mathtag.com/sync/iframe?mt_uuid=6c216524-3ebc-4200-85c3-4c0d4ae6e6c1&no_iframe=1&mt_adid=245296&source=mathtag
                                                                                                                                                                                                                  Preview:<html><body>.<script type="text/javascript">.try {. if (typeof window.MtBts === 'undefined') {. window.MtBts = function() {..metric = function(url, wait)..{.. setTimeout(function() {. var e = new Image();. e.src = url;. }, wait);..}..var intervals = [0, 10];..var inlen = intervals.length;..for (var k = 0; k < inlen; ++k). this.metric("https://pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv="+k, intervals[k] * 1000);. };. window.MtBts().}./**/..}.catch(ex).{. new Image().src="//pixel.mathtag.com/error/img?error_domain=wrap_iframe&what="+encodeURIComponent(ex.message);.}.</script>..</body></html>.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):737
                                                                                                                                                                                                                  Entropy (8bit):5.109086697902633
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:A28F0DEBA4086540F82DC5D6B5E47753
                                                                                                                                                                                                                  SHA1:A774C31BE17BDDF84357F95DA469B63ADD2E7E72
                                                                                                                                                                                                                  SHA-256:83C43BD904966541549600341D72DE1AD6E24F4EF8D99F386901242E9B25B5F9
                                                                                                                                                                                                                  SHA-512:3439AAA524491168531686A19BED0B63994887DDFB20D74EE627EE65B2E205614297F7CE678DBF3939780DB0E5F696AF9699C18952C6165E29F293B108DF0539
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://cdn1.decide.dev/tracking/quickenloans_lander.js
                                                                                                                                                                                                                  Preview:(function () {. var CLICK_ID_PARAM_NAME = 'ld_trk';.. var querystring = {};. var search = window.top.location.search.slice(1);. var params = search.split('&');. for (var i = 0; i < params.length; ++i) {. var param = params[i];. var param_parts = param.split('=');. querystring[param_parts[0]] = param_parts[1];. }.. var lockerdome_click_id = querystring[CLICK_ID_PARAM_NAME];. if (lockerdome_click_id) {. var domain = '.' + window.location.hostname;. var expiry_date = new Date(Date.now() + 86400000 * 30);.. document.cookie = 'lockerdome_click_id='+lockerdome_click_id+';path=/;domain='+domain+';expires='+expiry_date.toUTCString();. } else {. // TODO: Consider clearing cookie when view-through. }.})();.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2392)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2615
                                                                                                                                                                                                                  Entropy (8bit):5.826792284292041
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:0ED68A1EEC24CC27D1A3070480E2C6C1
                                                                                                                                                                                                                  SHA1:F87BD74B9BBA16FE0C68A044DF1292518D8966A1
                                                                                                                                                                                                                  SHA-256:AA22510F0FF666FA21594B3691AA45E415CB99C80BDF08632079D1B123361664
                                                                                                                                                                                                                  SHA-512:1E4F224A9A514DD55FDA7B33FDEC5CC653E601D0D5B34C5508D01046DA5468F412923B016A8E80DD6C6E543B35C5E2AB2F842FF333B01392C2E80E0DFEB03AE9
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/848879802/?random=1696874174353&cv=11&fst=1696874174353&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 14719
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):3267
                                                                                                                                                                                                                  Entropy (8bit):7.950430370795621
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:2922A85CE6CAF46F828C097BF7AA1036
                                                                                                                                                                                                                  SHA1:AFEDBAC8E6480A8C59CC6CA3359381731F75795B
                                                                                                                                                                                                                  SHA-256:12D369C3D585D564678ED15F99B53DAD29FAA1E05475825CCD0E8F4C50CFB779
                                                                                                                                                                                                                  SHA-512:F9AA3D6FA6CC032D050C1C995F5D274D4F0063101F7B428B81AC0C56F129FEC377987817F3245E32CC4B56D2F6379761BC64AC076514225E0B69108C87C6FA48
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36&businessunitId=4bed9e1a00006400050b9bca
                                                                                                                                                                                                                  Preview:...........[....~...........7A...W h...E?-(..y+K.H9.1..w...(..{-..%>.?..."}.._......O.Fn.O.../..0...<n..N...`...{7q......<.S)&N.&.%.4Iy......2f.~..!3........o.......u[!.....?..I.wDd4!4.b&I....Ix...d3#.9...-.,.fI2..i...H%#Y..%..sB.<M....a. >_..C. ...YL.(!lK.vMx".../D.A...[..D.?2.J.5........hN|R.N.`..I..$.C...I.I.Y..+I..[.S.F..%!.....$O.".e...H\."sx 2$4.<..T..;$;*...<...g!...`..U.CB..)..:O..%.I....I...&...=D....0p.0<=.Z.<%;.5..i....*...x.a9.......f...+...4..<Y..!z..4....`1O.=.j6...)......b..)!8 +.8..a|.........EY..@.2.e..E...|.k.YD#.....R.....M&..Q.Sk]....8..`^..*+@...5=...ny..M~f.!'....MHS....9..[.D..V&..K3..~)...W.....Zf.W.%]...4..E)1...Y.\..n....E.v.}.n.c`...|.?.w?#.s.jV..xB.w.fJ.y......A=<............6^\..kp..q..)..0@91J.6...&..7.J.....M..T7..8t..9..+.^..?mY..j.I.u...@...S!=.....j(l......'_._....I.".qW..TZ.R....p?../.;...7<.Y....0f..J..%.,.O..}."\..VY*8...H.B..L3U........b*.[.*..._..=...7.Qy...&..Rky...ay...0`.J..4..@....74L.zSh
