Edit tour

Windows Analysis Report
https://met-aa-mass-klog-in.godaddysites.com/

Overview

General Information

Sample URL:	https://met-aa-mass-klog-in.godaddysites.com/
Analysis ID:	1521164
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://met-aa-mass-klog-in.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Source: https://met-aa-mass-klog-in.godaddysites.com/

HTTP Parser: Title: Metaask Login | Metmask does not match URL

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base

HTTP Parser: No favicon

Source: https://met-aa-mass-klog-in.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://met-aa-mass-klog-in.godaddysites.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:60906 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://met-aa-mass-klog-in.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _tccl_visit=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _scc_session=pc=1&C_TOUCH=2024-09-28T03:19:12.177Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://met-aa-mass-klog-in.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: met-aa-mass-klog-in.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://met-aa-mass-klog-in.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _tccl_visit=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _scc_session=pc=1&C_TOUCH=2024-09-28T03:19:12.177Z

Source: global traffic	DNS traffic detected: DNS query: met-aa-mass-klog-in.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: chromecache_161.2.dr, chromecache_205.2.dr, chromecache_165.2.dr, chromecache_204.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_210.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2)
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/stock/107927
Source: chromecache_210.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_210.2.dr	String found in binary or memory: https://met-aa-mass-klog-in.godaddysites.com/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60913
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@22/125@18/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://met-aa-mass-klog-in.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://scripts.sil.org/OFL	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.184.196	true	false	unknown
met-aa-mass-klog-in.godaddysites.com	13.248.243.5	true	false	unknown
isteam.wsimg.com	35.157.66.55	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
img1.wsimg.com	unknown	unknown	false	unknown
csp.secureserver.net	unknown	unknown	false	unknown
events.api.secureserver.net	unknown	unknown	false	unknown
www.godaddy.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://met-aa-mass-klog-in.godaddysites.com/manifest.webmanifest	false	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	false	unknown
https://met-aa-mass-klog-in.godaddysites.com/sw.js	false	unknown
https://met-aa-mass-klog-in.godaddysites.com/	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)	chromecache_210.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2)	chromecache_210.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)	chromecache_210.2.dr	false		unknown
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc	chromecache_210.2.dr	false		unknown
https://img1.wsimg.com/isteam/stock/107927	chromecache_210.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)	chromecache_210.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2)	chromecache_210.2.dr	false		unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica	chromecache_210.2.dr	false		unknown
http://scripts.sil.org/OFL	chromecache_210.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)	chromecache_210.2.dr	false		unknown
http://jedwatson.github.io/classnames	chromecache_161.2.dr, chromecache_205.2.dr, chromecache_165.2.dr, chromecache_204.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
13.248.243.5	met-aa-mass-klog-in.godaddysites.com	United States	16509	AMAZON-02US	false
35.157.66.55	isteam.wsimg.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521164
Start date and time:	2024-09-28 05:18:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://met-aa-mass-klog-in.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@22/125@18/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.184.238, 108.177.15.84, 34.104.35.123, 142.250.184.202, 216.58.206.67, 23.38.98.78, 23.38.98.114, 142.250.185.74, 142.250.185.170, 172.217.16.138, 142.250.186.170, 172.217.18.106, 172.217.23.106, 142.250.185.106, 142.250.186.138, 142.250.185.202, 142.250.185.234, 142.250.74.202, 142.250.181.234, 216.58.206.42, 142.250.184.234, 142.250.185.138, 2.18.64.8, 2.18.64.27, 104.102.33.222, 13.85.23.86, 93.184.221.240, 23.201.246.20, 52.165.164.15, 192.229.221.95, 20.242.39.171, 142.250.74.195
Excluded domains from analysis (whitelisted): e8843.dsca.akamaiedge.net, e40258.g.akamaiedge.net, slscr.update.microsoft.com, e6001.dscx.akamaiedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, global-wildcard.wsimg.com.sni-only.edgekey.net, wu-b-net.trafficmanager.net, csp.secureserver.net.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, wildcard-sni-only.api.secureserver.net.edgekey.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, wildcard-ipv6.godaddy.com.edgekey.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e64861.dsca.akamaiedge.net, clients.l.google
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://met-aa-mass-klog-in.godaddysites.com/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://met-aa-mass-klog-in.godaddysites.com/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Accept", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base Model: jbxai	{ "brand":["GoDaddy"], "contains_trigger_text":true, "trigger_text":"You don't have permission to access", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1535x1021, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	151288
Entropy (8bit):	7.998613332119962
Encrypted:	true
SSDEEP:	3072:Qr20Z/KY4SK/mrDW7xmfA16WDMUWu4MDkHDyfZW1+:Oi0K/xsfAPmFbDB+
MD5:	C0D1D98CE1B1E0C0E1C50CFE76FF1A56
SHA1:	A9E95951EDFE680AFB5E0999128764B6E303A8D4
SHA-256:	93671E51E52BB9082D8DE84B1CE771AE676E2E968B99F77EDB583FE73F284614
SHA-512:	25D9A43AC05BFFC0D6197A78894ABE7A697470AFCF85AE3702AEA89EAEF911B52822CB2A8267A159FBB5FA38C999531B4AA35FA732159521E1E08D390A4CAD66
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/stock/107927/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1535,m"
Preview:	RIFF.N..WEBPVP8 .N...........>m2.H$".+.sK.p..gn......V.q....B.....;..........>.................?.}.i#...`Z;............z..~.....(..._.......<..Q.M.P.....'....{.J....<.......}../.~...f..<....W...".n}Y....;..............&..............q.....`..........g..Qr,e.8...$..Rb`...".75.B.=y.uY..X.r..6I.&...kg...K>..d...x.b.Y).{bY...k.b...8~..[Y=10t{..a.<...6..{1B........-.@.=.u..Z..R....d........x...v..............-?e...A..=:....8..Jt.Q......y..1O...k..7...H.{`.1.Z.....0O..@.Z#.g..dN.]...0.P@vaN..H'R...J..9.5...Ec.D....[P.]k.I........c(...E..5T.:.!rO.o..D...".'.D cu...-..vbL..Ck....=c.....W.~.2.~0.\.. #Q...C(T7..Y..2.@....t.u..^.!.......i.~.s..p<(.%*..W....(_.1l.<Ykk...P........}...,........#....=....Y.<.v.$2ud..2.J.........P......W:...R.......9.....4.;N.......L...n.....j......j\|.......9.....'.[e..)....3:B....}....xtot.6.d2j.hi.....ZVd5..r.%.-.Zo.l^.Ug..af\q2j.u/.C...#.g.8S.#]4S[..G@..+..W........xQNqwA...0{......4C....?.3Fx.iX..u..n...'.<>.&c.A..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2368)
Category:	dropped
Size (bytes):	2416
Entropy (8bit):	5.220048787531057
Encrypted:	false
SSDEEP:	48:UfRV3dTEDPoRidiLEjTyAmzl584CC6zS72F7vNXuCyjSdad6f2vNdbTrID:iRXE7ocQLlWSwSQL5uCyjSdad82vNdb6
MD5:	ABFD2ADA44521989F7C040FC3EAEF6C9
SHA1:	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21
SHA-256:	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
SHA-512:	89CF1F0AD4AB25C95221F043FAC57CADE9F620F20EDEC099BA84288808C6589522E8F3FD3BE9DD4CC26141511B98C2FA27F2780DA3551D1755BF25C5ACE9BA80
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-Toggle-37f740c7.js",["exports","~/c/bs-_rollupPluginBabelHelpers"],(function(e,t){"use strict";function o(e,t,o){let s=e;for(;s;){const e=s.getAttribute&&s.getAttribute(t);if(e&&(void 0===o\|\|e===o))return!0;s=s.parentNode}return!1}function s(e,t){return o(e,"id",t)}class l extends(global.React\|\|guac.react).Component{constructor(){super(...arguments),this.handleClick=this.handleClick.bind(this),this.handleToggle=this.handleToggle.bind(this),this._id=(global._\|\|guac.lodash).uniqueId(),this.state={open:!1}}componentDidMount(){this._link=(global.ReactDOM\|\|guac["react-dom"]).findDOMNode(this),document.addEventListener("click",this.handleClick,{capture:!0})}componentWillUnmount(){document.removeEventListener("click",this.handleClick,{capture:!0})}shouldClose(e){const{closeAttr:t,ignoreCloseAttr:l,closeOnOutsideClick:n,toggleId:i}=this.props;let a=!0;return t?a=o(e.target,t):l&&(a=!o(e.target,l)),!a&&i&&n&&(a=!s(e.target,i)),a&&!s(e.target,this._id)}handleClick(e){

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1352)
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	5.307032039583678
Encrypted:	false
SSDEEP:	24:c6BLQZSwXZSUcUxQAQId+06QyyU+bHJRWIFSPhXCoiCUPGyTiKNPR138IHrIYf:j+SwJSxAQ0H0OpwUSPhXCoiCUeuiKNPd
MD5:	5CC6B93D41889C0A55C6C4FCD2D89713
SHA1:	51A59C1DAE337817C4EBAC39FBE61C232705A893
SHA-256:	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
SHA-512:	8BCAAB1399B6D4D7475C4CF1DC45B0477A9D2AD37578DFCCF23C0C9303716DA1DECD5FBA858D5DD609CB89BCC784E04B72A0D7136BC6EE60DC3EF69CAB977C33
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js
Preview:	define("@widget/LAYOUT/c/bs-index2-87bd33e6.js",["exports"],(function(t){"use strict";t.a=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginBottom:t}," > :last-child":{marginBottom:"0 !important"}}},t.b=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginRight:t}," > :last-child":{marginRight:"0 !important"}}},t.c=function(t){const e=function(t){if("string"!=typeof t\|\|"{"!==t[0])return null;try{return JSON.parse(t)}catch(t){return null}}(t)\|\|{};let n=0;return e.blocks&&e.blocks.forEach((t=>{const e=t.text.length;n+=(global._\|\|guac.lodash).clamp(e,25,Math.max(e,25))})),n},t.g=()=>{const t=document.getElementsByClassName("ux-scaled");let e=1;return t&&t.length>0&&(e=t[0].getAttribute("data-scale")),e},t.r=t=>{let{count:e=0,fontSizeMap:n={},defaultFontSize:r}=t;const i=(global._\|\|guac.lodash).reduce(n,((t,e,n)=>{let[r,i=Number.MAX_VALUE]=e;return t.push({range:[r,i],

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	dropped
Size (bytes):	960
Entropy (8bit):	5.203352394673048
Encrypted:	false
SSDEEP:	24:pzBLgJHHVvC+dKbywqIN6ttVFRJB1i/uwBrV7DtZHrIvyU:zSkjbQxz3+uQ7RxrIx
MD5:	62A914B2C847D4D02B76164D7A2A54C6
SHA1:	20D9F49A90A51FA6C8420640610DF77F7A96D919
SHA-256:	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
SHA-512:	E67D3D9F68EF3151D93DEDAA3530DF89F0C957F08561E93134B219DEC23C2A1FE0D109AC666619526742C5411E4636ECE416A3AD1148C1AD0861F0050B41D3DE
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js",["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.a=n,e.b=function(e){if(e.__esModule)return e;var n=Object.defineProperty({},"__esModule",{value:!0});return Object.keys(e).forEach((function(t){var r=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,r.get?r:{enumerable:!0,get:function(){return e[t]}})})),n},e.c=function(e,n,t){return e(t={path:n,exports:{},require:function(e,n){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==n&&t.path)}},t.exports),t.exports},e.g=function(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_commonjsHelpers-67085353.js.map.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1352)
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	5.307032039583678
Encrypted:	false
SSDEEP:	24:c6BLQZSwXZSUcUxQAQId+06QyyU+bHJRWIFSPhXCoiCUPGyTiKNPR138IHrIYf:j+SwJSxAQ0H0OpwUSPhXCoiCUeuiKNPd
MD5:	5CC6B93D41889C0A55C6C4FCD2D89713
SHA1:	51A59C1DAE337817C4EBAC39FBE61C232705A893
SHA-256:	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
SHA-512:	8BCAAB1399B6D4D7475C4CF1DC45B0477A9D2AD37578DFCCF23C0C9303716DA1DECD5FBA858D5DD609CB89BCC784E04B72A0D7136BC6EE60DC3EF69CAB977C33
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-index2-87bd33e6.js",["exports"],(function(t){"use strict";t.a=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginBottom:t}," > :last-child":{marginBottom:"0 !important"}}},t.b=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginRight:t}," > :last-child":{marginRight:"0 !important"}}},t.c=function(t){const e=function(t){if("string"!=typeof t\|\|"{"!==t[0])return null;try{return JSON.parse(t)}catch(t){return null}}(t)\|\|{};let n=0;return e.blocks&&e.blocks.forEach((t=>{const e=t.text.length;n+=(global._\|\|guac.lodash).clamp(e,25,Math.max(e,25))})),n},t.g=()=>{const t=document.getElementsByClassName("ux-scaled");let e=1;return t&&t.length>0&&(e=t[0].getAttribute("data-scale")),e},t.r=t=>{let{count:e=0,fontSizeMap:n={},defaultFontSize:r}=t;const i=(global._\|\|guac.lodash).reduce(n,((t,e,n)=>{let[r,i=Number.MAX_VALUE]=e;return t.push({range:[r,i],

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11644, version 1.0
Category:	downloaded
Size (bytes):	11644
Entropy (8bit):	7.979913171006477
Encrypted:	false
SSDEEP:	192:Tnzm3QwZW75iH4izAQjQSFvOYQPFm3L9ZaWxWiWFSOu4zfOSJh8lvXrgSZlTIKCK:TqAaYyX/v6PURZaiWidOXzGSJ6FPrj
MD5:	734A5B0ADBD95DBAE76BD14E82758144
SHA1:	FD6C0BFDF7F7AAE7B6169BE7DBDFEBB416208106
SHA-256:	EE7EF1D38007C4773D1E000177123FB440383C0D0187FD7D2D6978A0ED0F8976
SHA-512:	D8811D528C5220CCE087C0306F5086EB45793204549D24708A95C9C89EEBD93A072006AE15D76C6324CB375869D23BC9CC232CBECDDEFC5C6CBAB1023CAB21C4
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2
Preview:	wOF2......-\|......k...-.............................\...`........8..[.....6.$..8. .....K....S.".8..D.C.%k3W.......lGWB$..i.!.....Vr...>.W.d.#...y...g.SD2..NP.$ ..a+.9.t.8v.X6l.e....+.f6.y6...y.K...A....T....x..1...'t..E.%/..........v....>.....d...o.v...l(.h$..v..s_}.R.'].......2R.k...u...nH...%...<.4uY.,.9.r:..........t>+......'.D..>...a.......RI#..A..g...c..{!..n...QA .d<..p...+..a..[...q..A...T.,$p.....jk... p..5..Wer...__..A.....s.)c...B..'.X..Q..RI.$.^.LV..\|.K.?.[.!.i.)j...pf.[1......K..^#.....M..<.r.....F..h'..y..c..!.. .7... QB......5\|.. .A..W.=...x.w...O.Ps.g...c..`q.........l'.......XXG.3....{c:A....k....E....@n{..9...U..H.C...O.QX........LL$.[.....'^.........7n.>.....!.L.$.......z.0.. ...p..s.......iR....Bb..&...0@..tj.Q...2.p.C..0..H..q...%j.p J..G....q4I......1.A%.x.... .Nk..d... ..~I.,9.$.0IV....E....A.......5.R..LO..:...q.\.&.b....+...d....J.u7...;.D;....,.....k...pQ.P..j42.k..)o..l..../...+.s...C.Vr.c..I..;...j...*....EQS6.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1875)
Category:	dropped
Size (bytes):	1935
Entropy (8bit):	5.308478233131919
Encrypted:	false
SSDEEP:	48:UTVqI1xGzgB7gBfYRN0a0qMoAua0pqAddrIt:0VqQzMfYR2xFua0pqAddE
MD5:	42A956F14F8E89C314FA201AB5FC9388
SHA1:	67651220687C3869FD6FAB960AE4B3CA53776E2F
SHA-256:	A9D6036466352258F71ADF94E2EB6DA8F9BEEE5FCBC73351180D1C8331D53949
SHA-512:	0A1F46367A7FB882029086B50A385439EA31D49F3C44C67B0BD77A4782970F174DB85791E5CEC60466322E2451D5F697163ADED5691DB224114381F8D8ACF763
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/bs-LinkAwareComponent-84648e01.js",["exports","~/bs-FlyoutMenu-Component","~/c/bs-_rollupPluginBabelHelpers"],(function(e,t,o){"use strict";const{PUBLISH:n}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.renderModes;var i,s,r,a=(i=t.default,s=class extends(global.React\|\|guac.react).Component{constructor(){super(...arguments),this.checkActiveLink=this.checkActiveLink.bind(this),this.state={isActive:!1}}componentDidMount(){const{toggleId:e}=this.props;this.moreDropdownElement=document.getElementById(e),this.moreDropdownElement&&(this.checkActiveLink(),window.addEventListener("NavItemsResized",this.checkActiveLink,{passive:!0}))}componentWillUnmount(){this.moreDropdownElement&&window.removeEventListener("NavItemsResized",this.checkActiveLink,{passive:!0})}checkActiveLink(){const{renderMode:e}=this.props;window.requestAnimationFrame((()=>{var t;let o=!1;const i=this.moreDropdownElement.querySelector('[data-ux="NavLinkActive"]')\|\|this.moreDropdownElement.query

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	242257
Entropy (8bit):	5.517949479561666
Encrypted:	false
SSDEEP:	3072:7u8xUu8gpdmSOvTdTK4Tn9TnatTn9TnApfeVH0pdmSO3iTIT7JlDnDQj3jPGIXSQ:Y3A/6hbCxJFxKhUc
MD5:	55BAF821A59FAD53AA754C85AE19D0EA
SHA1:	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D
SHA-256:	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
SHA-512:	791B8AA2E321324B55731B5F69239F86A0602F19FEB833BFC492D525EA132BC23D1C6A3907957992C655742F38AEDD7819A585E6B7A7F3C68126E0DC739DFC1B
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-index3-55bc27af.js",["radpack","exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-overlayTypes","~/c/bs-index2","~/c/bs-index","~/c/bs-dataAids","@wsb/guac-widget-shared@^1/lib/components/ColorSwatch","@wsb/guac-widget-shared@^1/lib/components/Carousel","~/c/bs-navigationDrawer","~/c/bs-searchFormLocations"],(function(e,t,a,r,o,l,n,i,c,s,g){"use strict";class p extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("Background")){}a._(p,"propTypes",{className:(global.PropTypes\|\|guac["prop-types"]).string,backgroundSize:(global.PropTypes\|\|guac["prop-types"]).string,backgroundPosition:(global.PropTypes\|\|guac["prop-types"]).string,style:(global.PropTypes\|\|guac["prop-types"]).object,imageData:(global.PropTypes\|\|guac["prop-types"]).object,mobileWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,desktopWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,blur:(global.PropTypes\|\|guac["prop-types"]).bool}),a._(p,"defaultPr

