Windows Analysis Report
https://www.midwestinnovationhub.com/

Overview

General Information

Sample URL:	https://www.midwestinnovationhub.com/
Analysis ID:	1522247
Tags:	urlscan
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Signatures

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: midwestinnovationhub.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=BKEp-3ZoTEUreYLRKKK4VPGzAww&publisher_website_key=wam.md5.0b6d11474dcacb86ff9ecef537115e35 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: midwestinnovationhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=BKEp-3ZoTEUreYLRKKK4VPGzAww&publisher_website_key=wam.md5.0b6d11474dcacb86ff9ecef537115e35 HTTP/1.1Host: ms.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk=ue1-4fea7badb0224ec68481a4d9ef57c848; azk-ss=true
Source: global traffic	HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: midwestinnovationhub.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://midwestinnovationhub.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://midwestinnovationhub.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.midwestinnovationhub.com
Source: global traffic	DNS traffic detected: DNS query: midwestinnovationhub.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: websites.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: ms.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: cdn.reamaze.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundLink: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.44.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossoriginCache-Control: max-age=30Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.comContent-Type: text/html;charset=utf-8Vary: Accept-EncodingServer: DPS/2.0.0+sha-227ca78X-Version: 227ca78X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 29 Sep 2024 13:18:39 GMTConnection: closeTransfer-Encoding: chunked

Source: chromecache_233.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://github.com/JulietaUla/Montserrat)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://github.com/clauseggers/Playfair-Display)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidg18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidh18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidi18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidj18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkido18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidv18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdg18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdh18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdi18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdj18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdo18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdv18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/videos/uA41GmyyG8IMaxXdb
Source: chromecache_223.2.dr	String found in binary or memory: https://midwestinnovationhub.com/
Source: chromecache_160.2.dr	String found in binary or memory: https://midwestinnovationhub.com/404
Source: chromecache_248.2.dr, chromecache_240.2.dr	String found in binary or memory: https://ms.godaddy.com/i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjoz