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2394)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2617
                                                                                                                                                                                                                  Entropy (8bit):5.824759441778875
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:1FD774A5E6431CDFCA20FCE604CF3281
                                                                                                                                                                                                                  SHA1:FB65F5F68030E1832D31308AF1E68C01C0C0006E
                                                                                                                                                                                                                  SHA-256:221EA6FA71C048C7BD75842101980E31AD8260E2D0201726674529ED61643585
                                                                                                                                                                                                                  SHA-512:407BF0D2787E9BBF5FED52C05E42D0BA812560CFB9D773E33FB04DC80FF69DBC1065E1ECA08DA8D9466D92A8C67012030A8AA27EA8252714F4BF37B9C4AF24E6
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/813495030/?random=1696874170357&cv=11&fst=1696874170357&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, ASCII text, with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):13
                                                                                                                                                                                                                  Entropy (8bit):2.7773627950641693
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:C83301425B2AD1D496473A5FF3D9ECCA
                                                                                                                                                                                                                  SHA1:941EFB7368E46B27B937D34B07FC4D41DA01B002
                                                                                                                                                                                                                  SHA-256:B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
                                                                                                                                                                                                                  SHA-512:83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://td.doubleclick.net/td/rul/813495030?random=1696874170357&cv=11&fst=1696874170357&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config
                                                                                                                                                                                                                  Preview:<html></html>
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (4179)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):205177
                                                                                                                                                                                                                  Entropy (8bit):5.550641586661976
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:CD2B999B4DD76C0921DF218ADF5E0F57
                                                                                                                                                                                                                  SHA1:E7C7BECFFD356353874216381A0621407BFF54BD
                                                                                                                                                                                                                  SHA-256:87D59C2A2A0000574C1F802760221ABEB1BA58DC5E02DBE555F71888921D9A8D
                                                                                                                                                                                                                  SHA-512:C1BDD7D407C445D8DE5D847E2901E1FB2B17E4329CE26DAEECA6BB1CBE1550273EB42EC4E890B5FF5263837015053CDC43572D6BB3D1A0AA7170A4BE555623DB
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=AW-700319321
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-700319321","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionV
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:gzip compressed data, was "main.b4887131.js", last modified: Mon Sep 11 18:12:34 2023, from Unix, original size modulo 2^32 64421
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):21134
                                                                                                                                                                                                                  Entropy (8bit):7.98982011210365
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:AD528570077FAA5F1F6B496D403FFC35
                                                                                                                                                                                                                  SHA1:B9913047899B900BAFDB8ADFA076502C8B2D786F
                                                                                                                                                                                                                  SHA-256:F976DBBE8F650288FC226B05DAACED536BD5F6F4F6B64EE440C00CE47FC9054E
                                                                                                                                                                                                                  SHA-512:18873CC22DE07D3070E061C1D4EC9253D07AC9FB63AA64F4A950DAF4CB631F077AEE2DCBA8E1A6C37D028EF40F8DA7C4A5B35D6F6CE9B02DEFDA19482B58766A
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://s.pinimg.com/ct/lib/main.b4887131.js
                                                                                                                                                                                                                  Preview:.....X.d..main.b4887131.js..\.s...*2g..!...,;........m:Izs...CK..F..H...~......H.q..66...............r....$...a;......O3*....L.o66.."~`.p....o7i&..a.u.<........n}...Y.......lx.37..c.?.q.L.....xI6........q.[...L..n....4K..4..WT.lK.@/3......u......{../.u..~.E.Yd._}I..........uAC.tQ...%n..Va....B)j....li.}....3......Q+.K.O...J..V....}..X.}q.Y\B.g4....zM......(s-hI...v...s.c q..5K9Y..-.....u.z.5.BC..../._H\.%....C....J..aL1,f.....B.-...0..X V..Q..U.....R....$.x.5.....H.&.,7.......g..o.......U.d..Y}.?....)...7....IV.d5...o...8.........O_f.?>...&....FGc.8.m..s53Xv..q"VYz.....).W.4.`..8,.[.p..^.e.}oM..XY...o.....8>..Pp....y...fc.}a.c........ C5R.:P.^iC.....7..b9.Z..>G.\.J.$yE.e..I..Y-..bQ...F.R.k.2.....Q>O......:gK...+..Go.\.'.@...].pwI{I..^..(.'....J.`@o......W..OkgL...**...[..\...rI30&&W.'Jh.X..r...RK.....,..-"o.1[..C.^..eN.+d`Z...t....".T...f..RJ.ZI.lN.......+....v.7%.#....m.Pn.vdq.....M..m..3..C.|.....!......4.6s...C\. .."....j....p...C....x..,