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 99x88, components 3
Category:	dropped
Size (bytes):	3486
Entropy (8bit):	7.603561569426555
Encrypted:	false
SSDEEP:	48:t8qQNn2xwWiJ3SVQ5iWV37aUP01tMd4Ihvgrdrh39CcBDNJrVrs5UXTV9w:tlY2QR3u3udxEHtCANvrsy9w
MD5:	24389A8E36B73F962BA9037CF1A36F0B
SHA1:	832D8A1A7DAF012AF13C12E3CD1CF55651EECC25
SHA-256:	FC7D4FC60E843C92F29C257C69ED2B41E53F5182BFE8C5AD2B5E8064088F7501
SHA-512:	6ACEE88E01FC5C49672FB140EDD475A7B3617FB1A53DDB14C25BA5B716176044F6A20C909A812FE093656608A0B82F5D584D55CBD01DA41ECBC44A2BBA416FB5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100....................c...........X..........+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CFD7CE372E5F11EC806FEA7E355604F5" xmpMM:DocumentID="xmp.did:CFD7CE382E5F11EC806FEA7E355604F5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CFD7CE352E5F11EC806FEA7E355604F5" stRef:documentID="xmp.did:CFD7CE362E5F11EC806FEA7E355604F5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.335020501847698
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaXqnRCsDPLCmKvaG0MbcaS3jfU0cMDaG0mWT:dkK9dg5qEaXScr0/jfB0mm
MD5:	9096227552A13300434E641355ABC2E4
SHA1:	780E4C7AE33BD33E675529B307F430C1121920E0
SHA-256:	3F2F5D1E3AA2035B8EBCC9CC4906768D63F34C142DC7D60F82B90D393E509ED6
SHA-512:	8D92EDA56E91DD9AB59E8CCDD3DD50CF545EC8F48C2A58A1DA4E9C6DF56ADD378EF164AE9DA65E27B69CC1BFC59E7FA13AE73B9AB92F6E66494A2037200712B7
Malicious:	false
Reputation:	low
URL:	https://www.godaddy.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.godaddy.com/favicon.ico" on this server.<P>.Reference #18.9cf01002.1727493561.b05ae78.<P>https://errors.edgesuite.net/18.9cf01002.1727493561.b05ae78</P>.</BODY>.</HTML>.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Category:	downloaded
Size (bytes):	23040
Entropy (8bit):	7.990788476764561
Encrypted:	true
SSDEEP:	384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD
MD5:	DE69CF9E514DF447D1B0BB16F49D2457
SHA1:	2AC78601179C3A63BA3F3F3081556B12DDCAF655
SHA-256:	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
SHA-512:	4AEBB7E54D88827D4A02808F04901C0D09B756C518202B056A6C0F664948F5585221D16967F546E064187C6545ACEF15D59B68D0A7A59897BD899D3E9DDA37B1
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
Preview:	wOF2......Z........8..Y...........................B.p.`..D....e.....d.....B..6.$..v. .....E.K...5l\e.v.~S$}.".8.....5.E....s...ai`W.u..8a2C..JuBj....x.....%.u.C.......p..c...7...+.1.GS.3...F_....-..`#........]...T.....x....&..{.....V..,..&~$D.#.P..\|gzz...B.7..m.3....HH.l.....Dj.F.X.....U..+.Q...T.`...ST...1...0....io`zu@.J2....3]}0.X...,..+"...............(k.CGl......`.y.._....3.t!O.,X:t.3....lw..U../:..b.]....V.$.y....G.....H..IN....bQ.+ \@....;...C3...c.l..i/....#..I.).Y...]...s..$K!..Tr...g%\|r.D.#.Y{..R..We...X.?...r.@...G.{..>..4^..b..,.z........T..[.ru#.7..{..G....J.3......Lz.C].of$Y2..^...>@L..P.........7..bB.....6f...ec.i..{._\...A.I.Lcy.Qm".....k.^.d.K(x7U...c.o.......}.T......iL..!.Z.......[O...%...*'?........^I./..;t.4%.....S...4....wY.b9.%.b...,.....tC..9.Z...V..CHnA.S.-.u$m.\....7{,..K{(.."....._...\|{.VowE@E@@..Zg.....`8..b..Z...^....l+...R..%.L.b...._..E.j9\+.L.#J.........?&...&..scE..b..Jc.8...V....L 1./k.3..7w....x..-.....

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23126)
Category:	downloaded
Size (bytes):	23189
Entropy (8bit):	4.539345073526186
Encrypted:	false
SSDEEP:	384:7UuK/6kvTqLYddu4bV/yiAhSs1hiAhAiSeG3dvBRU+SMkc6e:QuJ5wI45/c1+ipG3TJSMkU
MD5:	3D092EF4ABA019B14F01C40747E40554
SHA1:	1C26145272FCF4CA91AF501288CCE84B1BFFD38B
SHA-256:	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
SHA-512:	F7180D3D98CF17556E27D62EF719DD9E35041679BAB74BD49BD898EB0FB62018EF6C6B64D06E9E0CAC4A646154DB93A1D35096B098DDCFF7B02CD6889A29DA0A
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js
Preview:	define("@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js",["exports"],(function(a){"use strict";const e=(global.React\|\|guac.react).createElement("path",{d:"M12 2C6.477 2 2 6.477 2 12s4.477 10 10 10 10-4.477 10-10A10 10 0 0 0 12 2zM7.055 13.745a.97.97 0 0 1-.073-.509l.182-2.072a.687.687 0 0 1 .29-.364c.182-.11.582.036.582.036l2.619 1.31s.4.181.4.509c-.037.436-.219.436-.364.509l-3.055.654s-.436.146-.581-.073zm4.945.473l-.036 3.018s.036.437-.219.51c-.144.02-.291.02-.436 0l-2.036-.655a.6.6 0 0 1-.291-.364c-.073-.218.182-.545.182-.545l2.036-2.255s.327-.29.582-.145c.254.145.254.436.218.436zm-.364-3.236a.687.687 0 0 1-.581-.182l-2.51-3.418s-.363-.4-.181-.691a.64.64 0 0 1 .363-.291l2.4-.873c.11-.036.218-.145.582.073.255.145.291.655.291.655l.036 4.145s-.072.51-.4.582zm1.419.582l1.636-2.582s.145-.364.436-.327c.152.002.29.085.364.218l1.382 1.636a.676.676 0 0 1 .072.473c-.072.218-.472.363-.472.363l-2.91.837s-.4.073-.545-.182c-.145-.255 0-.51.037-.436zm3.781 3.309L15.6 16.655a.815.815 0 0 1-.4

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21556)
Category:	downloaded
Size (bytes):	21592
Entropy (8bit):	5.118279269599776
Encrypted:	false
SSDEEP:	384:/z+lhnKuowsx9pGxw57yty3eOHenS934osy:JioFP934Y
MD5:	1C56940A864F144FAE2EB40EE952CB94
SHA1:	EBFC754CE962A1F9025853F2995B3987F0383D87
SHA-256:	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
SHA-512:	AEF4B08A01D56BD8855653499B375DB11D8FD7D67C4BCDC74323236BADC47B70DDFEDC14CE89828736C63FFE147BF71C14311580296D41B59F11A3305993ADDD
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/signals/js/clients/tti/tti.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("tti",[],e):"object"==typeof exports?exports["tti"]=e():t["tti"]=e()}(window,function(){return n=[function(t,e){var n=function(){return this}();try{n=n\|\|Function("return this")()}catch(t){"object"==typeof window&&(n=window)}t.exports=n},function(t,e,n){"use strict";e.__esModule=!0,e.setCustomProperties=e._sendWebVitalsData=e._collectVitals=e.calculateTTI=void 0,n(2);function i(){0<s.timeToInteractive&&setTimeout(function(){window._expDataLayer=window._expDataLayer\|\|[],window._expDataLayer.push({schema:"add_perf",version:"v1",data:window._tccInternal?{type:"pageperf",properties:s,custom_properties:c}:{timing_object:s,is_hard_navigation:!0,custom_properties:c}})},0)}function r(){var t,e,n=(r=0<arguments.length&&void 0!==arguments[0]?arguments[0]:{}).name,r=r.value;s[n]="CLS"===n?r:Math.round(r),"timeToInteractive"===n&&(s.hasOwnProperty("FID")?i():(t=0,e=setInt

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51853)
Category:	dropped
Size (bytes):	60918
Entropy (8bit):	5.352554926858827
Encrypted:	false
SSDEEP:	768:RfLoCGFoLh8vvw4xUC/ib7V/Kc5syR1TRA/LkIT8OTGGOumJ66KzElpzLEP2szm0:6G1TRqD8OEumJ66KzEnXEP2szmOT
MD5:	A8E1D3D56157F21917E1385AD3681213
SHA1:	1F9199C0C9E47B87EA162F8B67E6921F2E6318BB
SHA-256:	54DC8B6610EC335C93A01783DD346C81843C59E254604C03C3A05904E12168E5
SHA-512:	414AC9CEF4FA6E42B0AE7A5601D222B6D1D6742C885B2B621EB8DAB653AF4DED2F9A0658EB6EA48B204CB402BDC4D31A7A1E3DB3C1886F8AB18C924CFA1CFA7F
Malicious:	false
Reputation:	low
Preview:	navigator&&navigator.connection&&(window.networkInfo=navigator.connection,navigator.connection.addEventListener&&navigator.connection.addEventListener("change",({target:n})=>window.networkInfo=n));.const imageObserver=new IntersectionObserver((e,r)=>{var a=e=>{if(e.hasAttribute("data-lazyimg")){var t=e.getAttribute("data-srclazy");let o=e.getAttribute("data-srcsetlazy")\|\|"";if(t&&(e.src=t),o&&window.networkInfo){var n=window.networkInfo.downlink;const r=[{min:0,max:5,regex:/(.?(?=, ))/,qMod:!0},{min:5,max:8,regex:/(.2x)/}];r.forEach(({min:e,max:t,regex:r,qMod:a})=>{e<=n&&n<t&&(r=o.match(r),o=(r&&r.length?r[0]:o)+(a?"/qt=q:"+Math.round((n-e)/(t-e)*100):""))})}e.srcset=o,e.removeAttribute("sizes"),e.removeAttribute("data-lazyimg"),e.removeAttribute("data-srclazy"),e.removeAttribute("data-srcsetlazy")}};e.forEach(e=>{if(e.isIntersecting){const t=e.target;window.networkInfo&&0===window.networkInfo.downlink\|\|([t].concat(Array.from(t.querySelectorAll("[data-lazyimg]"))).forEach(a),r.unobse

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1262
Entropy (8bit):	6.346513337678769
Encrypted:	false
SSDEEP:	24:RhQTE9IOmk2lB1he91Wwjx82lY2T3ouV6nXm3yJ3VK5eXoQG0:RcE9TmkgvqQNn2xwWiJ3SVQv
MD5:	41741F190ECEBBA886890C3100C48E08
SHA1:	01A25272D3FCFFF29C073B75BDED13850F2B7A28
SHA-256:	795AD9FD4C12E74A5696B6D955BD518BA65EBF30C74657A38EA874EFDBE93E36
SHA-512:	383FFCE578B2D6CFEEDE3D69DD90C01030C17839C8E49D6264DEF0C8ACC393ACE3305A47BFC265AC7E608F69794C3670545D38071BF0CF3558B20F054D145229
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:16,h:16,m"
Preview:	RIFF....WEBPVP8X..............VP8 .............>m.E."....@...N.B8..)...v...DZ0..lZ..K.gPf....E.+.=AD..5...a.I...D..D]......<7..1.}&5.....Yj.X.r...J3G...-..+.}.7F.....<k....0@E.o...h...2.6E.su........:.M.D.j..d.y...S....?......._..S.f.h...[.O..@.....m.k,......5.9..d...EXIF....Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100........................................XMP ....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CFD7CE372E5F11EC806FEA7E355604F5" xm

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.376083689062415
Encrypted:	false
SSDEEP:	6:FSPl39b4BSyRbjGJlI9kXJ3+V0q1EkmGHr9EJiKWaEt39J:cd39MBSyVz0XkTHr+pWTt39J
MD5:	ACD4F2B6117E5054FC9BF848AE8121CA
SHA1:	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8
SHA-256:	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
SHA-512:	906FC9144D4AB81E8000CBE4A7AF7AFF775464347449193337E8738D705888C02B9476E083B3B67BDB3CBC312AAC4644C10737BC1FC5F9F08B38F5F45A2410F9
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-legacyOverrides-42582241.js",["exports"],(function(e){"use strict";e.g=function(e,i,n){let o={};return"MENU"===i&&"h3"===e&&(o={color:"highlight"},"menu3"===n&&(o.fontSize="large")),o}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-legacyOverrides-42582241.js.map.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.727436261997612
Encrypted:	false
SSDEEP:	3:YllPZruC48GsM:Y/PZBrGH
MD5:	4BA7E4CD4E8240B13F2FBAA46D839086
SHA1:	5F5D7FE9D036B2773E686A8BA6EE6080B1358CFA
SHA-256:	D45BBD2F58CB3178433D9B4A002CF4BC445F26E5E2413D7457339CC45E40C6CA
SHA-512:	F6E9D629EE896C2019679C559C58B1003F4B4E30B83245EC1C71EF101E80C5720386498543C184185F3C3C02D58428141D6F1BF3109EFE7C693DA3F43F8ECC4C
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/static/transparent_placeholder.png/:/rs=w:600,h:300,cg:true,m,i:true/qt=q:1/ll=n:true"
Preview:	RIFF(...WEBPVP8L..../W.J.......$...F.?.?........

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2618
Entropy (8bit):	7.532444422917526
Encrypted:	false
SSDEEP:	48:l0Gt5yRiF3r5LlOjp+8EKw6NXOR3MqQNn2xwWiJ3SVQv:/79F31LQp+8jw3VY2Qv
MD5:	E2E0BF68FD72B948CCD67520A217574C
SHA1:	4D7A20ABFF6AD8E48C0A384BC2BE9A9636076DB8
SHA-256:	073C1532772824259BABAFDC6E1AF61DCFD354D8D0DAF5B66329D5B28FA7B385
SHA-512:	7E9503AFF0489F1542791DE59A3DF9CA158FAB625975DD92B43440C971E373B9C387FD57854425712E833F8709ACB588D2C82C6FC18321BCCF16E2E2E68C1ED6
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:192,h:192,m"
Preview:	RIFF2...WEBPVP8X........b..W..VP8 >........c.X.>i,.E."...ul@....d.....-:"D..p_.^..7..s....1...7..'.....f...[....?..rz..B...k.._......;._..3.J...<}Jk.{zz..T...4.\..G@Vv....CUM.4.1%UI.F...+!G.Z.&.....c..C.o.'..9....W....[.}.>.V.'....~.Ea9.....f..h<$........9.l..c...Y...1.`...B.^.....S.+..2]-..i.O."......v.dN.]....I_.R.^..p"..!..,w....!N8{_.[....'q.{..1...=@.......<4....;.aC,(..".l..q.Tme?.:,..l.\y.......R.......7.+Lp.b-..\4.S.o.L..F..S..G"7sl...:H....W.6.V...d....==..b...z..-.'D.:..9..U.Cv.f..P?.......z.B..J'ct..B..Q@..O.38..cL...j...A.p.w..Ybr19.w7E.8l.}D....A...v.....2..c.#.......$e.U:....w@v.=.s..%d......"2...S.\.=.r.2%.O/D.;.'...b.d.. x.^..n..D........T'.x...p>....b.....@F.a...g....[..h..Y.(Ok.=k.kN.m.d...kH.*\|.+.N.q.x..%.>}..aU!..w.H.3#..'...mhc.2....Z...._...\...%H......\=.;...9s..l.NqD...?-.}.I..<O...<.C.{>....U\Pz.H!^...n..!u.q.#X`?.9.{.M..........z.C.Al... B1.B.f8N....b)..........3..g.[.............Z........z..aA...I...{.7..

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63425)
Category:	downloaded
Size (bytes):	315045
Entropy (8bit):	5.470972207090544
Encrypted:	false
SSDEEP:	3072:7aOD2q1BSK7x5jfw71nUNdFIh0qrMdB8pbKQJaZkNeQHUC5SIui/+a:Wzq1Bzc71UNhqrMgpbLaZkNfHHWa
MD5:	D8A1FE8B9FD01233B8A030EA79C21DF0
SHA1:	1B2B4474F72FCEE56977101E7C85A8201F730903
SHA-256:	91DEC32BF6596B875CDEB8C7BFFC8B5029A870657D3D7C790E8939F17E24DC20
SHA-512:	C15DBBD27873E22558239D6671B7FA05107A348D44BEC9CD560B8AA6D443D4A86BBBC38FC6F2C18E4D4C82852741B7C995E3E80A1E95B04A0D2DBDA12DCB6F0F
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js
Preview:	var Core=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/",n(n.s=68)}([fun

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1211)
Category:	dropped
Size (bytes):	1261
Entropy (8bit):	5.340315611373646
Encrypted:	false
SSDEEP:	24:/BLEQuC0F6lq5lEYwy5WqogVeESgVeId4PXsHrIW:Z4jFYq5lpwW7vdd4PXgrIW
MD5:	CB9BFA0FBDD957FBE7F4841B70341DB2
SHA1:	9CAD12A3580D3E4D340CB867E88B687C75564C5A
SHA-256:	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
SHA-512:	DF98C3262F64DA4EA9CACF75FF7CB685D71B69142D89F726AB3E13CF6F25432DC395D7C0950E1632F0E519F135B02FDA0753739189E51F1C9210ACA6692551DD
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js",["exports"],(function(e){"use strict";const o=e=>{let{color:o,isActive:t,inStock:r,isSmall:l}=e;const a=r\|\|void 0===r,c=l?"24px":"38px",n=l?"20px":"32px",i={borderRadius:"50%",borderWidth:"1px",borderStyle:"solid"},s={outer:{...i,display:"flex",alignItems:"center",justifyContent:"center",width:c,height:c,borderColor:t?"lowContrast":"transparent"},inner:{...i,borderColor:"ultraLowContrast",color:"ultraLowContrast",width:n,height:n,background:a?o:`linear-gradient(to left top, ${o} calc(50% - 1px), currentColor, ${o} calc(50% + 1px) )`}};return(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.outer},(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.inner}))};o.propTypes={color:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,isActive:(global.PropTypes\|\|guac["prop-types"]).bool,inStock:(

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3283)
Category:	dropped
Size (bytes):	3345
Entropy (8bit):	5.205184210840741
Encrypted:	false
SSDEEP:	96:Pdi5dgr2G2tvdbGZd1hdTrdEdEidKH5bKsaqexOAvHeMbMh:lSFkpNO1K5bja/reF
MD5:	1E4C3172663AD2ACC0CEC9723E93D39F
SHA1:	1610B980BB81B4A4330399C81A4B23A78A70C42B
SHA-256:	F23EC23F7792FF56FB516E06280BED56D3A80D1CFD8D48F22C2B1F93CA69F0D5
SHA-512:	B96520A05B04CB55617B582A9458E3AE547AD953D0B0FE3F573B5CE1F55AB1B92A5356C0E5575A2596B59365C24F9E5A1A1FB1ABC17B8E6E331A1DC0B3F7ACBF
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/bs-FlyoutMenu-Component-229d1624.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-Toggle","~/c/bs-index2"],(function(e,o,t,p){"use strict";var a={toggleId:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,activeProps:(global.PropTypes\|\|guac["prop-types"]).object,label:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,renderCustomIcon:(global.PropTypes\|\|guac["prop-types"]).object,renderCustomContent:(global.PropTypes\|\|guac["prop-types"]).oneOfType([(global.PropTypes\|\|guac["prop-types"]).bool,(global.PropTypes\|\|guac["prop-types"]).element,(global.PropTypes\|\|guac["prop-types"]).node]),id:(global.PropTypes\|\|guac["prop-types"]).string,isActive:(global.PropTypes\|\|guac["prop-types"]).bool,enableNoOverlapDropdown:(global.PropTypes\|\|guac["prop-types"]).bool,widgetId:(global.PropTypes\|\|guac["prop-types"]).string,overrideIconStyle:(global.PropTypes\|\|guac["prop-types"]).object,dataAid:(global.PropTypes\|\|guac["prop-types"]).string,hasHover:(global.PropT