Source: chromecache_248.2.dr, chromecache_240.2.dr	String found in binary or memory: https://ms.godaddy.com/r?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/236@32/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.midwestinnovationhub.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5872 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5872 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_203.2.dr

Binary or memory string: QEMUz)Q_

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
76.223.105.230	midwestinnovationhub.com	United States	16509	AMAZON-02US	false
104.22.9.8	cdn.reamaze.com	United States	13335	CLOUDFLARENETUS	false
52.208.82.82	e-prod-alb-s102-eu-west-1-02.adzerk.net	United States	16509	AMAZON-02US	false
104.22.8.8	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.64.248.63	isteam.wsimg.com	United States	16509	AMAZON-02US	false
34.250.180.246	unknown	United States	16509	AMAZON-02US	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.5

Contacted Domains

Name	IP	Active
bg.microsoft.map.fastly.net	199.232.210.172	true
midwestinnovationhub.com	76.223.105.230	true
e-prod-alb-s102-eu-west-1-02.adzerk.net	52.208.82.82	true
www.google.com	172.217.18.100	true
cdn.reamaze.com	104.22.9.8	true
isteam.wsimg.com	3.64.248.63	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true
img1.wsimg.com	unknown	unknown
csp.secureserver.net	unknown	unknown
events.api.secureserver.net	unknown	unknown
www.godaddy.com	unknown	unknown
www.midwestinnovationhub.com	unknown	unknown
ms.godaddy.com	unknown	unknown
websites.godaddy.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://cdn.reamaze.com/assets/reamaze-godaddy-loader.js	false	unknown
https://midwestinnovationhub.com/	false	unknown
https://midwestinnovationhub.com/favicon.ico	false	unknown
https://midwestinnovationhub.com/markup/ad	false	unknown
https://midwestinnovationhub.com/manifest.webmanifest	false	unknown
https://www.midwestinnovationhub.com/	false	unknown
https://ms.godaddy.com/i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2NjY5OTcsImNoIjo1NDQ0NSwiY2siOnt9LCJjciI6NDA4ODkzMDIyLCJkaSI6ImFhNmE1MGZjZTg3YzQxMGI5ODU2ODhjNzU0Mjc2N2U0IiwiZGoiOjAsImlpIjoiM2U4NmIwMjNlZWIzNDQ2ZDhiZTk4M2VlNTIxODY3ODciLCJkbSI6MywiZmMiOjU4Mzk1MjEyMywiZmwiOjU3MTk5NDU0MywiaXAiOiI2NC4yMDIuMTYwLjAiLCJrdyI6Int7a2V5d29yZH19IiwibnciOjEwNjYzLCJwYyI6MCwib3AiOjAsIm1wIjowLCJlYyI6MCwiZ20iOjAsImVwIjpudWxsLCJwciI6MjE4NDY1LCJydCI6MSwicnMiOjUwMCwic2EiOiI1MiIsInNiIjoiaS0wZjJkNDAyYmMxYmMwNjJjMyIsInNwIjoyNzY4MjIxLCJzdCI6MTI3NjI2NCwidWsiOiJ1ZTEtNGZlYTdiYWRiMDIyNGVjNjg0ODFhNGQ5ZWY1N2M4NDgiLCJ6biI6MzA3NDk1LCJ0cyI6MTcyNzYxNTkwNjc4OSwicG4iOiJ3YW0iLCJnYyI6dHJ1ZSwiZ0MiOnRydWUsImdzIjoibm9uZSIsImRjIjoxLCJ0eiI6IlVUQyIsImJhIjoxLCJmcSI6MH0&s=BKEp-3ZoTEUreYLRKKK4VPGzAww&publisher_website_key=wam.md5.0b6d11474dcacb86ff9ecef537115e35	false	unknown
https://midwestinnovationhub.com/sw.js	false	unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 12:18:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	0627CEB85EE6B52B7200832AD3B75BF1	F74652E359A8127172962D54C32ECB2B26B97096	06501BE367D5E77BF1FD2AEF1B30BB5D78386AE7DDB9D0776CFB800D1AEF5741
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 12:18:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	956A784F97E5A060E8E50FCC3CE121A7	5C76839CB6BF7223428A7B8AB38F3A21F2082A86	C3FED39FABF6BA8B6253BDE0D90871813FB6CD1D6EB25645258AA2239D215C9C