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:Web Open Font Format (Version 2), TrueType, length 31412, version 0.0
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):31412
                                                                                                                                                                                                                  Entropy (8bit):7.992553416839652
                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:7FEE973546141ECDDFA06F22CF4C05AD
                                                                                                                                                                                                                  SHA1:36A77A17477268E1FCA73C994BF483F8BE8F16F4
                                                                                                                                                                                                                  SHA-256:36BC658AAF6C60321527194599E498084C51CBEE6E0160CA5B429C4D3A634AA1
                                                                                                                                                                                                                  SHA-512:3FD6100867B0A9D3FFAAF578AA062A27D6C8931638204B610FDCC620B99712A1368D539670FEAAB079DAD24C4B835A7214AFCC5F165E102119E0A16ABB336DE3
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.rockomni.com/mcds/assets/GlobalContent/NonStockImages/Fonts/RocketSans-Light.woff2
                                                                                                                                                                                                                  Preview:wOF2......z........ ..zO.............................$..<.`..`........n.....T..).6.$..\..z.. .... ..;.....^...Z>......2pM......?!!.CU....G?../~.....O...?...........X....y~..y_..,...@.b.9.X..0EPaw...v...?iK.Yv......TM.L.....2...s#=..i....iF......i.`R1...H.C..{....@.c.z....Lp..}.7....K...S...a.]....t"Z..N.a$...hCb.p.l.r.( ..N.~op.....!..q...}.I..Z7]...w...|nfVg...@X......9.AnYz.+0.A.....S.Y..^v.s.S'@Md.6U?q:3...'....'&.y...N....v.O.......w9.....W.3....~.m.%.CC.i..&^.jh..A4....KH..._.J;....y1..E}N'6@..&z.0...0...C....d....i,.Z..>..U.<x.}...5).C..?......>...@.D.;>.~f..~:.{..I.}H..W.....?....)..\(.9..O...Y!}..J...z.......N:I.l...o.R..............0...............g.?#..I2P....[....&...S.C.C....J.......@.3...*.b..C..J.6.N.....n..{S....].pF.I>[.8.u..pm&...b.w.\.m..nH"z...H.........q....d..V.JA.@A.p.e.UJU.\...j.....g5.9...b.........@.?....(.H...H*..i.....=C..6.*..!.A^P...R..C.E.sU...Vi.../Q_.w....n.U@.F.......0.LusDs....q....@1...../..4a.{{.;m.k%.p.60
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:GIF image data, version 89a, 1 x 1
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):43
                                                                                                                                                                                                                  Entropy (8bit):3.0314906788435274
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:325472601571F31E1BF00674C368D335
                                                                                                                                                                                                                  SHA1:2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
                                                                                                                                                                                                                  SHA-256:B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
                                                                                                                                                                                                                  SHA-512:717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZSQ_tQAAAL7erwOY&C=1
                                                                                                                                                                                                                  Preview:GIF89a.............!.......,...........D..;
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):551
                                                                                                                                                                                                                  Entropy (8bit):7.412346018325127
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:90732FD581B4624530C995D70D3F17A8
                                                                                                                                                                                                                  SHA1:6704549936ECE70F840129DCCA57A5E56FF0CAC5
                                                                                                                                                                                                                  SHA-256:8BDA4C30752B1529C25CF00CC9049534A89AD2428ED35C5000038EA81A08BE6A
                                                                                                                                                                                                                  SHA-512:19CEEEDEA5CA7AD8AEC33B01982FF41400E2A12728A590F0C766D61947634B570C844ED2D7548C20622E7DE4C56E3F05B8ED4F9833E96BF34E1036EF9B1A2A96
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://content.refinance.quickenloans.com/msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png
                                                                                                                                                                                                                  Preview:.PNG........IHDR...d.........{.......sBIT....|.d.....IDATXG..Q.P........+p.@..m..@.b.t ......@K.5.<'? !..73Y..d.w.{.D.....LR......sS$A...`.`$%....(^.A..*!...Q<...:.\... ..Q<....bV...Y1X..I...%.s......Y0Gx..kx.!.F.(...;.bV..q...Ly..x....d.aK..I...x.h...%S....3.....I..ck%.b.XQ..%/....~[V.Q,}..(.....7".I)^.S......"1..x.Q,.Y..f...6...e.G)..N..u..A.!*..b..!._.YT.x....e..^c...I...,P<.A..l...%.%f...E.|.q^.9G...j....E.01#nF.Y...1.w!..]...."(.{....,..e..].HdVf\[I..8D.N.*#%'..9..ft....<..1..v....W[......Q......?E@.].0......IEND.B`.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2394)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2617
                                                                                                                                                                                                                  Entropy (8bit):5.825915252636295