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11728, version 1.0
Category:	downloaded
Size (bytes):	11728
Entropy (8bit):	7.9793276091352485
Encrypted:	false
SSDEEP:	192:klyIZ5n3ROBQn0nXAdzXVIuiRdTgo4NL7WVvSat6YC/B67QuQyJGFtNdo/U5qE8F:gX3RAu0XAdzquw6dSVvS86YC/aQuv8lO
MD5:	B2845477C209263ADB2F8D6059491758
SHA1:	76C6F1F64027566CB5CBF88BC642B708D34D1302
SHA-256:	8F40676C64A72CB5D80952071B7A2F371650D7B2BB787EA01D8C5BC88EF734C7
SHA-512:	C07F84E8C169A79253C2EEA35E8B9A964A94203C20ADD14742840CFA8A084317C3792696D5157A961273637EC206C7F8DC9332C9DA4850F5716E5D956502E708
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2
Preview:	wOF2......-.......k...-v............................^...`........0..R.....6.$..8. ..d..K...AS.".8..Do@.%..$....!....$..d....}.'.J.L..~..w..a..?....Or.....O.J....`bA.....6v.e.[.]...u^mW[_m..U.rt.zKE......~..v....C..aRRI...A.-T.....?.O.....q...`x..O.&8@...R.....vC.v.@....\...... ..R.o`.@.B...".hT......jw.T.&..5.X..2K&....lr..g..p.d.,...'".:...?.L9..T.........k.M..k!.......zwY....N..q......FEAB...l......0..U.tn..y.^>6..........y.B....,...S#19.XB8...y....5f.!.r.%.......B,T..(.........8....D..J.$.].4.`.....bxN.6.....k{...\..L..4.p.#...x....b....+..F....G......L..y.$d.Be.].......C.^>...IC.....\|.!..c...C..'....5@.}..:......I:...^r.....0m$.{0.ce.XC...;<OR..a.....lg..=1....P.....=...a.N..o...........T..w.4...ev/.]<...x.........o:...$.Y....."....3Zb..0:.J....."B....&Fp.p.3..m!V..C....@!.........=P...2.}..J...@...."..&[O{....=.h ....xr[Qh].....,..+.c[..m...;.F.+.......8u.$E.......u.q<n..\|%.....R...pl....H.:.+...s.$*E.).V..@+.......G...w.Y...@..lv .m.j.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20947)
Category:	downloaded
Size (bytes):	24399
Entropy (8bit):	5.2375624098374
Encrypted:	false
SSDEEP:	384:UNoz5VHqeg0VzpiyiwffnnPacVorjFtteVT36FCLCpKe9plq2D:ME5qeg0Rp8wffnPVEjFtteEFiSbbl3D
MD5:	753CB19EE1A756E46FAA0F118B1B4E01
SHA1:	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC
SHA-256:	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
SHA-512:	4482C4D5F2F93DE8E095C549994A7783FA55CD1A6C4C9CC5E697CC2E2F00C98B04D5CB958CC1ADC4D0EF67F300BE014E112AE1D992487F40EB25BC93E8B47AAA
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js
Preview:	define("@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js",["exports","~/c/_rollupPluginBabelHelpers","~/c/_commonjsHelpers","~/c/interopRequireDefault","~/c/_react_commonjs-external"],(function(e,t,n,i,r){"use strict";var s=n.c((function(e){function t(n){return e.exports=t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e.exports.__esModule=!0,e.exports.default=e.exports,t(n)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports})),o=n.c((function(e){var t=s.default;function n(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,i=new WeakMap;return(n=function(e){return e?i:t})(e)}e.exports=function(e,i){if(!i&&e&&e.__esModule)return e;if(null===e\|\|"object"!==t(e)&&"function"!=typeof e)return{default:e};var r=n(i);if(r&&r.has(e))return r.get(e);var s={},o=Object.defineProperty&&Object.getOwnPropertyDescr

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.32955468303281
Encrypted:	false
SSDEEP:	6:FSPD8WUDDSBSyFbNemGHr9EJiKWaEwI8WUDDn:c5UDGBSyCTHr+pWTwGUDr
MD5:	8F12765EB30FBDCFCDC116D13F7FC272
SHA1:	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6
SHA-256:	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
SHA-512:	7AA2F396B105BCCF2B943FD2AC60929D8BF3A0EB8574B77451CB29816DF8ACDCD07694B526D7E4585F849DFDA3A0FE6E95661179E13F682DBF54098D98154BFB
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js
Preview:	define("@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js",["exports"],(function(i){"use strict";i.N="-249vw"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-navigationDrawer-27f5f1f5.js.map.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107922
Entropy (8bit):	5.16833322430428
Encrypted:	false
SSDEEP:	1536:rrgGXmRRShRLWvm1y+bvdVa/AfVcclozOshAZpXZgiLxdONPam1ZJs6Q8FBirniQ:rrLbba/UEHw
MD5:	6A7950CC31489069917BF817B62B2BFE
SHA1:	44AAB6E9B8FDBAA23EA297CE69E26422277907C0
SHA-256:	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
SHA-512:	0329712BC9EC144910DEE414B70181C4FD4145B65C78E2628BEE547A5DBC8D48BACD3BAA350451437C740493875DDD47FEC66C2C9189AA823A7B95DE8E9FA9F4
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("scc-c2",[],e):"object"==typeof exports?exports["scc-c2"]=e():t["scc-c2"]=e()}(self,(()=>(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e);var n={};t.r(n),t.d(n,{_isDebug:()=>d,debug:()=>O,error:()=>g,info:()=>h,log:()=>h,setDebug:()=>b,warn:()=>w});var r={};t.r(r),t.d(r,{cmdLogEvent:()=>Yo,cmdLogPerf:()=>ti});var o,i,a,c,u,f=(o="",a={document:i=Object.create({get cookie(){return o},set cookie(t){o=t}})},c={},"undefined"==typeof window?{window:a,document:i,navigator:c}:{window:window\|\|a,document:window.document\|\|i,navigator:navigator\|\|c}),s=function(){return f.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	5.203352394673048
Encrypted:	false
SSDEEP:	24:pzBLgJHHVvC+dKbywqIN6ttVFRJB1i/uwBrV7DtZHrIvyU:zSkjbQxz3+uQ7RxrIx
MD5:	62A914B2C847D4D02B76164D7A2A54C6
SHA1:	20D9F49A90A51FA6C8420640610DF77F7A96D919
SHA-256:	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
SHA-512:	E67D3D9F68EF3151D93DEDAA3530DF89F0C957F08561E93134B219DEC23C2A1FE0D109AC666619526742C5411E4636ECE416A3AD1148C1AD0861F0050B41D3DE
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js
Preview:	define("@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js",["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.a=n,e.b=function(e){if(e.__esModule)return e;var n=Object.defineProperty({},"__esModule",{value:!0});return Object.keys(e).forEach((function(t){var r=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,r.get?r:{enumerable:!0,get:function(){return e[t]}})})),n},e.c=function(e,n,t){return e(t={path:n,exports:{},require:function(e,n){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==n&&t.path)}},t.exports),t.exports},e.g=function(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_commonjsHelpers-67085353.js.map.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1535x1021, components 3
Category:	dropped
Size (bytes):	220414
Entropy (8bit):	7.979263536328385
Encrypted:	false
SSDEEP:	3072:zmYreP02VlixvN/3evRiFPc9HxSetyc7YIj43UjkrRersUVuGy/khrwXFUhwp0ye:CXPHixvN/C4FERXl7ndoepVvy/1XR0oG
MD5:	9136B98B23F9699551E487D3E4A783AC
SHA1:	C8D723ED969C52F2590517C2BCC3C589D1D823E7
SHA-256:	F0BAC715E3178D69E243AE17CA82F0A3EA0C0FF4F0E4AFB7417E0AD675F1F477
SHA-512:	4992BC9F8542D0F37756A058698D28C45DDC867C40584FB9D258F342F1CBD65387D77C0E78077A4B4201658ECA679F5360B24FB83AB51A53A60553E077336E23
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100...........................................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................Y........................!.1A.."Qaq2....B...#R..3br..$....%CScs....&4'56DT....dt..E.7eu................................1.......................!1.A.Q"..2aq3B..#4.R................?..f...........Zh....b..J....s...D.4.....9.R..C..H.)..Qa@.k....Q .`.@sOPS..K.S..qJ.`.oP"...j.. ..0qMJ..S.LP.y.9.P...gz.m..-.M.0..!.A.j..JaK;SR(.l...=T..R.J..T...4...:..OQ...X...1.@....)...t..S.1R.J..T...1.TH.L...H...lU&!.=8....H.3K.:jV:"F....50...X.N...e..MD..(`>i.s..H..5.J.......A.).>.$....R1PaZ...@.!..f...,T.K....9..Df...\|..0."\.T...J.....i...&.>..6..P...#O@....LE.+L*.s..&..7.D.0.Q'&....c.:\|T.S......D-ZA.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	dropped
Size (bytes):	437
Entropy (8bit):	5.418011449016951
Encrypted:	false
SSDEEP:	12:cTTgBSyk+Jb8KCjoD3BMXkKbr4Si+THr+pWTDTd:cTTgBL3fCjqMXfr4SiSHrIYDTd
MD5:	21AD22788E6CAA18A4E9E57F7372B108
SHA1:	50EBDD2452193BEAB7D1899F788FBBF32D90DD55
SHA-256:	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
SHA-512:	4237775466FC3A94FE9FD769B9A186DBF8559FE5E06442EA107872462B1591DA2EBFC2786DD8D05495538428F668D940A4D851AE8E13DAFBBF8B763EAAD2F063
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js",["exports"],(function(e){"use strict";const{headerTreatments:{FILL:n,FIT:t,INSET:o,BLUR:a,LEGACY_BLUR:c}}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.A="accent",e.B=a,e.C="category",e.F=n,e.I=o,e.L=c,e.N="neutral",e.P="primary",e.a="none",e.b=t,e.c="light_dark"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-overlayTypes-e1dbe765.js.map.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13834)
Category:	dropped
Size (bytes):	13891
Entropy (8bit):	4.645788246161265
Encrypted:	false
SSDEEP:	192:49+DrRmRAiyq602NNTV0afQQYrAJ9wzkENGWHl2JBpfodMjHJv8k9fopl1jn:4Bp49ykE8WQs2Vv8k9fGTjn
MD5:	C7B1DBB0EEF8600D5F57536998855E4D
SHA1:	03908243C34D5A373ACBA694EB16E30F088B4F7D
SHA-256:	53DA7DD341F1EF0C484A7B56A17D86669287DA5D082AAA8A0AF04FD3816B6631
SHA-512:	56EE4961F4C03A15C79252AD9C3CAD93573AC785881541EA32F83389996F4E8C074FBC397FF9F0B218121A3D8E1A9CEF101D088B4BCFB2353D6A311D5F60DCBA
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-modernThinRound-ced97fbd.js",["exports"],(function(e){"use strict";const a=(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M5.643 19.241a.782.782 0 0 1-.634-.889c.317-2.142 1.62-4.188 3.525-5.244l.459-.254-.39-.352a4.89 4.89 0 0 1-.797-6.327 4.747 4.747 0 0 1 2.752-2.003 4.894 4.894 0 0 1 6.092 5.72c-.211 1.042-.802 1.97-1.59 2.683l-.308.28.459.253c1.876 1.04 3.185 3.131 3.53 5.26a.765.765 0 0 1-.742.883c-.367.005-.697-.25-.753-.613-.52-3.384-4.067-6.087-7.702-4.324-1.628.79-2.714 2.511-3.014 4.313a.76.76 0 0 1-.887.614zm2.873-10.36a3.36 3.36 0 0 0 3.356 3.355A3.36 3.36 0 0 0 15.23 8.88a3.361 3.361 0 0 0-3.358-3.357A3.36 3.36 0 0 0 8.516 8.88z"});var l={__proto__:null,account:a,person:a,magGlass:(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M19.504 18.461a.76.76 0 0 1 0 1.038.652.652 0 0 1-.956 0L15.2 15.993a6.142 6.142 0 0 1-3.83 1.353C7.858 17.346 5 14.353 5 10.673 5 6.994 7.858 4 11.371 4c3.513 0 6.371 2.994

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	5.609970428503769
Encrypted:	false
SSDEEP:	6:FSPOhWNjZTivBSyv5F/kpIdiEjGWF+ktxRmGHr9EJiKWaEkWNjZTiKF:cUZBSyv5ZdihWF+CRTHr+pWTkAF
MD5:	DAA79AD7558674F6A12D962ABF47F2F6
SHA1:	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7
SHA-256:	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
SHA-512:	B335EBCB0C982398C56D9A5F68F5D4E36A850AB139976BD94354C7CD18F1F370866A74F46FCD399F46E410D59AF7FBA890A17003BB4FD456DD43A6DE531D28F9
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js
Preview:	define("@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js",["exports"],(function(o){"use strict";o.D="DESKTOP_NAV_COVER",o.M="MOBILE_NAV",o.N="NAV_DRAWER",o.S="SIDEBAR",o.a="DESKTOP_NAV"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-searchFormLocations-c86f2a99.js.map.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32974), with no line terminators
Category:	downloaded
Size (bytes):	32974
Entropy (8bit):	5.23537467325935
Encrypted:	false
SSDEEP:	768:8QMz7Xi7utc79QusIPgexnKnPxPC7JWU/VHeLNsiQk/c4ur2McV2xdnGYeCjWQTS:si79wq0xPCFWsHuCleZ0j/TsmUt
MD5:	F3B90464A4B0C8F7005E960B8C4C1C90
SHA1:	FC0715FF298495D44E6B9F2537C003E8F50E476C
SHA-256:	262BBAAEFFC4F7915476CE13DCE389A447D18008C1995C435B8292D6AD667009
SHA-512:	90775E5BA5E48968F15D488D3488483D15605F757BA4B5DBEA176D4CF789CB2C9FCDCCDCC3E06525022A7738B53803F55189701228EDAA7308A1CFF04237FC09
Malicious:	false
Reputation:	low
URL:	https://met-aa-mass-klog-in.godaddysites.com/sw.js
Preview:	(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:()=>a}),s(913);class a extends Error{constructor(e,t){super(((e,...t)=>{let s=e;return t.length>0&&(s+=` :: ${JSON.stringify(t)}`),s})(e,t)),this.name=e,this.details=t}}},524:(e,t,s)=>{s.d(t,{h:()=>a}),s(125),s(913);const a=null},594:(e,t,s)=>{function a(e,t){const s=new URL(e);for(const e of t)s.searchParams.delete(e);return s.href}async function n(e,t,s,n){const r=a(t.url,s);if(t.url===r)return e.match(t,n);const i=Object.assign(Object.assign({},n),{ignoreSearch:!0}),c=await e.keys(t,i);for(const t of c)if(r===a(t.url,s))return e.match(t,n)}s.d(t,{F:()=>n}),s(913)},536:(e,t,s)=>{s.d(t,{x:()=>r}),s(913);const a={googleAnalytics:"googleAnalytics",precache:"precache-v2",prefix:"workbox",runtime:"runtime",suffix:"undefined"!=typeof registratio

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	537
Entropy (8bit):	5.088671195688553
Encrypted:	false
SSDEEP:	12:YWGhtXIoWFJsTPXPbjnoG30PwTPXPbjnoG3Fp8Wr5p3:YZXIoWofPfB30PofPfB3T8Wlp
MD5:	77DBF2CC48C0ABEFEF7ADCBBDB29B525
SHA1:	88572A51ED8ACA2B08AEFF7F0C4A4097A74A660A
SHA-256:	AD9C56FF25342095CC0BD3ADC902D0C73E0E947FCA580EA735C564F9C671F451
SHA-512:	C9FA2169BFAC6A2CC5B13755FBAEA72A008C3F6C6F030B14D616220F66569092D39D7AE4A09FD7E7AF5BDA7AA9696010430EFACB3C62FC9990E31CE4CA65BECB
Malicious:	false
Reputation:	low
URL:	https://met-aa-mass-klog-in.godaddysites.com/manifest.webmanifest
Preview:	{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:192,h:192,m"},{"sizes":"512x512","type":"image/png","src":"//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:512,h:512,m"}],"name":"met-aa-mass-klog-in","short_name":"met-aa-mass-klog-in","theme_color":"#D22F25","background_color":"#D22F25"}

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	437
Entropy (8bit):	5.418011449016951
Encrypted:	false
SSDEEP:	12:cTTgBSyk+Jb8KCjoD3BMXkKbr4Si+THr+pWTDTd:cTTgBL3fCjqMXfr4SiSHrIYDTd
MD5:	21AD22788E6CAA18A4E9E57F7372B108
SHA1:	50EBDD2452193BEAB7D1899F788FBBF32D90DD55
SHA-256:	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
SHA-512:	4237775466FC3A94FE9FD769B9A186DBF8559FE5E06442EA107872462B1591DA2EBFC2786DD8D05495538428F668D940A4D851AE8E13DAFBBF8B763EAAD2F063
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js
Preview:	define("@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js",["exports"],(function(e){"use strict";const{headerTreatments:{FILL:n,FIT:t,INSET:o,BLUR:a,LEGACY_BLUR:c}}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.A="accent",e.B=a,e.C="category",e.F=n,e.I=o,e.L=c,e.N="neutral",e.P="primary",e.a="none",e.b=t,e.c="light_dark"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-overlayTypes-e1dbe765.js.map.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=met-aa-mass-klog-in.godaddysites.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.4.7&vg=f30e8a6a-249e-4b95-aca7-2880c7c5018f&vtg=f30e8a6a-249e-4b95-aca7-2880c7c5018f&dp=%2F&trace_id=bfbe8c8fd20c4c7aad2b3f86dc6813fd&cts=2024-09-28T03%3A19%3A12.180Z&hit_id=ebaf53be-5e5c-4b7d-a8fd-e292622b8a56&ht=pageview&trfd=%7B%22ap%22%3A%22IPv2%22%2C%22websiteId%22%3A%222f158a6c-081f-48be-a117-00e66578bab0%22%2C%22pd%22%3A%222022-12-29T08%3A21%3A49.290Z%22%2C%22meta.numWidgets%22%3A9%2C%22meta.theme%22%3A%22layout18%22%2C%22meta.headerMediaType%22%3A%22Image%22%2C%22meta.isOLS%22%3Afalse%2C%22meta.isOLA%22%3Afalse%2C%22meta.isMembership%22%3Afalse%7D&ap=IPv2&vci=1304048036&z=1522129567
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	304
Entropy (8bit):	5.609970428503769
Encrypted:	false
SSDEEP:	6:FSPOhWNjZTivBSyv5F/kpIdiEjGWF+ktxRmGHr9EJiKWaEkWNjZTiKF:cUZBSyv5ZdihWF+CRTHr+pWTkAF
MD5:	DAA79AD7558674F6A12D962ABF47F2F6
SHA1:	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7
SHA-256:	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
SHA-512:	B335EBCB0C982398C56D9A5F68F5D4E36A850AB139976BD94354C7CD18F1F370866A74F46FCD399F46E410D59AF7FBA890A17003BB4FD456DD43A6DE531D28F9
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js",["exports"],(function(o){"use strict";o.D="DESKTOP_NAV_COVER",o.M="MOBILE_NAV",o.N="NAV_DRAWER",o.S="SIDEBAR",o.a="DESKTOP_NAV"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-searchFormLocations-c86f2a99.js.map.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	5.275794886448015
Encrypted:	false
SSDEEP:	12:csTLaBSyTUXaPXAbDTc/NeL2QiTj+RVnIYQ2ofXgYFw1THr+pWT0Lv:cTBLTUXaPXAPTc/tTj+Hn/Q2CQYytHrI
MD5:	0D42FFB998A9CF7C25824CF365C7D0C9
SHA1:	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE
SHA-256:	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
SHA-512:	EE2711CED0E8936C0DDAE9CFBE1FFAFABF56766C4611DC5B68C50919EDFC6CD1F3C850A0599ED107E8F6555D54BB46B3395B957A74697BEA2A749814C270C0FD
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js
Preview:	define("@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e},e.a=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-_rollupPluginBabelHelpers-e83be766.js.map.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28371)
Category:	dropped
Size (bytes):	43720
Entropy (8bit):	5.21839478928372
Encrypted:	false
SSDEEP:	768:oe/cAF5jS31fqbEYG1u7VUT01TS3vZTfbBWfL8/fBG1u7VdrEt8Kww6teNY6bmM7:03IkHNFWqkUrE6NwRNDqMJ1YBipODmz
MD5:	5A6B85B96D4E9E8689ADB86DC02D0E1E
SHA1:	F46815FB37D1C7B46A793AF2D3CB7738D64BA489
SHA-256:	E20B2774BF751096D5825C113CAEE3CFAF84C5209CB16FA5FA9761CF3707936C
SHA-512:	BB916A3CE7440A6268F43BB421F554FAEF540333E1906B95D0AACC69FABD2FDEB8185E6BCC4F5741B7D62C8CB61F7ADCDEBBEFA9A14F1B01E530446A9A986BE3
Malicious:	false
Reputation:	low
Preview:	window.cxs && window.cxs.setOptions({ prefix: "c2-" });.window.wsb=window.wsb\|\|{};window.wsb["Theme18"]=window.wsb["Theme18"]\|\|window.radpack("@widget/LAYOUT/bs-layout18-Theme-publish-Theme").then(function(t){return new t.default();});.window.wsb["DynamicFontScaler"]=function(e){let t,{containerId:o,targetId:n,fontSizes:r,maxLines:a,prioritizeDefault:s}=e;if("undefined"==typeof document)return;const i=document.getElementById(o),c=document.getElementById(n);function l(e){return function(e){const t=parseInt(d(e,"padding-left")\|\|0,10),o=parseInt(d(e,"padding-right")\|\|0,10);return e.scrollWidth+t+o}(e)<=i.clientWidth&&function(e){const t=e.offsetHeight,o=parseInt(d(e,"line-height"),10)\|\|1;return Math.floor(t/o)}(e)<=a}function p(){if(!i\|\|!c\|\|t===window.innerWidth)return;if(c.hasAttribute("data-font-scaled"))return void function(){c.removeAttribute("data-last-size");const e=document.querySelector(`#${n}-style`);e&&e.parentNode.removeChild(e)}();t=window.innerWidth;const e=Array.prototype.sl