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	E243C886A6EE76D99D97E95888EE8D45	25B8D4B4FA875B9746DAC1501D462456CAF1D25D	97AC7797F96192B77BEFF3908E025CDE7A523CDF1239972CD65B27DFC85DF1D0
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 12:18:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	833B2029FB26F5BC48F8831C935E4A4E	B002E4B8EFF08C655A1AD9B90D44BECE50CBC597	A30D6967CA22E5A49C53CF4304D3A3F405509C70AC4DA841ADD02D13E3457E60
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 12:18:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	9E3F477D16764250D41E1C670F68B89A	CE713D10E03460CB3A737CFE70DADD9FFCA9B43B	C07808900A16FC1E42FE54A50C9C6B2F0922AC0DA87DE31B987875CEB20F52DC
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 12:18:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	499418B6B1D86396B61C26DF0B96B340	49BC387A5CB5C185B2FF815FF49FF9588799051B	2C11EED31EB232E7F4CEB7FF16D5279A5E6CA1674CA4FB89CEEA4BD7D6B4815B
Chrome Cache Entry: 131	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 132	ASCII text, with very long lines (6916)	AB0907D3EE2B46535AA1E09F0A85497F	F6A868D8C23AF17F4A105349AA713D712C2EC42C	C460E9D101ECB7C25D02C05C507B09C77800EFF58BCF0E8203B1D4761BDE4BB0
Chrome Cache Entry: 133	RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp	138F196E984491E32DAC12235FE1831E	0B41EE506C82DD5F6795BFD7A2307926540BCB78	2DC50F75EAA74A4F9537B32D692CAF20293333C1D108B9CE8F1E42DA87AEB6B1
Chrome Cache Entry: 134	ASCII text, with very long lines (2368)	ABFD2ADA44521989F7C040FC3EAEF6C9	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
Chrome Cache Entry: 135	data	04B3C7BAB4110A5624BE2E0558A75F08	992689DCBA6E9F07D24EA453C9779E6CCADC12F5	5EB8182D6F836350EF4149EEE841B4C1B4C499B422AA63A2DD7E4561F8B4F9FA
Chrome Cache Entry: 136	data	69173F5962606F7C3FDF87E7DC52F2EC	34E1E78A676FC07C968BF31E791422F4D208DD55	B45B4EA6B8275943DD13164B828174A6EC35D2596954CCD969D9432302A01454
Chrome Cache Entry: 137	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 138	Web Open Font Format (Version 2), TrueType, length 14780, version 1.0	8DAE809192C44690275A3624133293E7	969C98C4D7EB00386EBBD61A63288972D138ECB8	C3DE27B2CBD6DEDA629C9B442700CF54C0DDA74E494B1C75A57D822068A047F8
Chrome Cache Entry: 139	ASCII text, with very long lines (558), with no line terminators	29FCF11902728829DE4A2413EBA40216	D707FBFF1F6265FB2DA7204C5F2D2BD528134990	EFF1A472910977522D14647F2141FADE22114F49C698F9919E598433661EA76B
Chrome Cache Entry: 140	ASCII text, with very long lines (32914), with no line terminators	4A9E6872B3B195A77A27D0F6DFDEA3AB	AC066CC3CE980FAFFFA2F0FD6A252CA776D6FC64	282F857A55F4D92D8370AAEB0FC9AAE857B4FA871AD2C8DAF87843833231F5CD
Chrome Cache Entry: 141	data	A4E1E3AF8B0131513252247A60ABFF7B	13D6E7227A9D7C631F9C241F39A516ACDBC9B4A7	28836A359D88D2DC23144902DBF101341AD2551387C3FBDF42BEFFC271F1463A
Chrome Cache Entry: 142	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 143	ASCII text, with very long lines (1352)	5CC6B93D41889C0A55C6C4FCD2D89713	51A59C1DAE337817C4EBAC39FBE61C232705A893	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
Chrome Cache Entry: 144	Web Open Font Format (Version 2), TrueType, length 14712, version 1.0	3AFEAE0D768769F5E5F30AC9805C5B70	3ADA17C2B462DB3E7A1FD85C3F4670DFE7704F4D	0D0A6262C545E8BBC895116E5AFB22579C468D7ABB77E378F377D6FED57C1DCE
Chrome Cache Entry: 145	ASCII text, with very long lines (5584)	59F227C41E16EB3F2AB54615D7BEB772	A2F81AEC9B0B5D252029EC023D2602AB707EA93B	05E279B27F78F425E19E8F8FF024817AA192F3BFA723457577F77971CFB6D215