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:07AC95061480B683775E6445FEEA0E0C
                                                                                                                                                                                                                  SHA1:31F6530A97120B55E7089AA1786CFEFC9425AA13
                                                                                                                                                                                                                  SHA-256:F2ECC4C16E2E63F36CDBB826A429BEB26692001441DC54860FBD8DC733248F5D
                                                                                                                                                                                                                  SHA-512:8F157D0DCD39D43182F2807125B3EB0E560929127170A979C481CD72343ED515B41C3A41DBFDC5891FB794DF6E0826F8D2797CC5DC7500105DE8FEBA87CFA55F
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/865435318/?random=1696874171254&cv=11&fst=1696874171254&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2395)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2618
                                                                                                                                                                                                                  Entropy (8bit):5.824918530439886
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:30668E30B986AC7A53656715285D174F
                                                                                                                                                                                                                  SHA1:84BEDB94A8A325EC2D98B3BD1D5A5844A48D0089
                                                                                                                                                                                                                  SHA-256:64F77ACFA70179BF9A804DBF80799E1ABAA1D12A192B0BF94F71088C4FDF4F71
                                                                                                                                                                                                                  SHA-512:6FA977774E79F4DCF66FFABC50C50FF52DECF85EF4841C1358B3F2C2492058C5F014D650E497092729189467D37DB5411F935DAE20562AE892028704643D0406
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10910338944/?random=1696874172989&cv=11&fst=1696874172989&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (6573), with no line terminators
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):6573
                                                                                                                                                                                                                  Entropy (8bit):5.169910902628639
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:DF15150F52103A5B7392AE26C6AF9492
                                                                                                                                                                                                                  SHA1:323CB2CDB23BF3B6FFBF2B9C8416D0D48171A8BE
                                                                                                                                                                                                                  SHA-256:593DB43ECFE991BD73AEF4DB9CADBBDD91C03FEEA0BF88D99B122435C6084BFA
                                                                                                                                                                                                                  SHA-512:64DF1CA0C84B1453A85BDDEFB574B9B81224F1D2339D2BF5CC8F40B3DAF12FFD471AC8851337223324628A1C7D5236E262CD44F951EC256F9304B6360154AF08
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://api.pushnami.com/scripts/v2/pushnami-sw/623bac6703b37600138f67a3
                                                                                                                                                                                                                  Preview:"use strict";var global_ttl=void 0,global_fallbackUrl=void 0,verbose=!1,worker={util:{track:function e(r){verbose&&console.log("[SW] | service-worker.template.js | worker.util.track() | Tracking "+JSON.stringify(r));var o=r.event,t=r.scope,n=r.scopeId,i=r.s,s=r.pnid,c={event:o,scope:t,scopeId:n};return i&&(c.s=i),s&&(c.pnid=s),fetch("https://trc.pushnami.com/api/push/trc",{method:"POST",body:JSON.stringify(c),mode:"cors",redirect:"follow",headers:new Headers({Accept:"application/json, text/plain, */*","Content-Type":"application/json",key:"623bac6703b37600138f67a3"})}).then(function(e){return verbose&&console.log("[SW] | service-worker.template.js | worker.util.track() | Tracking Received"),e.ok?(verbose&&console.log("[SW] | service-worker.template.js | worker.util.track() | Tracking OK"),console.log("Tracking OK",e),!0):(verbose&&console.log("[SW] | service-worker.template.js | worker.util.track() | Tracking ERROR"),console.error("Tracking error",e),!1)}).catch(function(e){return cons
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):85
                                                                                                                                                                                                                  Entropy (8bit):4.534588036887216
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:2B16FD0E06C215E7D53331EEC2F9FEA9
                                                                                                                                                                                                                  SHA1:D977856741FA3BFCAC2F053D6C2E9167CAAD1ACB
                                                                                                                                                                                                                  SHA-256:308F59B75827B1030CB0E3957456808A38AF0CE71959FB7D49DC5DD90691C348
                                                                                                                                                                                                                  SHA-512:2B09DF87BE39BEB710CEFC54E702E646776115A68E3994ECB12C4C73DA5E2F9D7D84FAC309E73C692B74DED898A65057EB66E6E328028E59F4F9346D0E31C3EB
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.lmbahsj2.com/sdk/click?effp=a4ffc8640ca767b8aa1225f8f625d645&sec_ch_ua_platform=Windows&sec_ch_ua_platform_version=10.0.0&_ef_transaction_id=42890da93af048dfbf5f25085bec81c3&oid=9&affid=809&__cc=&async=json
                                                                                                                                                                                                                  Preview:{"aid":1,"error_code":0,"oid":9,"transaction_id":"42890da93af048dfbf5f25085bec81c3"}.