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1530
Entropy (8bit):	6.849727982876801
Encrypted:	false
SSDEEP:	24:jbGZlJzsWVXxJYCUxTsy2lok1he91Wwjx82lY2T3ouV6nXm3yJ3VK5eXoQG0:slJzsWVBezTuoqqQNn2xwWiJ3SVQv
MD5:	01A1DB03B75069ED57227AF8C08CA40C
SHA1:	C9BD27398E9914A7581F18E5ABBE491641886E3A
SHA-256:	C8EBC61D1A19199EDF15F9D82BC85FDA7A2EF00EF185C4355D3AED38924CF7D3
SHA-512:	95BBE55FFAE67DA614CEF5D711F2E1B19CE766C1B81C3640384550225B3F85439EA35C9FB024DFFB24444D44F87475D402BB0D783BEF7B88AEAFA99EEFD4EF6D
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:32,h:32,m"
Preview:	RIFF....WEBPVP8X........#.....VP8 ....P....$. .>i.E."....@....N.B=../7..`6.s.z%.-.].\|.Q.... 7...a..j...P.....\|...]w....%....R......6/..`. ..T...d.G...GW=wS.\\....,..?3....1.Aa..o:..".h...,..w..x.'..f'...h.W&i..o9..g....`W..m..C.....['...H.>.....N../i....k.... ...F...1&....\|..ct..qB.rk.Qg...[..-Sq...;.../q..z.;N..T...B3z..+..kg...\..H.....!....n..S....].....(6.^..+..O.).....-....."....i.]f.S.t.O....p.q3.y.-..Wh.....d....L..C...._...e..)^....SY.C.#T..^./..1.O9.P...bEEY......b....?....].c.C.z'.P..7...S............1........EXIF....Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100....................$........... .......XMP ....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	5.182741116673583
Encrypted:	false
SSDEEP:	6:F9oNS2BSyRbWsCJwvYtMe1mGHr9EJiKWaO6SZF:HgS2BSyEsCJB1THr+pWIS7
MD5:	8578A331AD09BB2EF6359FEC3916BEFC
SHA1:	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6
SHA-256:	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
SHA-512:	B034DDDA04F8DEE0D174651D13A89AF9FE5ED28E1E81FAB229AFA119B9B0A9C418E324FFCE28E909D8D596BEAE98FA1AC0BA09C74E7E7689B945C032088C5E18
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js
Preview:	define("@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js",["exports"],(function(e){"use strict";const n=global.React\|\|guac.react;e._=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_react_commonjs-external-a1351e34.js.map.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.778677988524611
Encrypted:	false
SSDEEP:	3:WlT1ZrF+1WxJ6aLn:Wd1ZR+1KJ6s
MD5:	9639421C88C869682FCD0F6E2CED9E8C
SHA1:	E9DF9AD8D3B5E501E21F7C25D4806E5C5418E0D6
SHA-256:	CF29C206707EEE5BE29405DF14018ECB8415048D6B02BB1B8D5FE45742CBC6E2
SHA-512:	9AEA4024E302E9496359F7F5053D0A363D647A2E87718D7FDB88AF5513E53C49CBF66D330681AB14FD0DFD7C90AD490D624FB8202D3C0D66AD86EEA73025B669
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/static/transparent_placeholder.png/:/rs=w:365,h:365,cg:true,m,i:true/qt=q:1/ll=n:true"
Preview:	RIFF&...WEBPVP8L..../l.[.......$..o"..........

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8076)
Category:	dropped
Size (bytes):	8146
Entropy (8bit):	5.193570786754158
Encrypted:	false
SSDEEP:	192:bXex8k/4ro1H29Lm90fwK4cal8k5AV+IZ7/UHpvx/nvvdlFwmlqkk1:bXex9QriHqLm90fwncal75AV+IZ78HF6
MD5:	D0BF5E9E6E778CE2D940F214EC04700C
SHA1:	2ECB604E1F2E8CA95A0413DB58C153B9AA710A29
SHA-256:	1B7F2E117669F2643EA895B6BEDB818796AF009F19A6FC1F8B8A1DC9C30B6D9B
SHA-512:	DC1A45C8946109AB2E61509A977287020136B03555CC2FAC0B769BB20ADC78268929AE857F695626E86D8AC6E805C3731D33374360406E86FC98F643A3523E5C
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/bs-layout18-Theme-publish-Theme-5bf6e4ee.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-index3","~/c/bs-legacyOverrides","~/c/bs-modernThinRound","~/c/bs-defaultSocialIconPack","~/c/bs-loaders","~/c/bs-index2","~/c/bs-index","~/c/bs-overlayTypes"],(function(e,t,r,o,a,l,n,i,s,d){"use strict";const{colorPackCategories:g,buttons:h}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,{LIGHT:m,LIGHT_ALT:c,LIGHT_COLORFUL:u,DARK:p,DARK_ALT:b,DARK_COLORFUL:y,COLORFUL:f}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.paintJobs,S={[d.F]:"accent-overlay",[d.b]:"accent-overlay",[d.I]:"category-alt-solid",[d.B]:"accent-overlay",[d.L]:"accent-overlay"},H={defaultHeaderTreatment:d.F,hasLegacy:!0,heroContentItems:["tagline","tagline2","cta"],nonHeroContentItems:["phone"],imageTreatments:S};var C={id:"layout18",name:"dawn",packs:{color:"000",font:"lato"},logo:{font:"primary"},packCategories:{color:g.NEUTRAL},headerProperties:{alignmentOption:"center"},header

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	242257
Entropy (8bit):	5.517949479561666
Encrypted:	false
SSDEEP:	3072:7u8xUu8gpdmSOvTdTK4Tn9TnatTn9TnApfeVH0pdmSO3iTIT7JlDnDQj3jPGIXSQ:Y3A/6hbCxJFxKhUc
MD5:	55BAF821A59FAD53AA754C85AE19D0EA
SHA1:	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D
SHA-256:	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
SHA-512:	791B8AA2E321324B55731B5F69239F86A0602F19FEB833BFC492D525EA132BC23D1C6A3907957992C655742F38AEDD7819A585E6B7A7F3C68126E0DC739DFC1B
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js
Preview:	define("@widget/LAYOUT/c/bs-index3-55bc27af.js",["radpack","exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-overlayTypes","~/c/bs-index2","~/c/bs-index","~/c/bs-dataAids","@wsb/guac-widget-shared@^1/lib/components/ColorSwatch","@wsb/guac-widget-shared@^1/lib/components/Carousel","~/c/bs-navigationDrawer","~/c/bs-searchFormLocations"],(function(e,t,a,r,o,l,n,i,c,s,g){"use strict";class p extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("Background")){}a._(p,"propTypes",{className:(global.PropTypes\|\|guac["prop-types"]).string,backgroundSize:(global.PropTypes\|\|guac["prop-types"]).string,backgroundPosition:(global.PropTypes\|\|guac["prop-types"]).string,style:(global.PropTypes\|\|guac["prop-types"]).object,imageData:(global.PropTypes\|\|guac["prop-types"]).object,mobileWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,desktopWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,blur:(global.PropTypes\|\|guac["prop-types"]).bool}),a._(p,"defaultPr

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 36x32, components 3
Category:	dropped
Size (bytes):	1802
Entropy (8bit):	6.81128327511612
Encrypted:	false
SSDEEP:	24:/lo1K1he91Wwjx82lY2T3ouV6nXm3yJ3VK5eXoQGOc1sp8vr98rKGue8qUCuhLOv:toCqQNn2xwWiJ3SVQ5iWVKGpUCue/og
MD5:	E0FBD748A9BAA3E378126E08C1C0CB3A
SHA1:	6F0048805FE72B5BD4D6A2F03EB5FC4D51F76AB1
SHA-256:	79571F643B6665CABF0481B211EAFDDD9DCCAF1EB30DCC2BE92615F990557560
SHA-512:	1F9469D8D638D650BB2D8C5C8673AB1F2CE166BD50F12E3023827AFA6D849C212277BCA803509BCA7F735DEE7F6343992EAE14BDD7E50BDDF8C6EAF7C4A3243E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100....................$........... ..........+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CFD7CE372E5F11EC806FEA7E355604F5" xmpMM:DocumentID="xmp.did:CFD7CE382E5F11EC806FEA7E355604F5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CFD7CE352E5F11EC806FEA7E355604F5" stRef:documentID="xmp.did:CFD7CE362E5F11EC806FEA7E355604F5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	390
Entropy (8bit):	5.206764812811324
Encrypted:	false
SSDEEP:	6:F9o8fAX7s4Bszv4yA5FKJyR8aBzzNWLc3oqcqAdfFwC6emGHr9EJiKWayfAX7A:HGs4Bkv4yA5sy+go9Hf+eTHr+pWOA
MD5:	C86B7F8224FA45FB1682AC94D8F75AC6
SHA1:	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239
SHA-256:	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
SHA-512:	B239BAC43D973D0076F4E0C0720906560B0AED76472F50202841B2EABB66C5AD5774E35449007AA2DC3E6A096330AB14D1AA9374645136C89A20B45E4BBDBC52
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js
Preview:	define("@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js",["exports","~/c/_commonjsHelpers"],(function(e,o){"use strict";var t=o.c((function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports}));e.i=t})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=interopRequireDefault-c83974f7.js.map.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 365 x 365, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	258
Entropy (8bit):	3.0628643531958333
Encrypted:	false
SSDEEP:	3:yionv//thPkIllBtWTMikF+qhl/0wNlcZe3ajkolFSzqmDLDtsup:6v/lhPkYlB0TMiW+qhKo6oYpSGmRjp
MD5:	6BB8052BC7F2C0D9300F0E0193179E4B
SHA1:	BA6EFD84345FF91C8D84E51523F896B58417AD14
SHA-256:	FF6F74E26052855FCD1116EB2BF61829F7400511CAD592C18C61F62C4CF72888
SHA-512:	D0E119E68FA20313C66035666CF04DCA10BCF2FCDDB100AC43A47880480164C30B2BCC46E4C871E893FC9E1A75781A62196CA81893D564FD7527A5F4B5FAAD8A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...m...m.............PLTELiqM..:....tRNS.@..f....pHYs..........{Rk....IDATx..........Om.................................................................................................................................................IEND.B`.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	266
Entropy (8bit):	5.182741116673583
Encrypted:	false
SSDEEP:	6:F9oNS2BSyRbWsCJwvYtMe1mGHr9EJiKWaO6SZF:HgS2BSyEsCJB1THr+pWIS7
MD5:	8578A331AD09BB2EF6359FEC3916BEFC
SHA1:	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6
SHA-256:	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
SHA-512:	B034DDDA04F8DEE0D174651D13A89AF9FE5ED28E1E81FAB229AFA119B9B0A9C418E324FFCE28E909D8D596BEAE98FA1AC0BA09C74E7E7689B945C032088C5E18
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js",["exports"],(function(e){"use strict";const n=global.React\|\|guac.react;e._=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_react_commonjs-external-a1351e34.js.map.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3283)
Category:	downloaded
Size (bytes):	3345
Entropy (8bit):	5.205184210840741
Encrypted:	false
SSDEEP:	96:Pdi5dgr2G2tvdbGZd1hdTrdEdEidKH5bKsaqexOAvHeMbMh:lSFkpNO1K5bja/reF
MD5:	1E4C3172663AD2ACC0CEC9723E93D39F
SHA1:	1610B980BB81B4A4330399C81A4B23A78A70C42B
SHA-256:	F23EC23F7792FF56FB516E06280BED56D3A80D1CFD8D48F22C2B1F93CA69F0D5
SHA-512:	B96520A05B04CB55617B582A9458E3AE547AD953D0B0FE3F573B5CE1F55AB1B92A5356C0E5575A2596B59365C24F9E5A1A1FB1ABC17B8E6E331A1DC0B3F7ACBF
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-FlyoutMenu-Component-229d1624.js
Preview:	define("@widget/LAYOUT/bs-FlyoutMenu-Component-229d1624.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-Toggle","~/c/bs-index2"],(function(e,o,t,p){"use strict";var a={toggleId:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,activeProps:(global.PropTypes\|\|guac["prop-types"]).object,label:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,renderCustomIcon:(global.PropTypes\|\|guac["prop-types"]).object,renderCustomContent:(global.PropTypes\|\|guac["prop-types"]).oneOfType([(global.PropTypes\|\|guac["prop-types"]).bool,(global.PropTypes\|\|guac["prop-types"]).element,(global.PropTypes\|\|guac["prop-types"]).node]),id:(global.PropTypes\|\|guac["prop-types"]).string,isActive:(global.PropTypes\|\|guac["prop-types"]).bool,enableNoOverlapDropdown:(global.PropTypes\|\|guac["prop-types"]).bool,widgetId:(global.PropTypes\|\|guac["prop-types"]).string,overrideIconStyle:(global.PropTypes\|\|guac["prop-types"]).object,dataAid:(global.PropTypes\|\|guac["prop-types"]).string,hasHover:(global.PropT

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3043)
Category:	dropped
Size (bytes):	3092
Entropy (8bit):	5.221416224205306
Encrypted:	false
SSDEEP:	96:/NSXU/vuELNSXtiF7ANSXTJrrBNSXt7X5wqh:VcKncc7ycd3cd5w8
MD5:	852CBC5322260E00B44F2C682F88B2C7
SHA1:	BCAF229E6134F43EB5F974C9891E4D16FAF1D344
SHA-256:	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
SHA-512:	F031B43F7FA0DA001F71DDCFFE5E322A94C5F1F52F7C4D67D34880243D9D361AC55C0E5001DD004390867CB31E5DEF5D4D9282E6E2ECB9AEC0E880AA5B786BA3
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-loaders-fffeeba5.js",["exports","~/c/bs-index3"],(function(e,a){"use strict";e.B=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).createElement((global.React\|\|guac.react).Fragment,null,(global.React\|\|guac.react).createElement(c,{viewBox:"0 0 44 44",width:"3em",height:"3em",fill:"currentColor"},(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M31.968 23H12.032c-.57 0-1.032-.448-1.032-1 0-.553.462-1 1.032-1h19.936c.57 0 1.032.447 1.032 1 0 .552-.462 1-1.032 1"})),(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX.Style,null,a.k.loaderBalance)),style:{"> svg":{animation:"balance 1s infinite cubic-bezier(.62,.06,.33,.79);",transformOrigin:"center"}}},e)},e.C=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).crea

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21556)
Category:	dropped
Size (bytes):	21592
Entropy (8bit):	5.118279269599776
Encrypted:	false
SSDEEP:	384:/z+lhnKuowsx9pGxw57yty3eOHenS934osy:JioFP934Y
MD5:	1C56940A864F144FAE2EB40EE952CB94
SHA1:	EBFC754CE962A1F9025853F2995B3987F0383D87
SHA-256:	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
SHA-512:	AEF4B08A01D56BD8855653499B375DB11D8FD7D67C4BCDC74323236BADC47B70DDFEDC14CE89828736C63FFE147BF71C14311580296D41B59F11A3305993ADDD
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("tti",[],e):"object"==typeof exports?exports["tti"]=e():t["tti"]=e()}(window,function(){return n=[function(t,e){var n=function(){return this}();try{n=n\|\|Function("return this")()}catch(t){"object"==typeof window&&(n=window)}t.exports=n},function(t,e,n){"use strict";e.__esModule=!0,e.setCustomProperties=e._sendWebVitalsData=e._collectVitals=e.calculateTTI=void 0,n(2);function i(){0<s.timeToInteractive&&setTimeout(function(){window._expDataLayer=window._expDataLayer\|\|[],window._expDataLayer.push({schema:"add_perf",version:"v1",data:window._tccInternal?{type:"pageperf",properties:s,custom_properties:c}:{timing_object:s,is_hard_navigation:!0,custom_properties:c}})},0)}function r(){var t,e,n=(r=0<arguments.length&&void 0!==arguments[0]?arguments[0]:{}).name,r=r.value;s[n]="CLS"===n?r:Math.round(r),"timeToInteractive"===n&&(s.hasOwnProperty("FID")?i():(t=0,e=setInt