Chrome Cache Entry: 146	data	2645A2A1BBA0B0708FF612BB82762825	C7C8EC960836B7B61308CEBD48EFB18FE44EF60D	0CB66B96158D3D6A1FC163A210A36D090ACF885CF3947D7D92FD55544C052123
Chrome Cache Entry: 147	ASCII text, with very long lines (905)	62A914B2C847D4D02B76164D7A2A54C6	20D9F49A90A51FA6C8420640610DF77F7A96D919	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
Chrome Cache Entry: 148	ASCII text, with very long lines (4451)	7E8957E798608B7835B0681550C5AD10	51C7EBE582DAC764DB4C1AFAA95A62EAC9261F05	FAEC63FA9BF35E462C000E650B53D7569FCABE5BA8190B27D2A4B7D25B394EEF
Chrome Cache Entry: 149	HTML document, ASCII text	5EA840C0DA0838378AD9B596015BCC0F	4A17A89CD80FEB4C5E531DF69790FC6AABB5F38F	12348C57D4EC3915ED3A59BD613A0A8E7D2A83368A525BE04169D6F60C1C0532
Chrome Cache Entry: 150	data	F947B8967C5556E91EB568926192C3B1	9276717F5FC5DCCB671F8F2C75873F9BA77DDAE3	1D409F7EE7A02F72F0EC3EAE9F3D34665E4623ED99126110CEE859475CD7A37A
Chrome Cache Entry: 151	ASCII text	ACD4F2B6117E5054FC9BF848AE8121CA	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
Chrome Cache Entry: 152	ASCII text, with very long lines (3413)	C3D158DD0CA8F03BE8076082E60DD970	1A65A18CF163E030080495F58DF81A98D3139C43	A79DF16E25491D44AF09EE37B8D06A1674B5FE969D11E54A4249C63BEA4206B8
Chrome Cache Entry: 153	ASCII text, with very long lines (1828)	EA7B43247456DD8D6561B0F8E73E1AFC	1EE768C007186E37881D77D09D9F529AFE7D457D	09E763FF44E36E2CF8A2CF1057DEB967BDCA030EC974FDB8FC51AB28A623C1E5
Chrome Cache Entry: 154	data	44CADCD88EE0F08D686C30D45929699C	02C8D710DFF5A9A4674224CAC91E88EFBA81CA1E	766444E2A09B6F7BE3F4F31156BABD88DED95185653605152308FDAA3D267A4C
Chrome Cache Entry: 155	ASCII text, with very long lines (14212)	203CE81B389242F715504E0A5730366E	D1120ECFADAFBACFF304DAB5611565D337C03E11	DE96FF3F996376FFE9DBE02FAA6F26DAD8C40BB0A78C7CA49EF2D648F8C8799B
Chrome Cache Entry: 156	Unicode text, UTF-8 text, with very long lines (65269)	D11DB843A60845CAEB739360A56357F2	1117E38176BF2E8C0DD205189AAAB7207D3A1DCE	68CFDE1B0BA149C9C45E29D78C0C111D39BDB29DF9B73EC813E7856A90CEC235
Chrome Cache Entry: 157	ASCII text	BE80E888690B6CADD380074C51BEAD6D	41A44DD876FCCF1CF4A36EEA9C6A1B46DAC5351C	446620506B750FD4521D02CA3CFB477AC940A996D87A78C138CF62A615DAFE51
Chrome Cache Entry: 158	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 159	DOS executable (COM, 0x8C-variant)	FABD09B0CE40F081592C8EF30EBC8747	3338D34ABC1365D90D6EE657BE2C97773C3949FC	4C33C92894BA3FAD85AF7A361588DD945E4468CA750C4AFBEDC69AF3B01CCDBA
Chrome Cache Entry: 160	HTML document, Unicode text, UTF-8 text, with very long lines (23577)	315C9F055F0739A2353E779E14157E4D	2C6D018486ACE663A1E2118DBD3964DDFB65F47C	F02462C4B2DA4FDA474E43B7E7CBE88944BF807B46190B304845C9757BFA5242
Chrome Cache Entry: 161	data	5F1CF01A3600D8C45595FF42169F151A	8E63508B055B9EB7C4EF60788F87936AE2FEF2C8	DE4BACF37CB302E2894F36C5E72881B1424B97FF2B032A9848C2E66D37EB7F93
Chrome Cache Entry: 162	ASCII text, with very long lines (4451)	7E8957E798608B7835B0681550C5AD10	51C7EBE582DAC764DB4C1AFAA95A62EAC9261F05	FAEC63FA9BF35E462C000E650B53D7569FCABE5BA8190B27D2A4B7D25B394EEF
Chrome Cache Entry: 163	RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x608, Scaling: [none]x[none], YUV color, decoders should clamp	F997EA86BA4A6B6AED2568C6F9B3903C	DF14865CE0D197288F4B9D1E0A5263969AB902D7	BE078D206F6FA991F140F616FFFDDA0FF10A97CB5A49BC1F75B6C14644D9A8FE