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):4503
                                                                                                                                                                                                                  Entropy (8bit):4.383837846623522
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:EEA100E4A26ADEE86914E2DD622D33AE
                                                                                                                                                                                                                  SHA1:D8721FC976BFF701EA3A6036363A32195B4A646D
                                                                                                                                                                                                                  SHA-256:A92ED9FC3A0E4248ECE6C83014A40C1A07F7F4F05934D9449383E2C220B9DAFE
                                                                                                                                                                                                                  SHA-512:92963CE4C97BEC98A6627B6E77FA2F688CA5B2CD614935218576BC1D49E85962FC7D7D934CD28B769F75F9B317614554A4BE7E18CC3D75D2A1A1CAE2514026C4
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://content.refinance.quickenloans.com/wham/ql_logo.svg
                                                                                                                                                                                                                  Preview:<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 404.93 50">. <defs>. <style>. .cls-1 {. fill: #b42225;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1">. <g>. <g>. <g>. <path class="cls-1" d="m.51,21.69c-2.2,11.29,2.67,21.33,14.78,21.33,1.82,0,3.62-.18,5.47-.67.24,5.62,3.19,7.64,8.84,7.64l5.1-.31,1.85-9.51c-1.15.3-2.28.48-3.44.48-1.52,0-3.65-.3-3.6-2.13,6.16-3.53,9.72-10.59,10.93-16.81C42.84,9.43,37.68,0,24.79,0c-6.09,0-11.29,1.71-16.23,6.45C4.18,10.65,1.58,16.21.51,21.69m17.9,11.84c-6.5,0-4.8-7.51-3.9-12.14.88-4.52,2.14-11.96,8.4-11.96,3.1,0,4.25,1.89,4.44,4.64.12,2.49-.36,5.92-.85,8.42-.85,4.39-2.21,11.04-8.1,11.04"/>. <path class="cls-1" d="m57.98,42.4l.98-5.06h-.12c-2.05,4.01-6.48,5.69-10.48,5.69-2.56,0-4.94-.59-6.47-2.37-1.76-2.19-1.48-4.93-.91-7.86l4.18-21.47h12.04l-3.65,18.79c-.39,2.01-.87,4.14,1.87,4.14,1.21,0,2.49-.67,3.25-1.77.75-
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2393)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2616
                                                                                                                                                                                                                  Entropy (8bit):5.822075310806934
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:85BDCFF79F72B6135A274267ECE0A81B
                                                                                                                                                                                                                  SHA1:09DC7457DADCA8773D09D7D857C92E9DC2D0CE16
                                                                                                                                                                                                                  SHA-256:6D65FEC72B9902282E60727831DFAD34E38CF39CA5D1FF9992A37A6859A68031
                                                                                                                                                                                                                  SHA-512:FEC0B135E39A80B35E932B31F28C6A8D19A90337F173E4429600B415FA3F68262FEC338AA65A44D68E4012D73F518780663CE3F54B30E7C57F4A4D56922D059B
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/700319321/?random=1696874168858&cv=11&fst=1696874168858&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:SVG Scalable Vector Graphics image
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):586
                                                                                                                                                                                                                  Entropy (8bit):5.1898513803447885
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:58887760FE01F3933D5AE2D7BCC3F373
                                                                                                                                                                                                                  SHA1:FBA7FF98B667475C22B1829986A7FA4B5ACD8EE7
                                                                                                                                                                                                                  SHA-256:4271182F88BDD24C04C139BE25FA435A8EE7D84B36B69F6790A060DB5AB1DE71
                                                                                                                                                                                                                  SHA-512:E9B0AD4AEC8013CF244830703A98AC332211E348C30CC6CFCA4106818F6C3DF958F78671D2E0E51536D677FE235A3982D4CF6160F96EF0BCC4720A4444869A68
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:<svg xmlns="http://www.w3.org/2000/svg" width="22" height="22" viewBox="0 0 22 22"><defs><style>.a{fill:#1667a2;}.a,.b{stroke:#fff;}.b,.d{fill:none;}.b{stroke-linecap:round;stroke-width:2px;}.c{stroke:none;}</style></defs><g transform="translate(-939 -195)"><g transform="translate(7 -3)"><g class="a" transform="translate(932 198)"><circle class="c" cx="11" cy="11" r="11"/><circle class="d" cx="11" cy="11" r="10.5"/></g><line class="b" y2="10" transform="translate(946.571 205.5) rotate(45)"/><line class="b" y1="10" transform="translate(946.571 212.571) rotate(135)"/></g></g></svg>
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (1311)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):19476
                                                                                                                                                                                                                  Entropy (8bit):5.392892982947898