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	390
Entropy (8bit):	5.206764812811324
Encrypted:	false
SSDEEP:	6:F9o8fAX7s4Bszv4yA5FKJyR8aBzzNWLc3oqcqAdfFwC6emGHr9EJiKWayfAX7A:HGs4Bkv4yA5sy+go9Hf+eTHr+pWOA
MD5:	C86B7F8224FA45FB1682AC94D8F75AC6
SHA1:	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239
SHA-256:	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
SHA-512:	B239BAC43D973D0076F4E0C0720906560B0AED76472F50202841B2EABB66C5AD5774E35449007AA2DC3E6A096330AB14D1AA9374645136C89A20B45E4BBDBC52
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js",["exports","~/c/_commonjsHelpers"],(function(e,o){"use strict";var t=o.c((function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports}));e.i=t})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=interopRequireDefault-c83974f7.js.map.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	dropped
Size (bytes):	583
Entropy (8bit):	5.275794886448015
Encrypted:	false
SSDEEP:	12:csTLaBSyTUXaPXAbDTc/NeL2QiTj+RVnIYQ2ofXgYFw1THr+pWT0Lv:cTBLTUXaPXAPTc/tTj+Hn/Q2CQYytHrI
MD5:	0D42FFB998A9CF7C25824CF365C7D0C9
SHA1:	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE
SHA-256:	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
SHA-512:	EE2711CED0E8936C0DDAE9CFBE1FFAFABF56766C4611DC5B68C50919EDFC6CD1F3C850A0599ED107E8F6555D54BB46B3395B957A74697BEA2A749814C270C0FD
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e},e.a=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-_rollupPluginBabelHelpers-e83be766.js.map.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2368)
Category:	downloaded
Size (bytes):	2416
Entropy (8bit):	5.220048787531057
Encrypted:	false
SSDEEP:	48:UfRV3dTEDPoRidiLEjTyAmzl584CC6zS72F7vNXuCyjSdad6f2vNdbTrID:iRXE7ocQLlWSwSQL5uCyjSdad82vNdb6
MD5:	ABFD2ADA44521989F7C040FC3EAEF6C9
SHA1:	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21
SHA-256:	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
SHA-512:	89CF1F0AD4AB25C95221F043FAC57CADE9F620F20EDEC099BA84288808C6589522E8F3FD3BE9DD4CC26141511B98C2FA27F2780DA3551D1755BF25C5ACE9BA80
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-Toggle-37f740c7.js
Preview:	define("@widget/LAYOUT/c/bs-Toggle-37f740c7.js",["exports","~/c/bs-_rollupPluginBabelHelpers"],(function(e,t){"use strict";function o(e,t,o){let s=e;for(;s;){const e=s.getAttribute&&s.getAttribute(t);if(e&&(void 0===o\|\|e===o))return!0;s=s.parentNode}return!1}function s(e,t){return o(e,"id",t)}class l extends(global.React\|\|guac.react).Component{constructor(){super(...arguments),this.handleClick=this.handleClick.bind(this),this.handleToggle=this.handleToggle.bind(this),this._id=(global._\|\|guac.lodash).uniqueId(),this.state={open:!1}}componentDidMount(){this._link=(global.ReactDOM\|\|guac["react-dom"]).findDOMNode(this),document.addEventListener("click",this.handleClick,{capture:!0})}componentWillUnmount(){document.removeEventListener("click",this.handleClick,{capture:!0})}shouldClose(e){const{closeAttr:t,ignoreCloseAttr:l,closeOnOutsideClick:n,toggleId:i}=this.props;let a=!0;return t?a=o(e.target,t):l&&(a=!o(e.target,l)),!a&&i&&n&&(a=!s(e.target,i)),a&&!s(e.target,this._id)}handleClick(e){

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1875)
Category:	downloaded
Size (bytes):	1935
Entropy (8bit):	5.308478233131919
Encrypted:	false
SSDEEP:	48:UTVqI1xGzgB7gBfYRN0a0qMoAua0pqAddrIt:0VqQzMfYR2xFua0pqAddE
MD5:	42A956F14F8E89C314FA201AB5FC9388
SHA1:	67651220687C3869FD6FAB960AE4B3CA53776E2F
SHA-256:	A9D6036466352258F71ADF94E2EB6DA8F9BEEE5FCBC73351180D1C8331D53949
SHA-512:	0A1F46367A7FB882029086B50A385439EA31D49F3C44C67B0BD77A4782970F174DB85791E5CEC60466322E2451D5F697163ADED5691DB224114381F8D8ACF763
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-LinkAwareComponent-84648e01.js
Preview:	define("@widget/LAYOUT/bs-LinkAwareComponent-84648e01.js",["exports","~/bs-FlyoutMenu-Component","~/c/bs-_rollupPluginBabelHelpers"],(function(e,t,o){"use strict";const{PUBLISH:n}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.renderModes;var i,s,r,a=(i=t.default,s=class extends(global.React\|\|guac.react).Component{constructor(){super(...arguments),this.checkActiveLink=this.checkActiveLink.bind(this),this.state={isActive:!1}}componentDidMount(){const{toggleId:e}=this.props;this.moreDropdownElement=document.getElementById(e),this.moreDropdownElement&&(this.checkActiveLink(),window.addEventListener("NavItemsResized",this.checkActiveLink,{passive:!0}))}componentWillUnmount(){this.moreDropdownElement&&window.removeEventListener("NavItemsResized",this.checkActiveLink,{passive:!0})}checkActiveLink(){const{renderMode:e}=this.props;window.requestAnimationFrame((()=>{var t;let o=!1;const i=this.moreDropdownElement.querySelector('[data-ux="NavLinkActive"]')\|\|this.moreDropdownElement.query

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3043)
Category:	downloaded
Size (bytes):	3092
Entropy (8bit):	5.221416224205306
Encrypted:	false
SSDEEP:	96:/NSXU/vuELNSXtiF7ANSXTJrrBNSXt7X5wqh:VcKncc7ycd3cd5w8
MD5:	852CBC5322260E00B44F2C682F88B2C7
SHA1:	BCAF229E6134F43EB5F974C9891E4D16FAF1D344
SHA-256:	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
SHA-512:	F031B43F7FA0DA001F71DDCFFE5E322A94C5F1F52F7C4D67D34880243D9D361AC55C0E5001DD004390867CB31E5DEF5D4D9282E6E2ECB9AEC0E880AA5B786BA3
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js
Preview:	define("@widget/LAYOUT/c/bs-loaders-fffeeba5.js",["exports","~/c/bs-index3"],(function(e,a){"use strict";e.B=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).createElement((global.React\|\|guac.react).Fragment,null,(global.React\|\|guac.react).createElement(c,{viewBox:"0 0 44 44",width:"3em",height:"3em",fill:"currentColor"},(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M31.968 23H12.032c-.57 0-1.032-.448-1.032-1 0-.553.462-1 1.032-1h19.936c.57 0 1.032.447 1.032 1 0 .552-.462 1-1.032 1"})),(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX.Style,null,a.k.loaderBalance)),style:{"> svg":{animation:"balance 1s infinite cubic-bezier(.62,.06,.33,.79);",transformOrigin:"center"}}},e)},e.C=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).crea

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	221
Entropy (8bit):	5.32955468303281
Encrypted:	false
SSDEEP:	6:FSPD8WUDDSBSyFbNemGHr9EJiKWaEwI8WUDDn:c5UDGBSyCTHr+pWTwGUDr
MD5:	8F12765EB30FBDCFCDC116D13F7FC272
SHA1:	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6
SHA-256:	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
SHA-512:	7AA2F396B105BCCF2B943FD2AC60929D8BF3A0EB8574B77451CB29816DF8ACDCD07694B526D7E4585F849DFDA3A0FE6E95661179E13F682DBF54098D98154BFB
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js",["exports"],(function(i){"use strict";i.N="-249vw"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-navigationDrawer-27f5f1f5.js.map.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1211)
Category:	downloaded
Size (bytes):	1261
Entropy (8bit):	5.340315611373646
Encrypted:	false
SSDEEP:	24:/BLEQuC0F6lq5lEYwy5WqogVeESgVeId4PXsHrIW:Z4jFYq5lpwW7vdd4PXgrIW
MD5:	CB9BFA0FBDD957FBE7F4841B70341DB2
SHA1:	9CAD12A3580D3E4D340CB867E88B687C75564C5A
SHA-256:	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
SHA-512:	DF98C3262F64DA4EA9CACF75FF7CB685D71B69142D89F726AB3E13CF6F25432DC395D7C0950E1632F0E519F135B02FDA0753739189E51F1C9210ACA6692551DD
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js
Preview:	define("@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js",["exports"],(function(e){"use strict";const o=e=>{let{color:o,isActive:t,inStock:r,isSmall:l}=e;const a=r\|\|void 0===r,c=l?"24px":"38px",n=l?"20px":"32px",i={borderRadius:"50%",borderWidth:"1px",borderStyle:"solid"},s={outer:{...i,display:"flex",alignItems:"center",justifyContent:"center",width:c,height:c,borderColor:t?"lowContrast":"transparent"},inner:{...i,borderColor:"ultraLowContrast",color:"ultraLowContrast",width:n,height:n,background:a?o:`linear-gradient(to left top, ${o} calc(50% - 1px), currentColor, ${o} calc(50% + 1px) )`}};return(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.outer},(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.inner}))};o.propTypes={color:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,isActive:(global.PropTypes\|\|guac["prop-types"]).bool,inStock:(

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	dropped
Size (bytes):	876
Entropy (8bit):	5.561256771975726
Encrypted:	false
SSDEEP:	24:cEBLv5pqMIuHMnH7cmo17Jv0ySaUKdei9hJQE2HrIYpb:f75pqaowmWJcySaUKdTfcrIC
MD5:	9219CF782ED219BD3929A51E99503BC2
SHA1:	6AAC399854EC0405949566FAFDCA8C121F0CDA58
SHA-256:	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
SHA-512:	D421851026422D46E1561FA852084CE7B41E32C7451DCF85900838265D330F09389DA18F4D8A5FAF3E0A4076508BA7E93EA9C5F8B5B32ACF32205C9B6E65E709
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-index-4e26cd6b.js",["exports"],(function(o){"use strict";const{widgetTypes:e,colorPackCategories:t,themeConstants:n,buttons:l}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,s=(global.keyMirror\|\|guac.keymirror)({NONE:null,SMALL_UNDERLINE:null,FULL_UNDERLINE:null,INLINE:null}),i=24,r=n.DEFAULT_OVERLAY_TEXT_SHADOW,a={about4:i,introduction5:i,content5:i,ordering1:i,payment2:i,zillow1:i,reviews1:i,rss1:i,subscribe3:i,mlsSearch1:i,contact10:i,countdown1:i,quote1:i},c={spotlight:{fill:l.fills.SOLID},external:{fill:l.fills.NONE,decoration:l.decorations.NONE,shadow:l.shadows.NONE}};o.A="365px",o.B="24px",o.C=c,o.D=25,o.I=28,o.M=40,o.O="0px 2px 10px rgba(0, 0, 0, 0.3)",o.S=40,o.W={about1:!0},o.a=r,o.b="18px",o.c=a,o.d="600px",o.e=t,o.s=s})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-index-4e26cd6b.js.map.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23126)
Category:	dropped
Size (bytes):	23189
Entropy (8bit):	4.539345073526186
Encrypted:	false
SSDEEP:	384:7UuK/6kvTqLYddu4bV/yiAhSs1hiAhAiSeG3dvBRU+SMkc6e:QuJ5wI45/c1+ipG3TJSMkU
MD5:	3D092EF4ABA019B14F01C40747E40554
SHA1:	1C26145272FCF4CA91AF501288CCE84B1BFFD38B
SHA-256:	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
SHA-512:	F7180D3D98CF17556E27D62EF719DD9E35041679BAB74BD49BD898EB0FB62018EF6C6B64D06E9E0CAC4A646154DB93A1D35096B098DDCFF7B02CD6889A29DA0A
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js",["exports"],(function(a){"use strict";const e=(global.React\|\|guac.react).createElement("path",{d:"M12 2C6.477 2 2 6.477 2 12s4.477 10 10 10 10-4.477 10-10A10 10 0 0 0 12 2zM7.055 13.745a.97.97 0 0 1-.073-.509l.182-2.072a.687.687 0 0 1 .29-.364c.182-.11.582.036.582.036l2.619 1.31s.4.181.4.509c-.037.436-.219.436-.364.509l-3.055.654s-.436.146-.581-.073zm4.945.473l-.036 3.018s.036.437-.219.51c-.144.02-.291.02-.436 0l-2.036-.655a.6.6 0 0 1-.291-.364c-.073-.218.182-.545.182-.545l2.036-2.255s.327-.29.582-.145c.254.145.254.436.218.436zm-.364-3.236a.687.687 0 0 1-.581-.182l-2.51-3.418s-.363-.4-.181-.691a.64.64 0 0 1 .363-.291l2.4-.873c.11-.036.218-.145.582.073.255.145.291.655.291.655l.036 4.145s-.072.51-.4.582zm1.419.582l1.636-2.582s.145-.364.436-.327c.152.002.29.085.364.218l1.382 1.636a.676.676 0 0 1 .072.473c-.072.218-.472.363-.472.363l-2.91.837s-.4.073-.545-.182c-.145-.255 0-.51.037-.436zm3.781 3.309L15.6 16.655a.815.815 0 0 1-.4

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=met-aa-mass-klog-in.godaddysites.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.4.7&vg=f30e8a6a-249e-4b95-aca7-2880c7c5018f&vtg=f30e8a6a-249e-4b95-aca7-2880c7c5018f&dp=%2F&trace_id=bfbe8c8fd20c4c7aad2b3f86dc6813fd&cts=2024-09-28T03%3A19%3A37.850Z&hit_id=07b13503-140e-44e7-935d-1218c0b366f7&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22IPv2%22%2C%22websiteId%22%3A%222f158a6c-081f-48be-a117-00e66578bab0%22%2C%22pd%22%3A%222022-12-29T08%3A21%3A49.290Z%22%2C%22meta.numWidgets%22%3A9%2C%22meta.theme%22%3A%22layout18%22%2C%22meta.headerMediaType%22%3A%22Image%22%2C%22meta.isOLS%22%3Afalse%2C%22meta.isOLA%22%3Afalse%2C%22meta.isMembership%22%3Afalse%7D&usrin=wam_site_hasPopupWidget%2Cfalse%5Ewam_site_hasMessagingWidget%2Cfalse%5Ewam_site_headerTreatment%2Cfalse%5Ewam_site_hasSlideshow%2Cfalse%5Ewam_site_hasFreemiumBanner%2Cfalse%5Ewam_site_homepageFirstWidgetType%2CINTRODUCTION%5Ewam_site_homepageFirstWidgetPreset%2Cintroduction4%5Ewam_site_businessCategory%2Crealestateagents%5Ewam_site_theme%2Clayout18%5Ewam_site_locale%2Cen-US%5Ewam_site_fontPack%2Clato%5Ewam_site_cookieBannerEnabled%2Ctrue%5Ewam_site_membershipEnabled%2Cfalse%5Ewam_site_hasHomepageHTML%2Cfalse%5Ewam_site_hasHomepageShop%2Cfalse%5Ewam_site_hasHomepageOla%2Cfalse%5Ewam_site_hasHomepageBlog%2Cfalse%5Ewam_site_hasShop%2Cfalse%5Ewam_site_hasOla%2Cfalse%5Ewam_site_planType%2Ccommerce%5Ewam_site_isHomepage%2Ctrue%5Ewam_site_htmlWidget%2Cfalse%5Ewam_site_networkSpeed%2C1.25&ap=IPv2&vci=1304048036&z=1832311357&LCP=2881&CLS=0.0003400135983939595&timeToInteractive=8380&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63425)
Category:	dropped
Size (bytes):	315045
Entropy (8bit):	5.470972207090544
Encrypted:	false
SSDEEP:	3072:7aOD2q1BSK7x5jfw71nUNdFIh0qrMdB8pbKQJaZkNeQHUC5SIui/+a:Wzq1Bzc71UNhqrMgpbLaZkNfHHWa
MD5:	D8A1FE8B9FD01233B8A030EA79C21DF0
SHA1:	1B2B4474F72FCEE56977101E7C85A8201F730903
SHA-256:	91DEC32BF6596B875CDEB8C7BFFC8B5029A870657D3D7C790E8939F17E24DC20
SHA-512:	C15DBBD27873E22558239D6671B7FA05107A348D44BEC9CD560B8AA6D443D4A86BBBC38FC6F2C18E4D4C82852741B7C995E3E80A1E95B04A0D2DBDA12DCB6F0F
Malicious:	false
Reputation:	low
Preview:	var Core=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/",n(n.s=68)}([fun

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20947)
Category:	dropped
Size (bytes):	24399
Entropy (8bit):	5.2375624098374
Encrypted:	false
SSDEEP:	384:UNoz5VHqeg0VzpiyiwffnnPacVorjFtteVT36FCLCpKe9plq2D:ME5qeg0Rp8wffnPVEjFtteEFiSbbl3D
MD5:	753CB19EE1A756E46FAA0F118B1B4E01
SHA1:	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC
SHA-256:	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
SHA-512:	4482C4D5F2F93DE8E095C549994A7783FA55CD1A6C4C9CC5E697CC2E2F00C98B04D5CB958CC1ADC4D0EF67F300BE014E112AE1D992487F40EB25BC93E8B47AAA
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js",["exports","~/c/_rollupPluginBabelHelpers","~/c/_commonjsHelpers","~/c/interopRequireDefault","~/c/_react_commonjs-external"],(function(e,t,n,i,r){"use strict";var s=n.c((function(e){function t(n){return e.exports=t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e.exports.__esModule=!0,e.exports.default=e.exports,t(n)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports})),o=n.c((function(e){var t=s.default;function n(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,i=new WeakMap;return(n=function(e){return e?i:t})(e)}e.exports=function(e,i){if(!i&&e&&e.__esModule)return e;if(null===e\|\|"object"!==t(e)&&"function"!=typeof e)return{default:e};var r=n(i);if(r&&r.has(e))return r.get(e);var s={},o=Object.defineProperty&&Object.getOwnPropertyDescr

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28371)
Category:	downloaded
Size (bytes):	43720
Entropy (8bit):	5.21839478928372
Encrypted:	false
SSDEEP:	768:oe/cAF5jS31fqbEYG1u7VUT01TS3vZTfbBWfL8/fBG1u7VdrEt8Kww6teNY6bmM7:03IkHNFWqkUrE6NwRNDqMJ1YBipODmz
MD5:	5A6B85B96D4E9E8689ADB86DC02D0E1E
SHA1:	F46815FB37D1C7B46A793AF2D3CB7738D64BA489
SHA-256:	E20B2774BF751096D5825C113CAEE3CFAF84C5209CB16FA5FA9761CF3707936C
SHA-512:	BB916A3CE7440A6268F43BB421F554FAEF540333E1906B95D0AACC69FABD2FDEB8185E6BCC4F5741B7D62C8CB61F7ADCDEBBEFA9A14F1B01E530446A9A986BE3
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/2f158a6c-081f-48be-a117-00e66578bab0/gpub/66c39e421cc02bbc/script.js
Preview:	window.cxs && window.cxs.setOptions({ prefix: "c2-" });.window.wsb=window.wsb\|\|{};window.wsb["Theme18"]=window.wsb["Theme18"]\|\|window.radpack("@widget/LAYOUT/bs-layout18-Theme-publish-Theme").then(function(t){return new t.default();});.window.wsb["DynamicFontScaler"]=function(e){let t,{containerId:o,targetId:n,fontSizes:r,maxLines:a,prioritizeDefault:s}=e;if("undefined"==typeof document)return;const i=document.getElementById(o),c=document.getElementById(n);function l(e){return function(e){const t=parseInt(d(e,"padding-left")\|\|0,10),o=parseInt(d(e,"padding-right")\|\|0,10);return e.scrollWidth+t+o}(e)<=i.clientWidth&&function(e){const t=e.offsetHeight,o=parseInt(d(e,"line-height"),10)\|\|1;return Math.floor(t/o)}(e)<=a}function p(){if(!i\|\|!c\|\|t===window.innerWidth)return;if(c.hasAttribute("data-font-scaled"))return void function(){c.removeAttribute("data-last-size");const e=document.querySelector(`#${n}-style`);e&&e.parentNode.removeChild(e)}();t=window.innerWidth;const e=Array.prototype.sl