Chrome Cache Entry: 164	data	3D4D1C0BBDE2816BA7B41381E7C6FE97	E100E6CD624C63EB3318E9D5F8010CB316679266	7DF1132484B0CDB0EC12098B79EE69EC8EA6ED03B605D1284EA6EE05887EF3C8
Chrome Cache Entry: 165	ASCII text, with very long lines (56356)	345B0A693E8B56352777AE3D2B0836E5	D8DBC5798DDED5505491F2ACE518BC803DB95DE4	2C40D4E690D9F16D4CF13838FDBA0C0710E454D6ADBDBFDEA2A6C346FF8C74A4
Chrome Cache Entry: 166	ASCII text, with very long lines (651)	7B01FCDF2048E82F4DF741791CD44F61	D1D126931B5D6937B1496E7950342D6A06F361B9	CBC04C06117804A9A97013C97A0714B027DF8279C5F1D0FD0478756A0944AEE6
Chrome Cache Entry: 167	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0	057478083C1D55EA0C2182B24F6DD72F	CAF557CD276A76992084EFC4C8857B66791A6B7F	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
Chrome Cache Entry: 168	ASCII text, with very long lines (829)	9219CF782ED219BD3929A51E99503BC2	6AAC399854EC0405949566FAFDCA8C121F0CDA58	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
Chrome Cache Entry: 169	Web Open Font Format (Version 2), TrueType, length 14200, version 1.0	8189FC633208846686EEC91EA316D6FE	CE99A5D3A3E51EA1166DE5E664265DB6F7783449	FAE9EE8DA96BA004F96A5719E3CD323B3248C49A28E56777CE829900D50929ED
Chrome Cache Entry: 170	ASCII text, with very long lines (367)	401821742DEF46C40D4CF5F0121C8BEC	1852305A4F2D7E120F9B7BD185790B98CDF9BFA6	462D8298239BC61418760DB4204CD135D990537E625782D059CB9D3A1D0266A4
Chrome Cache Entry: 171	data	0CBC4F44A890528748407619E109F172	259C8F537A83F7FF0225086CCD1162FB3A4AEB59	87DF21A16AB3A6699112F4BCF3A8022649EA85BE7B822C90E9629AB7B1F213F2
Chrome Cache Entry: 172	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 173	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 174	ASCII text	DAA79AD7558674F6A12D962ABF47F2F6	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
Chrome Cache Entry: 175	data	37CF5C860E39A8CDF4396556FC695DDF	9285FF2492C324177D46F5E9E32430CE9DC32257	29E13B5671E8C8C464D798CF5FDC5B9F4A592E0DADA7685B8C8D0536479C55E7
Chrome Cache Entry: 176	data	9C480766ED142149497CA9C6DBD88EFF	18098A702B880A1028672F390DF6205314359CF4	8FE580929B1EA3B2BC2E085C7B539196F245A3B2667778BFA0FF7779516C7B99
Chrome Cache Entry: 177	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 178	ASCII text, with very long lines (829)	84D95B7A2C73DBCCE629E7A7CC1DD0B8	B597F2E6E17792A9A415D445166CB20A4980A50D	BAEBB194CD33324576498D7F6872896ADEEDC3705793F647FFDB1937EDC53C37
Chrome Cache Entry: 179	ASCII text, with very long lines (3413)	C3D158DD0CA8F03BE8076082E60DD970	1A65A18CF163E030080495F58DF81A98D3139C43	A79DF16E25491D44AF09EE37B8D06A1674B5FE969D11E54A4249C63BEA4206B8
Chrome Cache Entry: 180	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 181	data	423FD86F1615D377605B66651BDF76A9	A4954A8E76B87E3BD7B1A2E027A9F74620ABD676	20CC6B752B5701ED2B5DF28C45E60D7CAF4C46AF8BD8E5B80536B351075182A7
Chrome Cache Entry: 182	ASCII text, with very long lines (786)	31B521136207C11FF1F9985264424E8A	9EAF6B9717979CAEB5C7E846E17B2A89A08DC266	C818B56446AE5A8D0466FC9C51D85104584E36F6D8B1C77E08A2D354E845E2CD
Chrome Cache Entry: 183	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 184	data	F6D131F200BF545DAF41FB13C22D27F8	DBCF18BA78A7F56C413FBA2DD633D5E1D4CE1767	2E6CAE6D61D5D920B0A53F8D32987857BEC33FD9CA8D83482FEAF21EA16FAE2A