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:26EC352468322F70910E03FEB9B8B8FB
                                                                                                                                                                                                                  SHA1:18878E8ADCD809AD7A4850C8698EFD24B22C04E5
                                                                                                                                                                                                                  SHA-256:2D84CDBFAF9B2BC0BA30BC5F67E45D03B265B52C3CFE24353E09175B1FB0FDFB
                                                                                                                                                                                                                  SHA-512:9B0D180AB85748C8E16701D2AB1603C9BE6AAEF8E481574D3B35152F9F134E66C07A4620101E23044C1A07C458B7AA02CFAC1474089E44BA262EEC85283AA0BC
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://ads.revjet.com/analytics?acu=3394
                                                                                                                                                                                                                  Preview:/**. * RevJet Analytics 1.1.7 (Tue Sep 07 16:44:06 UTC 2021). *. * Copyright (c) RevJet. All rights reserved.. * http://www.revjet.com/. */.(function(){var k=this;function l(a,b){for(var c=a.split("."),d=b||k,e;e=c.shift();)if(null!=d[e])d=d[e];else return null;return d}function m(){}.function n(a){var b=typeof a;if("object"==b)if(a){if(a instanceof Array)return"array";if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if("[object Window]"==c)return"object";if("[object Array]"==c||"number"==typeof a.length&&"undefined"!=typeof a.splice&&"undefined"!=typeof a.propertyIsEnumerable&&!a.propertyIsEnumerable("splice"))return"array";if("[object Function]"==c||"undefined"!=typeof a.call&&"undefined"!=typeof a.propertyIsEnumerable&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if("function"==b&&"undefined"==typeof a.call)return"object";return b}function r(a){return"string"==typeof a}function t(a){return"function"==n(a)}function u(a){var b=typeof
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:HTML document, Unicode text, UTF-8 text, with very long lines (60238)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):105034
                                                                                                                                                                                                                  Entropy (8bit):5.079403497843277
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:FDA2FC4CB6CEA7857BB2140B9A7EF531
                                                                                                                                                                                                                  SHA1:0DCD6A79B1D4B53632F49A43470909ACBB59EFE5
                                                                                                                                                                                                                  SHA-256:5EF357840E52A5009625C0AFD44EDA16225A03B4CA5EB83918BF662B5973713F
                                                                                                                                                                                                                  SHA-512:2F2864A12A6B7CF9E112BDFFD34025C8541764807F5DFAB5883D2B9E84BBD563BCAEAD36DDB480DC285D96DD9BB1A83151F6D84EA69CE4383894E4C35A21F972
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://refinance.quickenloans.com/?pkey1=809&pkey2=2&pkey3=42890da93af048dfbf5f25085bec81c3&sourceid=lmb-54867-113582-809&sid=9&cmpid=9&crtid=&oid=9&affid=809&_ef_transaction_id=42890da93af048dfbf5f25085bec81c3
                                                                                                                                                                                                                  Preview:<!DOCTYPE html><html lang="en" data-reactroot=""><head>. <link rel="stylesheet" href="https://static-msql-prod.refinance.quickenloans.com/main.2901f6d1a91191c18d39.css" />. <meta name='viewport' content='width=device-width, initial-scale=1.0, maximum-scale=1.0'>. <title>Refinance Mortgage, Refinancing Rates, Mortgage Rates</title>. <meta name="description" content="If you haven't refinanced yet, it's not too late! There has never been a better time to refinance. Rates are at near historic lows, and we could help you land a low rate.">. <meta name="keywords" content="refinance, mortgage, mortgages, refinancing, mortgage rates, refinance mortgage, refinance rates, refinancing rates, refinancing home, home loan, home loans, equity loans, home equity loans, home equity loan, second mortgage, home equity loan rates, credit card consolidation, debt loans, credit card debt consolidation, bad credit loans, debt free, bad credit, debt help, debt solutions, mon
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (5788)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):233977
                                                                                                                                                                                                                  Entropy (8bit):5.578546829868535
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:9B872105FEE173FBFB291B37425DE0E7
                                                                                                                                                                                                                  SHA1:F4EACA3ED302383105B2B6E00FF6F81008A304C6
                                                                                                                                                                                                                  SHA-256:B67FC7793F7997ED6CD8C0F74A622DE772C14781E8FA9273CE3DB6219B1F2F60