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	586
Entropy (8bit):	5.2378887904744955
Encrypted:	false
SSDEEP:	12:H/QL7ANBSyTUXaPXAbDTc/NeL2QiTj+RVngQ2ofXgYhMYTHr+pWgL7AO:cANBLTUXaPXAPTc/tTj+HngQ2CQY/HrQ
MD5:	FADB3719FFA2A9E96CDC64FFEA0220FA
SHA1:	B9B00833E59E99ECE036B518D8429AF5EFEC1163
SHA-256:	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
SHA-512:	C6E3581F7676B3204BC0FC8D4DCCF5A383FDE6F17A27D2F855EBEE3D205459BD9866A219808EAB1D4D4B37676D13B516AF546C7125C3FFA22CA74B995A180644
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js
Preview:	define("@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=n,e.a=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_rollupPluginBabelHelpers-8ce54c82.js.map.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13834)
Category:	downloaded
Size (bytes):	13891
Entropy (8bit):	4.645788246161265
Encrypted:	false
SSDEEP:	192:49+DrRmRAiyq602NNTV0afQQYrAJ9wzkENGWHl2JBpfodMjHJv8k9fopl1jn:4Bp49ykE8WQs2Vv8k9fGTjn
MD5:	C7B1DBB0EEF8600D5F57536998855E4D
SHA1:	03908243C34D5A373ACBA694EB16E30F088B4F7D
SHA-256:	53DA7DD341F1EF0C484A7B56A17D86669287DA5D082AAA8A0AF04FD3816B6631
SHA-512:	56EE4961F4C03A15C79252AD9C3CAD93573AC785881541EA32F83389996F4E8C074FBC397FF9F0B218121A3D8E1A9CEF101D088B4BCFB2353D6A311D5F60DCBA
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-modernThinRound-ced97fbd.js
Preview:	define("@widget/LAYOUT/c/bs-modernThinRound-ced97fbd.js",["exports"],(function(e){"use strict";const a=(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M5.643 19.241a.782.782 0 0 1-.634-.889c.317-2.142 1.62-4.188 3.525-5.244l.459-.254-.39-.352a4.89 4.89 0 0 1-.797-6.327 4.747 4.747 0 0 1 2.752-2.003 4.894 4.894 0 0 1 6.092 5.72c-.211 1.042-.802 1.97-1.59 2.683l-.308.28.459.253c1.876 1.04 3.185 3.131 3.53 5.26a.765.765 0 0 1-.742.883c-.367.005-.697-.25-.753-.613-.52-3.384-4.067-6.087-7.702-4.324-1.628.79-2.714 2.511-3.014 4.313a.76.76 0 0 1-.887.614zm2.873-10.36a3.36 3.36 0 0 0 3.356 3.355A3.36 3.36 0 0 0 15.23 8.88a3.361 3.361 0 0 0-3.358-3.357A3.36 3.36 0 0 0 8.516 8.88z"});var l={__proto__:null,account:a,person:a,magGlass:(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M19.504 18.461a.76.76 0 0 1 0 1.038.652.652 0 0 1-.956 0L15.2 15.993a6.142 6.142 0 0 1-3.83 1.353C7.858 17.346 5 14.353 5 10.673 5 6.994 7.858 4 11.371 4c3.513 0 6.371 2.994

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32477)
Category:	downloaded
Size (bytes):	137091
Entropy (8bit):	5.3854419378285865
Encrypted:	false
SSDEEP:	1536:8+ysjvzqEQMzhis0TPcVIxEWby4KE/5sfW:uStE/5sfW
MD5:	CC07EDF22FFB3C60F9BBC57D779BCF40
SHA1:	380C91D29CBD8DD50FBCF84452E5409DD8CA253E
SHA-256:	B3FE25D3AA2D04A1DE3C9B920671E0D4648474D316701DBC15CF3299BCC33548
SHA-512:	AD83AA573DA99E96A191D409A7776E5E9D993E110C8CC855D392FB941E369D3553719E42804075E8B8977C3F255441ABDF2FFE8B164F19890C43C212F627D82A
Malicious:	false
Reputation:	low
URL:	https://met-aa-mass-klog-in.godaddysites.com/
Preview:	<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:24,h:24,m" sizes="24x24"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:32,h:32,m" sizes="32x32"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:48,h:48,m" sizes="48x48"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:64,h:64,m" sizes="64x64"/><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=d

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.4846843152781375
Encrypted:	false
SSDEEP:	3:O/rvoqphnOWWJiQSHmn:O/rvoqphOR+mn
MD5:	978034923C1E389394ECC1ED10496A34
SHA1:	E691FBCE6762010186A080F6E8473EDF4128FCE8
SHA-256:	9DF22DBD875B7A2FDBB70A0B2E6778C9E7681398CA6022D383BE1AC2B84086C2
SHA-512:	C270DF3BE6F4F3B6CAC93D3E17B4CA9F8B60A9439775AF0547AEF93D21B559299BF2EDB7A077203EB54171AAF494B430E7C7FEEC29B44C6BC2FFB3D2898E2C10
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQmP_A72986MoxIFDYmoE1cSBQ08fQOLEgUN6rLCDBIFDQbtu_8=?alt=proto
Preview:	CiQKBw2JqBNXGgAKBw08fQOLGgAKBw3qssIMGgAKBw0G7bv/GgA=

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1824)
Category:	dropped
Size (bytes):	1874
Entropy (8bit):	4.934407477113311
Encrypted:	false
SSDEEP:	48:fCEX2kA83zdkJi1lvietWdcy0cy7mdOrxGfrIK:aE33zdkJiDvietWdR0R7mdOFYX
MD5:	EDC15AD5DAAC3CFA744BFFDB1E0174BE
SHA1:	E314A5CA702D0E77B2C2C023ADDADE266EA223B2
SHA-256:	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
SHA-512:	8B8805D67FF993BD406EEB6682B1578537A3D6B7DC6711BE7152120689C77147D8C24351ACEBD2A06AE9B81D858EAED19C44E6792FE3C147EEAF3133C635589B
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-dataAids-6a839d53.js",["exports"],(function(E){"use strict";var R=(global.keyMirror\|\|guac.keymirror)({BACKGROUND_IMAGE_RENDERED:null,HAMBURGER_MENU_LINK:null,HEADER_WIDGET:null,HEADER_SECTION:null,HEADER_VIDEO:null,HEADER_VIDEO_EMBED_WRAPPER:null,HEADER_VIDEO_EMBED:null,HEADER_VIDEO_EMBED_INSET_POSTER:null,HEADER_VIDEO_EMBED_FILL_POSTER:null,HEADER_VIDEO_BACKGROUND:null,HEADER_SLIDESHOW:null,HEADER_SLIDE:null,HEADER_HERO_SLIDE:null,HEADER_PHONE_RENDERED:null,HEADER_PIPE_RENDERED:null,HEADER_ADDRESS_RENDERED:null,HEADER_LOGO_RENDERED:null,HEADER_LOGO_IMAGE_RENDERED:null,HEADER_LOGO_OVERHANG_CONTAINER:null,HEADER_LOGO_TEXT_RENDERED:null,HEADER_TAGLINE_RENDERED:null,HEADER_TAGLINE2_RENDERED:null,HEADER_NAV_RENDERED:null,HEADER_CTA_BTN:null,CART_ICON_RENDER:null,CART_ICON_COUNT:null,CART_ICON_PIPE:null,CART_TEXT:null,CART_DROPDOWN_RENDERED:null,SEARCH_FORM_RENDERED:null,SEARCH_ICON_RENDERED:null,SEARCH_ICON_RENDERED_OPEN:null,SEARCH_CLOSE_RENDERED:null,SEARCH_FI

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	downloaded
Size (bytes):	876
Entropy (8bit):	5.561256771975726
Encrypted:	false
SSDEEP:	24:cEBLv5pqMIuHMnH7cmo17Jv0ySaUKdei9hJQE2HrIYpb:f75pqaowmWJcySaUKdTfcrIC
MD5:	9219CF782ED219BD3929A51E99503BC2
SHA1:	6AAC399854EC0405949566FAFDCA8C121F0CDA58
SHA-256:	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
SHA-512:	D421851026422D46E1561FA852084CE7B41E32C7451DCF85900838265D330F09389DA18F4D8A5FAF3E0A4076508BA7E93EA9C5F8B5B32ACF32205C9B6E65E709
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js
Preview:	define("@widget/LAYOUT/c/bs-index-4e26cd6b.js",["exports"],(function(o){"use strict";const{widgetTypes:e,colorPackCategories:t,themeConstants:n,buttons:l}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,s=(global.keyMirror\|\|guac.keymirror)({NONE:null,SMALL_UNDERLINE:null,FULL_UNDERLINE:null,INLINE:null}),i=24,r=n.DEFAULT_OVERLAY_TEXT_SHADOW,a={about4:i,introduction5:i,content5:i,ordering1:i,payment2:i,zillow1:i,reviews1:i,rss1:i,subscribe3:i,mlsSearch1:i,contact10:i,countdown1:i,quote1:i},c={spotlight:{fill:l.fills.SOLID},external:{fill:l.fills.NONE,decoration:l.decorations.NONE,shadow:l.shadows.NONE}};o.A="365px",o.B="24px",o.C=c,o.D=25,o.I=28,o.M=40,o.O="0px 2px 10px rgba(0, 0, 0, 0.3)",o.S=40,o.W={about1:!0},o.a=r,o.b="18px",o.c=a,o.d="600px",o.e=t,o.s=s})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-index-4e26cd6b.js.map.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	107922
Entropy (8bit):	5.16833322430428
Encrypted:	false
SSDEEP:	1536:rrgGXmRRShRLWvm1y+bvdVa/AfVcclozOshAZpXZgiLxdONPam1ZJs6Q8FBirniQ:rrLbba/UEHw
MD5:	6A7950CC31489069917BF817B62B2BFE
SHA1:	44AAB6E9B8FDBAA23EA297CE69E26422277907C0
SHA-256:	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
SHA-512:	0329712BC9EC144910DEE414B70181C4FD4145B65C78E2628BEE547A5DBC8D48BACD3BAA350451437C740493875DDD47FEC66C2C9189AA823A7B95DE8E9FA9F4
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("scc-c2",[],e):"object"==typeof exports?exports["scc-c2"]=e():t["scc-c2"]=e()}(self,(()=>(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};t.r(e);var n={};t.r(n),t.d(n,{_isDebug:()=>d,debug:()=>O,error:()=>g,info:()=>h,log:()=>h,setDebug:()=>b,warn:()=>w});var r={};t.r(r),t.d(r,{cmdLogEvent:()=>Yo,cmdLogPerf:()=>ti});var o,i,a,c,u,f=(o="",a={document:i=Object.create({get cookie(){return o},set cookie(t){o=t}})},c={},"undefined"==typeof window?{window:a,document:i,navigator:c}:{window:window\|\|a,document:window.document\|\|i,navigator:navigator\|\|c}),s=function(){return f.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	586
Entropy (8bit):	5.2378887904744955
Encrypted:	false
SSDEEP:	12:H/QL7ANBSyTUXaPXAbDTc/NeL2QiTj+RVngQ2ofXgYhMYTHr+pWgL7AO:cANBLTUXaPXAPTc/tTj+HngQ2CQY/HrQ
MD5:	FADB3719FFA2A9E96CDC64FFEA0220FA
SHA1:	B9B00833E59E99ECE036B518D8429AF5EFEC1163
SHA-256:	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
SHA-512:	C6E3581F7676B3204BC0FC8D4DCCF5A383FDE6F17A27D2F855EBEE3D205459BD9866A219808EAB1D4D4B37676D13B516AF546C7125C3FFA22CA74B995A180644
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=n,e.a=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_rollupPluginBabelHelpers-8ce54c82.js.map.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 18x16, components 3
Category:	dropped
Size (bytes):	1464
Entropy (8bit):	6.324615052478773
Encrypted:	false
SSDEEP:	24:/l4K1he91Wwjx82lY2T3ouV6nXm3yJ3VK5eXoQGOc1spwoAXPc/pakcB5Biw7:t1qQNn2xwWiJ3SVQ5iWwDPV15d
MD5:	E1944615D398BEF2F757F144963A2D1D
SHA1:	263F3B23CF498F5D532BAE56D292D7A69E70B721
SHA-256:	234849ABAADC3C8E593CA1C9FC92D28F5522CEEE95AE7D17724D282D7452545C
SHA-512:	293D12D528F14BC37D023C51BD138557BAA22B1F7B9007C9F68B16DD274EE2F2C296B8EDB4E3997E84470BD40732A6385824999ABBB03B534F94237096FF2CC8
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100...........................................+http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:CFD7CE372E5F11EC806FEA7E355604F5" xmpMM:DocumentID="xmp.did:CFD7CE382E5F11EC806FEA7E355604F5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CFD7CE352E5F11EC806FEA7E355604F5" stRef:documentID="xmp.did:CFD7CE362E5F11EC806FEA7E355604F5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end=

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://events.api.secureserver.net/t/1/tl/event?dh=met-aa-mass-klog-in.godaddysites.com&dr=&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&client_name=scc-c2&cv=0.4.7&vg=f30e8a6a-249e-4b95-aca7-2880c7c5018f&vtg=f30e8a6a-249e-4b95-aca7-2880c7c5018f&dp=%2F&trace_id=bfbe8c8fd20c4c7aad2b3f86dc6813fd&cts=2024-09-28T03%3A19%3A16.908Z&hit_id=8d9ccd5c-731a-45a8-b4f5-b1cce17833b6&ea=pageperf&ht=perf&eid=traffic.tcc.instrumentation.navigation.timing&trfd=%7B%22ap%22%3A%22IPv2%22%2C%22websiteId%22%3A%222f158a6c-081f-48be-a117-00e66578bab0%22%2C%22pd%22%3A%222022-12-29T08%3A21%3A49.290Z%22%2C%22meta.numWidgets%22%3A9%2C%22meta.theme%22%3A%22layout18%22%2C%22meta.headerMediaType%22%3A%22Image%22%2C%22meta.isOLS%22%3Afalse%2C%22meta.isOLA%22%3Afalse%2C%22meta.isMembership%22%3Afalse%7D&ap=IPv2&vci=1304048036&z=682582537&tce=1727493546861&tcs=1727493546389&tdc=1727493556877&tdclee=1727493552184&tdcles=1727493552183&tdi=1727493550284&tdl=1727493546983&tdle=1727493546389&tdls=1727493546389&tfs=1727493546327&tns=1727493546323&trqs=1727493546861&tre=1727493547236&trps=1727493546978&tles=1727493556878&tlee=0&nt=navigate&LCP=2881&nav_type=hard
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51853)
Category:	downloaded
Size (bytes):	60918
Entropy (8bit):	5.352554926858827
Encrypted:	false
SSDEEP:	768:RfLoCGFoLh8vvw4xUC/ib7V/Kc5syR1TRA/LkIT8OTGGOumJ66KzElpzLEP2szm0:6G1TRqD8OEumJ66KzEnXEP2szmOT
MD5:	A8E1D3D56157F21917E1385AD3681213
SHA1:	1F9199C0C9E47B87EA162F8B67E6921F2E6318BB
SHA-256:	54DC8B6610EC335C93A01783DD346C81843C59E254604C03C3A05904E12168E5
SHA-512:	414AC9CEF4FA6E42B0AE7A5601D222B6D1D6742C885B2B621EB8DAB653AF4DED2F9A0658EB6EA48B204CB402BDC4D31A7A1E3DB3C1886F8AB18C924CFA1CFA7F
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/2f158a6c-081f-48be-a117-00e66578bab0/gpub/2627d5b76c8ba02c/script.js
Preview:	navigator&&navigator.connection&&(window.networkInfo=navigator.connection,navigator.connection.addEventListener&&navigator.connection.addEventListener("change",({target:n})=>window.networkInfo=n));.const imageObserver=new IntersectionObserver((e,r)=>{var a=e=>{if(e.hasAttribute("data-lazyimg")){var t=e.getAttribute("data-srclazy");let o=e.getAttribute("data-srcsetlazy")\|\|"";if(t&&(e.src=t),o&&window.networkInfo){var n=window.networkInfo.downlink;const r=[{min:0,max:5,regex:/(.?(?=, ))/,qMod:!0},{min:5,max:8,regex:/(.2x)/}];r.forEach(({min:e,max:t,regex:r,qMod:a})=>{e<=n&&n<t&&(r=o.match(r),o=(r&&r.length?r[0]:o)+(a?"/qt=q:"+Math.round((n-e)/(t-e)*100):""))})}e.srcset=o,e.removeAttribute("sizes"),e.removeAttribute("data-lazyimg"),e.removeAttribute("data-srclazy"),e.removeAttribute("data-srcsetlazy")}};e.forEach(e=>{if(e.isIntersecting){const t=e.target;window.networkInfo&&0===window.networkInfo.downlink\|\|([t].concat(Array.from(t.querySelectorAll("[data-lazyimg]"))).forEach(a),r.unobse

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	5.376083689062415
Encrypted:	false
SSDEEP:	6:FSPl39b4BSyRbjGJlI9kXJ3+V0q1EkmGHr9EJiKWaEt39J:cd39MBSyVz0XkTHr+pWTt39J
MD5:	ACD4F2B6117E5054FC9BF848AE8121CA
SHA1:	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8
SHA-256:	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
SHA-512:	906FC9144D4AB81E8000CBE4A7AF7AFF775464347449193337E8738D705888C02B9476E083B3B67BDB3CBC312AAC4644C10737BC1FC5F9F08B38F5F45A2410F9
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js
Preview:	define("@widget/LAYOUT/c/bs-legacyOverrides-42582241.js",["exports"],(function(e){"use strict";e.g=function(e,i,n){let o={};return"MENU"===i&&"h3"===e&&(o={color:"highlight"},"menu3"===n&&(o.fontSize="large")),o}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-legacyOverrides-42582241.js.map.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8076)
Category:	downloaded
Size (bytes):	8146
Entropy (8bit):	5.193570786754158
Encrypted:	false
SSDEEP:	192:bXex8k/4ro1H29Lm90fwK4cal8k5AV+IZ7/UHpvx/nvvdlFwmlqkk1:bXex9QriHqLm90fwncal75AV+IZ78HF6
MD5:	D0BF5E9E6E778CE2D940F214EC04700C
SHA1:	2ECB604E1F2E8CA95A0413DB58C153B9AA710A29
SHA-256:	1B7F2E117669F2643EA895B6BEDB818796AF009F19A6FC1F8B8A1DC9C30B6D9B
SHA-512:	DC1A45C8946109AB2E61509A977287020136B03555CC2FAC0B769BB20ADC78268929AE857F695626E86D8AC6E805C3731D33374360406E86FC98F643A3523E5C
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-layout18-Theme-publish-Theme-5bf6e4ee.js
Preview:	define("@widget/LAYOUT/bs-layout18-Theme-publish-Theme-5bf6e4ee.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-index3","~/c/bs-legacyOverrides","~/c/bs-modernThinRound","~/c/bs-defaultSocialIconPack","~/c/bs-loaders","~/c/bs-index2","~/c/bs-index","~/c/bs-overlayTypes"],(function(e,t,r,o,a,l,n,i,s,d){"use strict";const{colorPackCategories:g,buttons:h}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,{LIGHT:m,LIGHT_ALT:c,LIGHT_COLORFUL:u,DARK:p,DARK_ALT:b,DARK_COLORFUL:y,COLORFUL:f}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.paintJobs,S={[d.F]:"accent-overlay",[d.b]:"accent-overlay",[d.I]:"category-alt-solid",[d.B]:"accent-overlay",[d.L]:"accent-overlay"},H={defaultHeaderTreatment:d.F,hasLegacy:!0,heroContentItems:["tagline","tagline2","cta"],nonHeroContentItems:["phone"],imageTreatments:S};var C={id:"layout18",name:"dawn",packs:{color:"000",font:"lato"},logo:{font:"primary"},packCategories:{color:g.NEUTRAL},headerProperties:{alignmentOption:"center"},header