Chrome Cache Entry: 185	ASCII text, with very long lines (367)	401821742DEF46C40D4CF5F0121C8BEC	1852305A4F2D7E120F9B7BD185790B98CDF9BFA6	462D8298239BC61418760DB4204CD135D990537E625782D059CB9D3A1D0266A4
Chrome Cache Entry: 186	ASCII text, with very long lines (12251)	DFB4BEE7C6378574342CDFCE62FDD1D7	75679AE1470880C7209353283879CB58C010621B	BFF3C0C2907BCFFD63DEDC687B8FCA61197E8B783C644B3D665AC3620C383E3C
Chrome Cache Entry: 187	data	F51072B44ADBF4F7D164CBA53F776480	B1489D0AA12FD74F64758C0C42880E619CEBBAB4	FD22BCBEAA29C45E7A02090BF65FA1A261F764B2A62CAE9D3B967F112AE21652
Chrome Cache Entry: 188	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 189	Unicode text, UTF-8 text, with very long lines (65269)	D11DB843A60845CAEB739360A56357F2	1117E38176BF2E8C0DD205189AAAB7207D3A1DCE	68CFDE1B0BA149C9C45E29D78C0C111D39BDB29DF9B73EC813E7856A90CEC235
Chrome Cache Entry: 190	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 191	ASCII text, with very long lines (402)	B31CA26CAEF1D0D113F02708B657E774	46C3423E3F1699DEA53BBBA20248B39EFDE62921	373177CF6B2A9DC7CF5E924677FAA5F61E4B609CFF3E7A888FBE64494B4DB028
Chrome Cache Entry: 192	ASCII text, with very long lines (966)	352FFAB43E1CEC3BB949809E347B423B	F08547F3BC7D5D8C8FA6F058DFFE5D68AA42E943	E2AA142D9E27BD75B23BB0827CEDB6E05CCDD2AD42C9ACC1D4597B2DD4093EB5
Chrome Cache Entry: 193	ASCII text, with very long lines (651)	7B01FCDF2048E82F4DF741791CD44F61	D1D126931B5D6937B1496E7950342D6A06F361B9	CBC04C06117804A9A97013C97A0714B027DF8279C5F1D0FD0478756A0944AEE6
Chrome Cache Entry: 194	ASCII text, with very long lines (65536), with no line terminators	3E520E04A1F13F79A3C9FEE2C3CFD6A8	E15E48FBA2510FFD66BA5A011C62FEBAC5B735AC	E4B3563C59710C6833CD988DC098D0746114CD73E0D1E6592097B6EED22D68C0
Chrome Cache Entry: 195	data	6B297CBC99F899DB884022F6E567312F	84751EEA3DA819AD6597E06ABD52CCC4F283489A	10E471F0F5F07CE388F11AE084910CB30271B6CB228CE97D9D970355FD907834
Chrome Cache Entry: 196	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 197	ASCII text, with very long lines (5584)	59F227C41E16EB3F2AB54615D7BEB772	A2F81AEC9B0B5D252029EC023D2602AB707EA93B	05E279B27F78F425E19E8F8FF024817AA192F3BFA723457577F77971CFB6D215
Chrome Cache Entry: 198	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 199	ASCII text, with very long lines (56356)	345B0A693E8B56352777AE3D2B0836E5	D8DBC5798DDED5505491F2ACE518BC803DB95DE4	2C40D4E690D9F16D4CF13838FDBA0C0710E454D6ADBDBFDEA2A6C346FF8C74A4
Chrome Cache Entry: 200	ISO Media, MP4 v2 [ISO 14496-14]	F2E0A018F2D7B54936A463B088D55203	49E6E54CF9F574924E6ACFA38DF106349C5DCB2F	0104431E548A91F8CF36FEEA23AECB7C842FA1B262C82E5A4DEE631069F19875
Chrome Cache Entry: 201	ASCII text, with very long lines (3043)	852CBC5322260E00B44F2C682F88B2C7	BCAF229E6134F43EB5F974C9891E4D16FAF1D344	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
Chrome Cache Entry: 202	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66	17081510F3A6F2F619EC8C6F244523C7	87F34B2A1532C50F2A424C345D03FE028DB35635	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
Chrome Cache Entry: 203	data	FA330FC4EDB98C356594780F92BCCD69	C899B51EDDE08DAC85D483C5BFC89C9C7CEC92DD	593C4110ADF774CAC703D0F5059AC145876926C224D9B2B73A6644B34D2E6F40
Chrome Cache Entry: 204	ASCII text, with no line terminators	6F492B0FE3D6A1A8A8BE11FA5FDD5A0E	950A191C15A15643C4DEC044406196C12B627D7E	4E2ADE748333A6C08CAF2D189E0B387D59E337BD984C6DA3C6B993B525DF9FD3