                                                                                                                                                                                                                  SHA-512:32100F13AFB9F7B092F68015FEF5B7DD16B48E2826D06B15DA3706CAB36503730D6E83291081098C6B8BE314D7A3D18C99777C403B10DA42B8956C0B7CA810DA
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://www.googletagmanager.com/gtag/js?id=G-8ZZTRFCYKX&l=dataLayer&cx=c
                                                                                                                                                                                                                  Preview:.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":17},{"function":"__ogt_ip_mark","priority":8,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","quickenloans\\.com","rocketmortgage\\.com","rocketaccount\\.com"],"tag_id":20},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":21},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_a
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                  Size (bytes):9984
                                                                                                                                                                                                                  Entropy (8bit):5.176944630943078
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:B042364B7E3560D66A34567E6F367F22
                                                                                                                                                                                                                  SHA1:7A5BCDD2BA5C9F901C236B563117C7D3E61D70C6
                                                                                                                                                                                                                  SHA-256:8672FE7FA84620CA2F44EB924040FD932C22A0EEC2A0E4672415A3C0F677A175
                                                                                                                                                                                                                  SHA-512:3BCC5BAF5550546EF1D21438070A4B8B71C1A43937230D78E5E812701DF4CC112E167F1294A1552D4982EC9215EA6171D83A4C4D8EC9EA10285D285466C4C4EE
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  Preview:{"businessUnit":{"stars":4.5,"trustScore":4.6,"displayName":"Quicken Loans","numberOfReviews":{"total":19631,"oneStar":669,"twoStars":195,"threeStars":382,"fourStars":1682,"fiveStars":16703},"websiteUrl":"https://www.quickenloans.com"},"businessEntity":{"stars":4.5,"trustScore":4.6,"displayName":"Quicken Loans","numberOfReviews":{"total":19631,"oneStar":669,"twoStars":195,"threeStars":382,"fourStars":1682,"fiveStars":16703},"websiteUrl":"https://www.quickenloans.com"},"reviews":[{"stars":5,"createdAt":"2023-08-16T23:12:30Z","title":"The entire Rocket team was very helpful.","text":"The entire Rocket team was very helpful.","reviewUrl":"https://www.trustpilot.com/reviews/64dd3bbe8939eed74a3b6c98","verification":{"createdAt":"2023-08-16T23:12:30Z","isVerified":false,"reviewSource":null,"verificationSource":"invitation","verificationLevel":"invited"},"consumer":{"displayName":"ERIC OHEMENG"},"companyReply":null},{"stars":5,"createdAt":"2023-04-18T21:23:14Z","title":"Allen was wonderful","
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (2396)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2619
                                                                                                                                                                                                                  Entropy (8bit):5.8238597924962825
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:179815388F3D932AB3935284C1858208
                                                                                                                                                                                                                  SHA1:ECB7107EFE03D28874242B69232ABBD025684552
                                                                                                                                                                                                                  SHA-256:01DE8B2A43730A1589AE9D5DC4E4D793739C4DE24AE77602F20B0EF162DE319B
                                                                                                                                                                                                                  SHA-512:571630EB65D452EC113B910039EF5200864E138A78FDEE6B8DB6765B6CBC7C4903C6270A2170EC990F9103BAA4ED82EC47DC2D6DC3E300D8D01D5FF7BD420C09
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10866179376/?random=1696874171186&cv=11&fst=1696874171186&bg=ffffff&guid=ON&async=1&gtm=45be3a40&u_w=1280&u_h=1024&url=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fpkey1%3D809%26pkey2%3D2%26pkey3%3D42890da93af048dfbf5f25085bec81c3%26sourceid%3Dlmb-54867-113582-809%26sid%3D9%26cmpid%3D9%26crtid%3D%26oid%3D9%26affid%3D809%26_ef_transaction_id%3D42890da93af048dfbf5f25085bec81c3&hn=www.googleadservices.com&frm=0&tiba=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&auid=827160414.1696874167&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
                                                                                                                                                                                                                  Preview:(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this||self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData||null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")||x("CriOS"))&&!(y()?0:x("Edge"))||x("Silk")};!x("Android")||z();z();!x("Safari")||z()||(y()?0:x("Coast"))||(y()?0:x("Opera"))||(y()?0:x("Edge"))||(y()?w("Microsoft Edge"):x("Edg/"))||y()&&w("Opera");var A=/#|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c||63==c)if(c=d.charCodeAt(b+3),!c||61==c||38==c||35==c)br
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (65453)
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):710451