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1824)
Category:	downloaded
Size (bytes):	1874
Entropy (8bit):	4.934407477113311
Encrypted:	false
SSDEEP:	48:fCEX2kA83zdkJi1lvietWdcy0cy7mdOrxGfrIK:aE33zdkJiDvietWdR0R7mdOFYX
MD5:	EDC15AD5DAAC3CFA744BFFDB1E0174BE
SHA1:	E314A5CA702D0E77B2C2C023ADDADE266EA223B2
SHA-256:	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
SHA-512:	8B8805D67FF993BD406EEB6682B1578537A3D6B7DC6711BE7152120689C77147D8C24351ACEBD2A06AE9B81D858EAED19C44E6792FE3C147EEAF3133C635589B
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js
Preview:	define("@widget/LAYOUT/c/bs-dataAids-6a839d53.js",["exports"],(function(E){"use strict";var R=(global.keyMirror\|\|guac.keymirror)({BACKGROUND_IMAGE_RENDERED:null,HAMBURGER_MENU_LINK:null,HEADER_WIDGET:null,HEADER_SECTION:null,HEADER_VIDEO:null,HEADER_VIDEO_EMBED_WRAPPER:null,HEADER_VIDEO_EMBED:null,HEADER_VIDEO_EMBED_INSET_POSTER:null,HEADER_VIDEO_EMBED_FILL_POSTER:null,HEADER_VIDEO_BACKGROUND:null,HEADER_SLIDESHOW:null,HEADER_SLIDE:null,HEADER_HERO_SLIDE:null,HEADER_PHONE_RENDERED:null,HEADER_PIPE_RENDERED:null,HEADER_ADDRESS_RENDERED:null,HEADER_LOGO_RENDERED:null,HEADER_LOGO_IMAGE_RENDERED:null,HEADER_LOGO_OVERHANG_CONTAINER:null,HEADER_LOGO_TEXT_RENDERED:null,HEADER_TAGLINE_RENDERED:null,HEADER_TAGLINE2_RENDERED:null,HEADER_NAV_RENDERED:null,HEADER_CTA_BTN:null,CART_ICON_RENDER:null,CART_ICON_COUNT:null,CART_ICON_PIPE:null,CART_TEXT:null,CART_DROPDOWN_RENDERED:null,SEARCH_FORM_RENDERED:null,SEARCH_ICON_RENDERED:null,SEARCH_ICON_RENDERED_OPEN:null,SEARCH_CLOSE_RENDERED:null,SEARCH_FI

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	303
Entropy (8bit):	2.7044870640334837
Encrypted:	false
SSDEEP:	3:yionv//thPnFj5/kIikF+qhl/0wNlcZe3aikolFSzqtP+qPp:6v/lhPP/kIiW+qhKo6oJpSGtmqPp
MD5:	49F3298C8BDDE7154851E88DBE74AECD
SHA1:	07795FAAA963D998FDCA0A1D75FC0215F27246AA
SHA-256:	34796F99349812C6C9105940ADFEFBF3C2585EB1D584C6A1AD862AEAB1D1A99E
SHA-512:	F4B11735AFCB783FD52E049B34305DEC36C9CCEDAAAE5C4E307E2D24F95F3F93EB52C6BD0EE932761B259D86974E11B1B053A9B4320D5358E8CDE02F1EDC0ABC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...,.....(.=.....PLTELiqM..:....tRNS.@..f....pHYs..........{Rk....IDATx..........Om.................................................................................................................................................................................ti.j..e..m....IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 05:18:57.143654108 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 28, 2024 05:19:06.759248972 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 28, 2024 05:19:07.307634115 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.307684898 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.307789087 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.307820082 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.307857990 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.308026075 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.308038950 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.308056116 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.308216095 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.308228016 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.777108908 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.777398109 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.777412891 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.778198957 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.778455019 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.778522015 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.778609991 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.778625011 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.779537916 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.779594898 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.779680967 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.779766083 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.779798031 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.779803991 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.780740023 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.780842066 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.830744028 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.830780029 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.830807924 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.877139091 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.895966053 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.895994902 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.896004915 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.896022081 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.896032095 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.896063089 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.896075964 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.896090031 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.896104097 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.896127939 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.926206112 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:07.926218987 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:07.926265955 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:07.926460981 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:07.926474094 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:07.979214907 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.979242086 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.979281902 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.979295969 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.979334116 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.980236053 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.980253935 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.980308056 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:07.980315924 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:07.980353117 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.064927101 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.064965963 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.065032959 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.065047026 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.065073013 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.065095901 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.065567017 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.065589905 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.065629959 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.065635920 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.065696001 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.067017078 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.067415953 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.067445040 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.067487955 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.067492962 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.067519903 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.067557096 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.068331957 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.068358898 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.068408966 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.068414927 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.068444967 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.068459034 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.151635885 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.151664019 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.151712894 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.151730061 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.151750088 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.151778936 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.151822090 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.151859045 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.154592991 CEST	49736	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:08.154607058 CEST	443	49736	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:08.647774935 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:08.653244019 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:08.653253078 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:08.654793024 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:08.654853106 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:08.672043085 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:08.672172070 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:08.720987082 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:08.721000910 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:19:08.767116070 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:10.174035072 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:10.174069881 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:10.174129963 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:10.174659967 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:10.174671888 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:10.432512999 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:10.432554960 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:10.432615995 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:10.434590101 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:10.434600115 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.074685097 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:11.091883898 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:11.091927052 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:11.093055010 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:11.093136072 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:11.101033926 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:11.101103067 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:11.141668081 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:11.141676903 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:11.155666113 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.155742884 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:11.182024002 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:11.221054077 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:11.221071005 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.221396923 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.266594887 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:11.358773947 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:11.399413109 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.549062967 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.549133062 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:11.549222946 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:11.550316095 CEST	49756	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:11.550342083 CEST	443	49756	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:12.510621071 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:12.510652065 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:12.510776043 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:12.511130095 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:12.511145115 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.144886017 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.144964933 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:13.149959087 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:13.149971008 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.150266886 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.154674053 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:13.199438095 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.420574903 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.420646906 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.420695066 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:13.436012983 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:13.436029911 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:13.436049938 CEST	49766	443	192.168.2.4	184.28.90.27
Sep 28, 2024 05:19:13.436055899 CEST	443	49766	184.28.90.27	192.168.2.4
Sep 28, 2024 05:19:17.898757935 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:17.898798943 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:17.898899078 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:17.900249004 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:17.900571108 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:17.900583982 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:17.947412968 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.008943081 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.008963108 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.008970976 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.008991957 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.009001970 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.009012938 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.009042978 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.009062052 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.009104967 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.009104967 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.091861010 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.091870070 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.091907024 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.091936111 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.091943026 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.091957092 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.091979027 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.092001915 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.092133999 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.092931986 CEST	49735	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.092947960 CEST	443	49735	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.130470037 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.130527973 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.130589008 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.131256104 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.131275892 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.406990051 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.407414913 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.407447100 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.410762072 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.410861969 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.411221981 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.411287069 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.411361933 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.411372900 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.458724976 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.522789001 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.522855043 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.522911072 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.524095058 CEST	49814	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.524111986 CEST	443	49814	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.615736008 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.616017103 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.616060019 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.616871119 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.617218971 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.617408991 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.617464066 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.663405895 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.673695087 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.737669945 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737690926 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737699032 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737731934 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737754107 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737770081 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.737787962 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737797022 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.737803936 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.737833977 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.823776007 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.823796988 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.823859930 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.823890924 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.823942900 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.825088978 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.825105906 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.825180054 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.825187922 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.825232029 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.913732052 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.913759947 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.913803101 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.913840055 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.913865089 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.913897991 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.914608002 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.914624929 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.914676905 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.914685011 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.914736986 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.915633917 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.915651083 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.915731907 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.915738106 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.915781021 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.916651964 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.916671038 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.916733980 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:18.916739941 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:18.916784048 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:19.003662109 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003688097 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003732920 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:19.003763914 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003788948 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:19.003825903 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003856897 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003880024 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:19.003884077 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003899097 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:19.003942966 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:19.004475117 CEST	49823	443	192.168.2.4	13.248.243.5
Sep 28, 2024 05:19:19.004497051 CEST	443	49823	13.248.243.5	192.168.2.4
Sep 28, 2024 05:19:20.788825035 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:20.788887024 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:20.788949966 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:20.917714119 CEST	49755	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:19:20.917752981 CEST	443	49755	142.250.184.196	192.168.2.4
Sep 28, 2024 05:19:23.612900972 CEST	80	49723	217.20.57.34	192.168.2.4
Sep 28, 2024 05:19:23.613039970 CEST	49723	80	192.168.2.4	217.20.57.34
Sep 28, 2024 05:19:23.613090038 CEST	49723	80	192.168.2.4	217.20.57.34
Sep 28, 2024 05:19:23.617901087 CEST	80	49723	217.20.57.34	192.168.2.4
Sep 28, 2024 05:19:30.196757078 CEST	60906	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:30.201714039 CEST	53	60906	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:30.201773882 CEST	60906	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:30.201809883 CEST	60906	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:30.206754923 CEST	53	60906	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:30.664084911 CEST	53	60906	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:30.664635897 CEST	60906	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:30.669680119 CEST	53	60906	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:30.669744968 CEST	60906	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:39.106312037 CEST	80	49724	217.20.57.34	192.168.2.4
Sep 28, 2024 05:19:39.112154961 CEST	49724	80	192.168.2.4	217.20.57.34
Sep 28, 2024 05:19:39.120857954 CEST	49724	80	192.168.2.4	217.20.57.34
Sep 28, 2024 05:19:39.126892090 CEST	80	49724	217.20.57.34	192.168.2.4
Sep 28, 2024 05:19:53.722269058 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:19:53.722275972 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:20:08.465296984 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:20:08.465389013 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:20:08.465429068 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:20:10.115094900 CEST	49744	443	192.168.2.4	35.157.66.55
Sep 28, 2024 05:20:10.115120888 CEST	443	49744	35.157.66.55	192.168.2.4
Sep 28, 2024 05:20:10.207804918 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:10.207848072 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:10.207911968 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:10.208148956 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:10.208158016 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:10.835201979 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:10.835529089 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:10.835561037 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:10.835856915 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:10.836380959 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:10.836432934 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:10.878305912 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:20.752265930 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:20.752446890 CEST	443	60913	142.250.184.196	192.168.2.4
Sep 28, 2024 05:20:20.752517939 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:22.113929987 CEST	60913	443	192.168.2.4	142.250.184.196
Sep 28, 2024 05:20:22.113972902 CEST	443	60913	142.250.184.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 05:19:05.714844942 CEST	53	59001	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:05.807241917 CEST	53	55165	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:07.022044897 CEST	53	65212	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:07.294929028 CEST	64375	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:07.295522928 CEST	49480	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:07.303508043 CEST	53	64375	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:07.304548979 CEST	53	49480	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:07.903471947 CEST	56386	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:07.903661966 CEST	50076	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:07.908818960 CEST	53	59544	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:07.916162968 CEST	55089	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:07.916304111 CEST	62295	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:07.923508883 CEST	53	62295	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:07.925498009 CEST	53	55089	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:10.148624897 CEST	52118	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:10.148797035 CEST	64437	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:10.155567884 CEST	53	52118	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:10.155581951 CEST	53	64437	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:10.663634062 CEST	54090	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:10.663805008 CEST	60873	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:13.122867107 CEST	53	62795	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:17.861272097 CEST	64156	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:17.897511005 CEST	57982	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:18.067712069 CEST	56121	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:18.067871094 CEST	51398	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:19.239839077 CEST	61525	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:19.240004063 CEST	55905	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:20.617326975 CEST	65325	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:20.620435953 CEST	58221	53	192.168.2.4	1.1.1.1
Sep 28, 2024 05:19:24.374435902 CEST	138	138	192.168.2.4	192.168.2.255
Sep 28, 2024 05:19:25.127830982 CEST	53	50210	1.1.1.1	192.168.2.4
Sep 28, 2024 05:19:30.196374893 CEST	53	58710	1.1.1.1	192.168.2.4
Sep 28, 2024 05:20:05.756865025 CEST	53	65011	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 28, 2024 05:19:17.914048910 CEST	192.168.2.4	1.1.1.1	c293	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 28, 2024 05:19:07.294929028 CEST	192.168.2.4	1.1.1.1	0xda02	Standard query (0)	met-aa-mass-klog-in.godaddysites.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:07.295522928 CEST	192.168.2.4	1.1.1.1	0xc84e	Standard query (0)	met-aa-mass-klog-in.godaddysites.com	65	IN (0x0001)	false
Sep 28, 2024 05:19:07.903471947 CEST	192.168.2.4	1.1.1.1	0xf42e	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:07.903661966 CEST	192.168.2.4	1.1.1.1	0x1cb2	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:19:07.916162968 CEST	192.168.2.4	1.1.1.1	0x9289	Standard query (0)	isteam.wsimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:07.916304111 CEST	192.168.2.4	1.1.1.1	0x36d5	Standard query (0)	isteam.wsimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:19:10.148624897 CEST	192.168.2.4	1.1.1.1	0xf36e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:10.148797035 CEST	192.168.2.4	1.1.1.1	0xe92c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:19:10.663634062 CEST	192.168.2.4	1.1.1.1	0x9123	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:10.663805008 CEST	192.168.2.4	1.1.1.1	0x114b	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:19:17.861272097 CEST	192.168.2.4	1.1.1.1	0xebed	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:17.897511005 CEST	192.168.2.4	1.1.1.1	0x7281	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:19:18.067712069 CEST	192.168.2.4	1.1.1.1	0x3c64	Standard query (0)	csp.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:18.067871094 CEST	192.168.2.4	1.1.1.1	0x8a18	Standard query (0)	csp.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:19:19.239839077 CEST	192.168.2.4	1.1.1.1	0xada3	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:19.240004063 CEST	192.168.2.4	1.1.1.1	0x72a8	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:19:20.617326975 CEST	192.168.2.4	1.1.1.1	0x2a14	Standard query (0)	www.godaddy.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:20.620435953 CEST	192.168.2.4	1.1.1.1	0xb83c	Standard query (0)	www.godaddy.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 28, 2024 05:19:07.303508043 CEST	1.1.1.1	192.168.2.4	0xda02	No error (0)	met-aa-mass-klog-in.godaddysites.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:07.303508043 CEST	1.1.1.1	192.168.2.4	0xda02	No error (0)	met-aa-mass-klog-in.godaddysites.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:07.910406113 CEST	1.1.1.1	192.168.2.4	0x1cb2	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:07.911585093 CEST	1.1.1.1	192.168.2.4	0xf42e	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:07.925498009 CEST	1.1.1.1	192.168.2.4	0x9289	No error (0)	isteam.wsimg.com		35.157.66.55	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:07.925498009 CEST	1.1.1.1	192.168.2.4	0x9289	No error (0)	isteam.wsimg.com		3.121.64.201	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:10.155567884 CEST	1.1.1.1	192.168.2.4	0xf36e	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:19:10.155581951 CEST	1.1.1.1	192.168.2.4	0xe92c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 28, 2024 05:19:10.673108101 CEST	1.1.1.1	192.168.2.4	0x9123	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:10.676729918 CEST	1.1.1.1	192.168.2.4	0x114b	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:17.868829012 CEST	1.1.1.1	192.168.2.4	0xebed	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:17.913775921 CEST	1.1.1.1	192.168.2.4	0x7281	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:18.075268984 CEST	1.1.1.1	192.168.2.4	0x3c64	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:18.076035023 CEST	1.1.1.1	192.168.2.4	0x8a18	No error (0)	csp.secureserver.net	csp.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:19.247076988 CEST	1.1.1.1	192.168.2.4	0x72a8	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:19.247334003 CEST	1.1.1.1	192.168.2.4	0xada3	No error (0)	events.api.secureserver.net	wildcard-sni-only.api.secureserver.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:20.633028030 CEST	1.1.1.1	192.168.2.4	0x2a14	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:20.635936022 CEST	1.1.1.1	192.168.2.4	0xb83c	No error (0)	www.godaddy.com	wildcard-ipv6.godaddy.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:22.907497883 CEST	1.1.1.1	192.168.2.4	0x74f0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 05:19:22.907497883 CEST	1.1.1.1	192.168.2.4	0x74f0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