Chrome Cache Entry: 205	data	B0E62E3AF028463606012C6BBAFE874C	B8DD2D9F3890DB6333E1B5ABCB8F9CDEE9108E2D	3BC2D102F2807C25D7212ED1BA06D35F9B5A457E57ACFAB213A72A9BCBE10836
Chrome Cache Entry: 206	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 207	ASCII text, with very long lines (330)	C86B7F8224FA45FB1682AC94D8F75AC6	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
Chrome Cache Entry: 208	data	996026045E6963C8BAC26F97CDA3E349	F330258FB9D5E3A9F1C8517AF32E044FE7AA2664	88B3966BC856074B0C94D2A9CB2E1802DDA2319486EA209728FCB248DDFF9B76
Chrome Cache Entry: 209	ASCII text, with very long lines (6916)	AB0907D3EE2B46535AA1E09F0A85497F	F6A868D8C23AF17F4A105349AA713D712C2EC42C	C460E9D101ECB7C25D02C05C507B09C77800EFF58BCF0E8203B1D4761BDE4BB0
Chrome Cache Entry: 210	JSON data	3249E4724073AEBC485A5F20A96FE748	EDD9DCFEABD4F34893CEB7DD8181FB06A7D44CEE	E33FCA1700E454FD969C111EBC38AB3F0F9F483F7AF78DA0CD8EFB7123C6C4CD
Chrome Cache Entry: 211	Web Open Font Format (Version 2), TrueType, length 14160, version 1.0	6CAF2B9A15E4AE129857767920794068	DC6946A2C472822BC25B5FAD19587B998A62B07E	500F8AAF69DDCF71A16CEAE58C927F03371B33665185E16DF347B67F7F11BDB9
Chrome Cache Entry: 212	data	82D69D9EF1CE3D93B9D341D8E5711A4D	E4A665B819FE72C47187A7FCDBA8EFE00E70335A	4635B1CFFD9D466C19F9F0660A3D12D93D3B518C4FDDF4AF0B6EB9072AFD27F0
Chrome Cache Entry: 213	ASCII text, with very long lines (786)	31B521136207C11FF1F9985264424E8A	9EAF6B9717979CAEB5C7E846E17B2A89A08DC266	C818B56446AE5A8D0466FC9C51D85104584E36F6D8B1C77E08A2D354E845E2CD
Chrome Cache Entry: 214	data	19691BB3EFD7ED68288CF4835F48C005	23DDA465613667EABEF19D8E1F1E9453E3833425	B6FFAC498B30BAA7C93376EE809A0B2349EB6548DF7B635960EA0607D67AD918
Chrome Cache Entry: 215	data	B2B618E61020D2B0B8B8215ABC23A6D6	E398A11F183DC16AD3D47F84F86DB6939C7ED9BD	1C47F178A3DF674B19E7B00E05C0A8EF6C150621D8720561F4454B7B27B165F2
Chrome Cache Entry: 216	ASCII text, with very long lines (442)	5F10DF611C856F376981BE4DFBD17753	4463A27419B2FDFDBD81770C74DEE2E74BE948E0	EBD2BA2A0E879AE2CEC7D513324E04346153A581BE3AA202662E6C9D5B1CE6E1
Chrome Cache Entry: 217	ASCII text, with very long lines (966)	352FFAB43E1CEC3BB949809E347B423B	F08547F3BC7D5D8C8FA6F058DFFE5D68AA42E943	E2AA142D9E27BD75B23BB0827CEDB6E05CCDD2AD42C9ACC1D4597B2DD4093EB5
Chrome Cache Entry: 218	ASCII text, with very long lines (65536), with no line terminators	3E520E04A1F13F79A3C9FEE2C3CFD6A8	E15E48FBA2510FFD66BA5A011C62FEBAC5B735AC	E4B3563C59710C6833CD988DC098D0746114CD73E0D1E6592097B6EED22D68C0
Chrome Cache Entry: 219	OpenPGP Public Key	E1A9CF88C73E6B5D0F2EDE690DC5ACA3	C975211058A030A64996BEFDD92FB17D66760806	2CB7A7723E5447622D1341A99741A1B7FE77DF8C8752CCAB304FED5653AECFFC
Chrome Cache Entry: 220	ASCII text	8F12765EB30FBDCFCDC116D13F7FC272	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
Chrome Cache Entry: 221	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66	A4BCA6C95FED0D0C5CC46CF07710DCEC	73B56E33B82B42921DB8702A33EFD0F2B2EC9794	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
Chrome Cache Entry: 222	ASCII text	ACD4F2B6117E5054FC9BF848AE8121CA	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
Chrome Cache Entry: 223	HTML document, Unicode text, UTF-8 text, with very long lines (20459)	4B549492D22C04A6733190461824BCDE	5649A40EFB10A64C26D81E9C1F74A5B3AC173245	147CE46F69B0285764D4A047E443DAEE0975F8E1F27153EAC82D085E2E63DC05