                                                                                                                                                                                                                  Entropy (8bit):5.529005112737047
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:C5F2CD87075CF818519FACAD2B8A7F13
                                                                                                                                                                                                                  SHA1:6727F1D353DC4B73657A5BF9157B7C0C1B2CF74A
                                                                                                                                                                                                                  SHA-256:68CCFB2CDAD14C9FFD0D9183EC1C2E6BD0FD8B182E78652D7AB97734D2033048
                                                                                                                                                                                                                  SHA-512:67D2F8C89E50A8CC9FDC1094FB93A94FC07441864192C6C01A1AA5108D121AFAB73356FB825AAE96420EC01DC3B204FDF38AA001244C74409706E00B2A484CCF
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://static-msql-prod.refinance.quickenloans.com/main.2901f6d1a91191c18d39.js
                                                                                                                                                                                                                  Preview:/*! For license information please see main.2901f6d1a91191c18d39.js.LICENSE.txt */.(()=>{var e={8478:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var r=o(n(7294)),a=o(n(5697));function o(e){return e&&e.__esModule?e:{default:e}}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=function(e){var t=e.disabled,n=void 0!==t&&t,a=e.handleBlur,o=e.dataMapper,l=e.error,u=void 0!==l&&l,c=e.errorMessage,s=e.handleFocus,d=e.valueFormatter,f=e.handleChange,p=e.id,m=e.label,v=e.options,h=e.prefix,g=e.subtitle,y=e.validation,b=e.value,E=e.includeAdobeTrack,w=void 0===E||E,_=e.textTip,O=e.textTipBulb;return r.default.createElement("fieldset",{className:"dropdown ".concat(u?"dropdown--error":"")},m&&r.default.createElement("label",{className:"dropdown__label",htmlFor:p},m),g&&r.default.createElement
                                                                                                                                                                                                                  Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                  File Type:JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, comment: "LEADTOOLS v20.0", baseline, precision 8, 48x48, components 3
                                                                                                                                                                                                                  Category:downloaded
                                                                                                                                                                                                                  Size (bytes):2047
                                                                                                                                                                                                                  Entropy (8bit):7.687457426674163
                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                  SSDEEP:
                                                                                                                                                                                                                  MD5:24CD10EC761E6CBA9AB5288F1831FBBE
                                                                                                                                                                                                                  SHA1:A61B526688112DF3A321665D38B5F0111173C97F
                                                                                                                                                                                                                  SHA-256:A302CAD7EB5F1538994A1350D37EE0C9B9FE0BE2636CCB134232E78C299499E5
                                                                                                                                                                                                                  SHA-512:6843EF6819FF81B68574F7217593483A351E4CE636B6DD321932D9AD5216AE0E68E57976E8427CE1EE4775ACC0BDB0C42E39913DFA64895F0038BD3442FB982A
                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                  URL:https://content.refinance.quickenloans.com/wham/ql-fav.jpg
                                                                                                                                                                                                                  Preview:......JFIF..............LEADTOOLS v20.0...C....................................................................C.......................................................................0.0..........................................>.............................!AQ...."12B..#3aqr..%CRSWs......................................8..........................!1Q..Aaq..."2B...#R...$Tb...............?......i.:.!.\[..q+.:.F=.i..(...!9..De..C.Sj..1.v5GF..>...#....(Q.P....*.....2E7*..WX.../....sV..TA.OR.).....7%.O.D79..YV.2....T..7.._...dN.n;G...}.&N..~,.......O>..z..._.p..Q.?s..z.:.2.....Ty..9p.K..%.&Bj...|.*.ZP..s.lJ.,....A...'....Y*..0=.....Q-*r[...7...0adk..&{..i5....6..G5|N";.9Kh..Kj..=JxI.N#5T]ER.^..x.......zf'>..+...R..@..-.;.hc..../.*..Z)....../~.c..AQ.{.$/IL..@.E.O.3.L.......7.m..d.-...2.(..C(G.ZJ.HJG`....b..^...../.._.........(Dm....i..Y.........e......>WQN;.>q....lO..n.m....Ss....g:H.{..g...)...i.._}<.....A..0....~.C.......=i0?I..Mf$./.....8-..4Y...Q..8EV.Q.........
                                                                                                                                                                                                                  No static file info