met-aa-mass-klog-in.godaddysites.com

fs.microsoft.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	13.248.243.5	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:19:07 UTC	679	OUT	GET / HTTP/1.1 Host: met-aa-mass-klog-in.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:19:07 UTC	1224	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: c2fb6dc826642cacd650b5bc9b1a55a3 Date: Sat, 28 Sep 2024 03:19:07 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:19:07 UTC	15160	IN	Data Raw: 32 31 37 38 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 32 66 31 35 38 61 36 63 2d 30 38 31 66 2d 34 38 62 65 2d 61 31 31 37 2d 30 30 65 36 36 35 37 38 62 61 62 30 2f 66 61 76 69 63 6f 6e 2f 32 30 33 33 35 33 61 65 2d 32 39 32 62 2d 34 32 63 61 2d 39 64 36 38 2d 30 30 32 31 66 39 32 32 62 34 65 32 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d Data Ascii: 21783<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com
2024-09-28 03:19:07 UTC	16384	IN	Data Raw: 20 2e 63 31 2d 35 62 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 2e 78 20 2e 63 31 2d 35 63 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 6c 69 6e 65 7d 2e 78 20 2e 63 31 2d 35 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 70 78 7d 2e 78 20 2e 63 31 2d 35 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 7d 2e 78 20 2e 63 31 2d 35 73 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 78 20 2e 63 31 2d 35 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 35 75 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 35 7a 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 78 20 2e 63 31 2d 36 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 7d 2e Data Ascii: .c1-5b{line-height:1.25}.x .c1-5c{white-space:pre-line}.x .c1-5d{border-bottom-width:0px}.x .c1-5n{font-size:40px}.x .c1-5s{flex-wrap:wrap}.x .c1-5t{margin-right:-12px}.x .c1-5u{margin-left:-12px}.x .c1-5z{padding-right:12px}.x .c1-60{padding-left:12px}.
2024-09-28 03:19:07 UTC	16384	IN	Data Raw: 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 34 33 39 32 30 2f 3a 2f 63 72 3d 74 3a 30 25 32 35 2c 6c 3a 30 25 32 35 2c 77 3a 31 30 30 25 32 35 2c 68 3a 31 30 30 25 32 35 2f 72 73 3d 77 3a 34 36 30 35 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 33 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 29 7b 2e 78 20 2e 63 31 2d 39 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 Data Ascii: "//img1.wsimg.com/isteam/stock/43920/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:4605,m")}}@media (min-width: 1536px) and (max-width: 1920px){.x .c1-9a{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.24) 0%, rgba(0, 0, 0, 0.24) 100%), url("//img
2024-09-28 03:19:08 UTC	16384	IN	Data Raw: 20 32 29 2c 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 35 31 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 7b 2e 78 20 2e 63 31 2d 62 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 44 78 4f 71 71 6b 51 2f 3a 2f 72 73 3d 77 3a 31 35 33 34 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 Data Ascii: 2), (min-width: 451px) and (max-width: 767px) and (min-resolution: 192dpi){.x .c1-ba{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.24) 0%, rgba(0, 0, 0, 0.24) 100%), url("//img1.wsimg.com/isteam/stock/DxOqqkQ/:/rs=w:1534,m")}}@media (min-wi
2024-09-28 03:19:08 UTC	16384	IN	Data Raw: 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 72 20 63 31 2d 34 20 63 31 2d 32 61 20 63 31 2d 32 62 20 63 31 2d 32 63 20 63 31 2d 32 64 20 63 31 2d 32 65 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 64 61 74 61 2d 61 69 64 3d 22 48 45 41 44 45 52 5f 4c 4f 47 4f 5f 52 45 4e 44 45 52 45 44 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 32 66 20 63 31 2d 32 67 20 63 31 2d 32 68 20 63 31 2d 32 69 20 63 31 2d 32 6a 20 63 31 2d 63 20 63 31 2d 32 6b 20 63 31 2d 32 6c 20 63 31 2d 32 6d 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 61 20 72 65 6c 3d 22 22 20 Data Ascii: ="x-el x-el-div c1-1 c1-2 c1-r c1-4 c1-2a c1-2b c1-2c c1-2d c1-2e c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Block" data-aid="HEADER_LOGO_RENDERED" class="x-el x-el-div c1-2f c1-2g c1-2h c1-2i c1-2j c1-c c1-2k c1-2l c1-2m c1-d c1-e c1-f c1-g"><a rel=""
2024-09-28 03:19:08 UTC	16384	IN	Data Raw: 62 20 63 31 2d 63 20 63 31 2d 35 76 20 63 31 2d 35 77 20 63 31 2d 37 73 20 63 31 2d 35 79 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 43 65 6c 6c 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 79 20 63 31 2d 71 20 63 31 2d 34 33 20 63 31 2d 37 74 20 63 31 2d 32 6a 20 63 31 2d 34 30 20 63 31 2d 35 7a 20 63 31 2d 31 72 20 63 31 2d 36 30 20 63 31 2d 72 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 37 75 20 63 31 2d 37 76 20 63 31 2d 36 34 20 63 31 2d 36 35 20 63 31 2d 37 77 20 63 31 2d 36 37 20 63 31 2d 64 20 63 31 2d 34 35 20 63 31 2d 34 36 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 Data Ascii: b c1-c c1-5v c1-5w c1-7s c1-5y c1-d c1-e c1-f c1-g"><div data-ux="GridCell" class="x-el x-el-div c1-1 c1-2 c1-3y c1-q c1-43 c1-7t c1-2j c1-40 c1-5z c1-1r c1-60 c1-r c1-b c1-c c1-7u c1-7v c1-64 c1-65 c1-7w c1-67 c1-d c1-45 c1-46 c1-e c1-f c1-g"><div data-u
2024-09-28 03:19:08 UTC	16384	IN	Data Raw: 63 31 2d 33 70 20 63 31 2d 33 71 22 3e 4c 69 73 74 69 6e 67 20 23 31 20 24 34 30 30 4b 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 65 6e 74 4f 76 65 72 6c 61 79 43 61 72 64 54 65 78 74 22 20 64 61 74 61 2d 61 69 64 3d 22 41 42 4f 55 54 5f 44 45 53 43 52 49 50 54 49 4f 4e 5f 52 45 4e 44 45 52 45 44 31 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 42 6f 64 79 42 65 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 71 20 63 31 2d 32 63 20 63 31 2d 35 62 20 63 31 2d 32 31 20 63 31 2d 32 33 20 63 31 2d 71 20 63 31 2d 39 68 20 63 31 2d 62 20 63 31 2d 39 67 20 63 31 2d 33 33 20 63 31 2d 33 34 20 63 31 2d 33 35 20 63 31 2d 33 36 20 63 31 2d 33 37 20 63 31 2d 33 38 20 78 Data Ascii: c1-3p c1-3q">Listing #1 $400K</h3></div><div data-ux="ContentOverlayCardText" data-aid="ABOUT_DESCRIPTION_RENDERED1" data-typography="BodyBeta" class="x-el c1-1 c1-2 c1-2q c1-2c c1-5b c1-21 c1-23 c1-q c1-9h c1-b c1-9g c1-33 c1-34 c1-35 c1-36 c1-37 c1-38 x
2024-09-28 03:19:08 UTC	16384	IN	Data Raw: 78 2d 65 6c 20 78 2d 65 6c 2d 70 69 63 74 75 72 65 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 34 20 63 31 2d 38 66 20 63 31 2d 32 61 20 63 31 2d 61 71 20 63 31 2d 32 35 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 30 70 78 29 22 20 64 61 74 61 2d 6c 61 7a 79 69 6d 67 3d 22 74 72 75 65 22 20 64 61 74 61 2d 73 72 63 73 65 74 6c 61 7a 79 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 34 33 39 34 39 2f 3a 2f 63 72 3d 74 3a 32 37 2e 31 39 25 32 35 2c 6c 3a 31 2e 39 36 25 32 35 2c 77 3a 39 33 2e 39 25 32 35 2c 68 3a 37 30 2e 34 32 25 32 35 2f 72 73 3d 77 3a 34 30 33 2c 68 3a 32 Data Ascii: x-el x-el-picture c1-1 c1-2 c1-4 c1-8f c1-2a c1-aq c1-25 c1-b c1-c c1-d c1-e c1-f c1-g"><source media="(max-width: 450px)" data-lazyimg="true" data-srcsetlazy="//img1.wsimg.com/isteam/stock/43949/:/cr=t:27.19%25,l:1.96%25,w:93.9%25,h:70.42%25/rs=w:403,h:2
2024-09-28 03:19:08 UTC	7257	IN	Data Raw: 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 63 66 20 63 31 2d 64 68 20 63 31 2d 32 61 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 70 20 64 61 74 61 2d 75 78 3d 22 44 65 74 61 69 6c 73 4d 69 6e 6f 72 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 44 65 74 61 69 6c 73 42 65 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 70 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 71 20 63 31 2d 32 63 20 63 31 2d 36 67 20 63 31 2d 32 31 20 63 31 2d 32 33 20 63 31 2d 62 20 63 31 2d 64 6a 20 63 31 2d 64 6b 20 63 31 2d 33 34 20 63 31 2d 64 6c 20 63 31 2d 64 6d 20 63 31 2d 64 6e 20 63 31 2d 64 6f 22 3e 54 68 69 73 20 73 69 74 65 20 69 73 20 70 72 6f 74 65 63 74 65 64 20 62 79 Data Ascii: -el-div c1-1 c1-2 c1-cf c1-dh c1-2a c1-b c1-c c1-d c1-e c1-f c1-g"><p data-ux="DetailsMinor" data-typography="DetailsBeta" class="x-el x-el-p c1-1 c1-2 c1-2q c1-2c c1-6g c1-21 c1-23 c1-b c1-dj c1-dk c1-34 c1-dl c1-dm c1-dn c1-do">This site is protected by

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49756	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:19:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 03:19:11 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=221151 Date: Sat, 28 Sep 2024 03:19:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49766	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:19:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 03:19:13 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=221179 Date: Sat, 28 Sep 2024 03:19:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 03:19:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	13.248.243.5	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:19:17 UTC	678	OUT	GET /sw.js HTTP/1.1 Host: met-aa-mass-klog-in.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://met-aa-mass-klog-in.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _tccl_visit=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _scc_session=pc=1&C_TOUCH=2024-09-28T03:19:12.177Z
2024-09-28 03:19:18 UTC	663	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: f3b90464a4b0c8f7005e960b8c4c1c90 Date: Sat, 28 Sep 2024 03:19:17 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:19:18 UTC	15721	IN	Data Raw: 38 30 63 65 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 80ce(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 76 2c 7b 6b 65 79 50 61 74 68 3a 22 69 64 22 7d 29 3b 74 2e 63 72 65 61 74 65 49 6e 64 65 78 28 22 63 61 63 68 65 4e 61 6d 65 22 2c 22 Data Ascii: e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){const t=e.createObjectStore(v,{keyPath:"id"});t.createIndex("cacheName","
2024-09-28 03:19:18 UTC	882	IN	Data Raw: 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 75 72 6c 3a 65 7d 29 3d 3e 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c Data Ascii: ,e.registerRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({url:e})=>"https://fonts.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49814	13.248.243.5	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:19:18 UTC	576	OUT	GET /manifest.webmanifest HTTP/1.1 Host: met-aa-mass-klog-in.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://met-aa-mass-klog-in.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:19:18 UTC	666	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 77dbf2cc48c0abefef7adcbbdb29b525 Date: Sat, 28 Sep 2024 03:19:18 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:19:18 UTC	549	IN	Data Raw: 32 31 39 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 32 66 31 35 38 61 36 63 2d 30 38 31 66 2d 34 38 62 65 2d 61 31 31 37 2d 30 30 65 36 36 35 37 38 62 61 62 30 2f 66 61 76 69 63 6f 6e 2f 32 30 33 33 35 33 61 65 2d 32 39 32 62 2d 34 32 63 61 2d 39 64 36 38 2d 30 30 32 31 66 39 32 32 62 34 65 32 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 Data Ascii: 219{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:192,h:192,m"},{"sizes":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49823	13.248.243.5	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:19:18 UTC	656	OUT	GET / HTTP/1.1 Host: met-aa-mass-klog-in.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://met-aa-mass-klog-in.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _tccl_visit=f30e8a6a-249e-4b95-aca7-2880c7c5018f; _scc_session=pc=1&C_TOUCH=2024-09-28T03:19:12.177Z
2024-09-28 03:19:18 UTC	1224	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.12.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: c2fb6dc826642cacd650b5bc9b1a55a3 Date: Sat, 28 Sep 2024 03:19:18 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:19:18 UTC	15160	IN	Data Raw: 32 31 37 38 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 32 66 31 35 38 61 36 63 2d 30 38 31 66 2d 34 38 62 65 2d 61 31 31 37 2d 30 30 65 36 36 35 37 38 62 61 62 30 2f 66 61 76 69 63 6f 6e 2f 32 30 33 33 35 33 61 65 2d 32 39 32 62 2d 34 32 63 61 2d 39 64 36 38 2d 30 30 32 31 66 39 32 32 62 34 65 32 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d Data Ascii: 21783<!DOCTYPE html><html lang="en-US"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/2f158a6c-081f-48be-a117-00e66578bab0/favicon/203353ae-292b-42ca-9d68-0021f922b4e2.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 20 2e 63 31 2d 35 62 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 2e 78 20 2e 63 31 2d 35 63 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 6c 69 6e 65 7d 2e 78 20 2e 63 31 2d 35 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 70 78 7d 2e 78 20 2e 63 31 2d 35 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 7d 2e 78 20 2e 63 31 2d 35 73 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 78 20 2e 63 31 2d 35 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 35 75 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 35 7a 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 78 20 2e 63 31 2d 36 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 7d 2e Data Ascii: .c1-5b{line-height:1.25}.x .c1-5c{white-space:pre-line}.x .c1-5d{border-bottom-width:0px}.x .c1-5n{font-size:40px}.x .c1-5s{flex-wrap:wrap}.x .c1-5t{margin-right:-12px}.x .c1-5u{margin-left:-12px}.x .c1-5z{padding-right:12px}.x .c1-60{padding-left:12px}.
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 34 33 39 32 30 2f 3a 2f 63 72 3d 74 3a 30 25 32 35 2c 6c 3a 30 25 32 35 2c 77 3a 31 30 30 25 32 35 2c 68 3a 31 30 30 25 32 35 2f 72 73 3d 77 3a 34 36 30 35 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 35 33 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 39 32 30 70 78 29 7b 2e 78 20 2e 63 31 2d 39 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 Data Ascii: "//img1.wsimg.com/isteam/stock/43920/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:4605,m")}}@media (min-width: 1536px) and (max-width: 1920px){.x .c1-9a{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.24) 0%, rgba(0, 0, 0, 0.24) 100%), url("//img
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 20 32 29 2c 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 35 31 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 7b 2e 78 20 2e 63 31 2d 62 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 44 78 4f 71 71 6b 51 2f 3a 2f 72 73 3d 77 3a 31 35 33 34 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 Data Ascii: 2), (min-width: 451px) and (max-width: 767px) and (min-resolution: 192dpi){.x .c1-ba{background-image:linear-gradient(to bottom, rgba(0, 0, 0, 0.24) 0%, rgba(0, 0, 0, 0.24) 100%), url("//img1.wsimg.com/isteam/stock/DxOqqkQ/:/rs=w:1534,m")}}@media (min-wi
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 72 20 63 31 2d 34 20 63 31 2d 32 61 20 63 31 2d 32 62 20 63 31 2d 32 63 20 63 31 2d 32 64 20 63 31 2d 32 65 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 64 61 74 61 2d 61 69 64 3d 22 48 45 41 44 45 52 5f 4c 4f 47 4f 5f 52 45 4e 44 45 52 45 44 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 32 66 20 63 31 2d 32 67 20 63 31 2d 32 68 20 63 31 2d 32 69 20 63 31 2d 32 6a 20 63 31 2d 63 20 63 31 2d 32 6b 20 63 31 2d 32 6c 20 63 31 2d 32 6d 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 61 20 72 65 6c 3d 22 22 20 Data Ascii: ="x-el x-el-div c1-1 c1-2 c1-r c1-4 c1-2a c1-2b c1-2c c1-2d c1-2e c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Block" data-aid="HEADER_LOGO_RENDERED" class="x-el x-el-div c1-2f c1-2g c1-2h c1-2i c1-2j c1-c c1-2k c1-2l c1-2m c1-d c1-e c1-f c1-g"><a rel=""
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 62 20 63 31 2d 63 20 63 31 2d 35 76 20 63 31 2d 35 77 20 63 31 2d 37 73 20 63 31 2d 35 79 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 43 65 6c 6c 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 79 20 63 31 2d 71 20 63 31 2d 34 33 20 63 31 2d 37 74 20 63 31 2d 32 6a 20 63 31 2d 34 30 20 63 31 2d 35 7a 20 63 31 2d 31 72 20 63 31 2d 36 30 20 63 31 2d 72 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 37 75 20 63 31 2d 37 76 20 63 31 2d 36 34 20 63 31 2d 36 35 20 63 31 2d 37 77 20 63 31 2d 36 37 20 63 31 2d 64 20 63 31 2d 34 35 20 63 31 2d 34 36 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 Data Ascii: b c1-c c1-5v c1-5w c1-7s c1-5y c1-d c1-e c1-f c1-g"><div data-ux="GridCell" class="x-el x-el-div c1-1 c1-2 c1-3y c1-q c1-43 c1-7t c1-2j c1-40 c1-5z c1-1r c1-60 c1-r c1-b c1-c c1-7u c1-7v c1-64 c1-65 c1-7w c1-67 c1-d c1-45 c1-46 c1-e c1-f c1-g"><div data-u
2024-09-28 03:19:18 UTC	16384	IN	Data Raw: 63 31 2d 33 70 20 63 31 2d 33 71 22 3e 4c 69 73 74 69 6e 67 20 23 31 20 24 34 30 30 4b 3c 2f 68 33 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 65 6e 74 4f 76 65 72 6c 61 79 43 61 72 64 54 65 78 74 22 20 64 61 74 61 2d 61 69 64 3d 22 41 42 4f 55 54 5f 44 45 53 43 52 49 50 54 49 4f 4e 5f 52 45 4e 44 45 52 45 44 31 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 42 6f 64 79 42 65 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 71 20 63 31 2d 32 63 20 63 31 2d 35 62 20 63 31 2d 32 31 20 63 31 2d 32 33 20 63 31 2d 71 20 63 31 2d 39 68 20 63 31 2d 62 20 63 31 2d 39 67 20 63 31 2d 33 33 20 63 31 2d 33 34 20 63 31 2d 33 35 20 63 31 2d 33 36 20 63 31 2d 33 37 20 63 31 2d 33 38 20 78 Data Ascii: c1-3p c1-3q">Listing #1 $400K</h3></div><div data-ux="ContentOverlayCardText" data-aid="ABOUT_DESCRIPTION_RENDERED1" data-typography="BodyBeta" class="x-el c1-1 c1-2 c1-2q c1-2c c1-5b c1-21 c1-23 c1-q c1-9h c1-b c1-9g c1-33 c1-34 c1-35 c1-36 c1-37 c1-38 x
2024-09-28 03:19:19 UTC	16384	IN	Data Raw: 78 2d 65 6c 20 78 2d 65 6c 2d 70 69 63 74 75 72 65 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 34 20 63 31 2d 38 66 20 63 31 2d 32 61 20 63 31 2d 61 71 20 63 31 2d 32 35 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 73 6f 75 72 63 65 20 6d 65 64 69 61 3d 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 30 70 78 29 22 20 64 61 74 61 2d 6c 61 7a 79 69 6d 67 3d 22 74 72 75 65 22 20 64 61 74 61 2d 73 72 63 73 65 74 6c 61 7a 79 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 34 33 39 34 39 2f 3a 2f 63 72 3d 74 3a 32 37 2e 31 39 25 32 35 2c 6c 3a 31 2e 39 36 25 32 35 2c 77 3a 39 33 2e 39 25 32 35 2c 68 3a 37 30 2e 34 32 25 32 35 2f 72 73 3d 77 3a 34 30 33 2c 68 3a 32 Data Ascii: x-el x-el-picture c1-1 c1-2 c1-4 c1-8f c1-2a c1-aq c1-25 c1-b c1-c c1-d c1-e c1-f c1-g"><source media="(max-width: 450px)" data-lazyimg="true" data-srcsetlazy="//img1.wsimg.com/isteam/stock/43949/:/cr=t:27.19%25,l:1.96%25,w:93.9%25,h:70.42%25/rs=w:403,h:2
2024-09-28 03:19:19 UTC	7257	IN	Data Raw: 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 63 66 20 63 31 2d 64 68 20 63 31 2d 32 61 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 70 20 64 61 74 61 2d 75 78 3d 22 44 65 74 61 69 6c 73 4d 69 6e 6f 72 22 20 64 61 74 61 2d 74 79 70 6f 67 72 61 70 68 79 3d 22 44 65 74 61 69 6c 73 42 65 74 61 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 70 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 71 20 63 31 2d 32 63 20 63 31 2d 36 67 20 63 31 2d 32 31 20 63 31 2d 32 33 20 63 31 2d 62 20 63 31 2d 64 6a 20 63 31 2d 64 6b 20 63 31 2d 33 34 20 63 31 2d 64 6c 20 63 31 2d 64 6d 20 63 31 2d 64 6e 20 63 31 2d 64 6f 22 3e 54 68 69 73 20 73 69 74 65 20 69 73 20 70 72 6f 74 65 63 74 65 64 20 62 79 Data Ascii: -el-div c1-1 c1-2 c1-cf c1-dh c1-2a c1-b c1-c c1-d c1-e c1-f c1-g"><p data-ux="DetailsMinor" data-typography="DetailsBeta" class="x-el x-el-p c1-1 c1-2 c1-2q c1-2c c1-6g c1-21 c1-23 c1-b c1-dj c1-dk c1-34 c1-dl c1-dm c1-dn c1-do">This site is protected by

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5004, Parent PID: 908

General

Target ID:	0
Start time:	23:19:01
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1396, Parent PID: 5004

General

Target ID:	2
Start time:	23:19:04
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6360, Parent PID: 908

General

Target ID:	3
Start time:	23:19:06
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://met-aa-mass-klog-in.godaddysites.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://met-aa-mass-klog-in.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Windows Analysis Report
https://met-aa-mass-klog-in.godaddysites.com/