Chrome Cache Entry: 224	ASCII text, with very long lines (829)	9219CF782ED219BD3929A51E99503BC2	6AAC399854EC0405949566FAFDCA8C121F0CDA58	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
Chrome Cache Entry: 225	OpenPGP Secret Key	B1C0246712623C66B9A296F09DC9F768	F05E5AFF8D247D5E3F7FD24136DF602ECBBE6D21	E87AB31208EDABC6914F9080A2663214A925D070BE30B899067E428D8B5250F4
Chrome Cache Entry: 226	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 227	ASCII text, with very long lines (21556)	1C56940A864F144FAE2EB40EE952CB94	EBFC754CE962A1F9025853F2995B3987F0383D87	3C37A4AA3CF6AAAE6921A4B750C0E4F81FD338D6878BE90B0FAF2F921039CB23
Chrome Cache Entry: 228	ASCII text, with very long lines (402)	B31CA26CAEF1D0D113F02708B657E774	46C3423E3F1699DEA53BBBA20248B39EFDE62921	373177CF6B2A9DC7CF5E924677FAA5F61E4B609CFF3E7A888FBE64494B4DB028
Chrome Cache Entry: 229	ASCII text, with very long lines (12251)	DFB4BEE7C6378574342CDFCE62FDD1D7	75679AE1470880C7209353283879CB58C010621B	BFF3C0C2907BCFFD63DEDC687B8FCA61197E8B783C644B3D665AC3620C383E3C
Chrome Cache Entry: 230	ASCII text, with very long lines (442)	5F10DF611C856F376981BE4DFBD17753	4463A27419B2FDFDBD81770C74DEE2E74BE948E0	EBD2BA2A0E879AE2CEC7D513324E04346153A581BE3AA202662E6C9D5B1CE6E1
Chrome Cache Entry: 231	data	EA680E087A9C759B96C364F52E9796D9	2DD333F049415395E4BBEE4B75EA7946D32837B7	2AF9AF04AA3298CC8843C8E9BB2CE07F329B2418159283D0BCDA0BE6CF37AE88
Chrome Cache Entry: 232	ASCII text, with very long lines (14212)	203CE81B389242F715504E0A5730366E	D1120ECFADAFBACFF304DAB5611565D337C03E11	DE96FF3F996376FFE9DBE02FAA6F26DAD8C40BB0A78C7CA49EF2D648F8C8799B
Chrome Cache Entry: 233	Unicode text, UTF-8 text, with very long lines (20947)	753CB19EE1A756E46FAA0F118B1B4E01	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
Chrome Cache Entry: 234	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0	9EC6DEAF6BADA919E20B98F9F7B718B1	501D36403AD8205E4644532600019ECB10F5CB0A	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
Chrome Cache Entry: 235	data	F4756212B8B75512B397CD69716236BE	DE89491A844B730955B50DD584A3362BC479FBCF	A8F382538549A5926F5C0B65FF934635F2E9EE0F78AC46010075F3240631A9C0
Chrome Cache Entry: 236	data	D0B1996CD5977A5D9A9A619AA2A56FD4	65A29318D8079996A853E076DAB5E8180CD0D640	953990E86CC9391E1F279D4599D24A4AFB5785C1213BE20991CC5BD35C8BC175
Chrome Cache Entry: 237	JPEG image data, baseline, precision 8, 1080x608, components 3	EF3BD457B25E79F5C074ADC60890C717	33A6E493FBFF65A95200D1C3920DE2A7A8F86446	1DCBF7B0EF47FBCFE9184BFC632345AA5026A432BC9B3FEEEDB9B989E391CE7B
Chrome Cache Entry: 238	ASCII text, with very long lines (3043)	852CBC5322260E00B44F2C682F88B2C7	BCAF229E6134F43EB5F974C9891E4D16FAF1D344	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
Chrome Cache Entry: 239	data	FC1185AE6EDC9872413A7F0892369EC2	FEA89685CD7C05E7839444F0CD3B67C746C761F5	BA49840A07E0BBB84ACC661491F8B718613733062C8A5D1FF3FD4681BC0E2985
Chrome Cache Entry: 240	HTML document, ASCII text, with very long lines (1781)	7092F30CD279D6F33B50EB81F9FFC0FC	B95CF6EA12BA8B20F5265271F22F10FC76D56424	FFCF854DD3CFD1648B169274C930654712DD8EF1451BEC591DF85538D8FDE34B
Chrome Cache Entry: 241	data	AC3B1DD92BDA5D548A833612A2EF7637	CBD78C170E36DD0BD570B22CAE90C611BDD9741A	D15C43FB17DEFE8A6401AC3174BD3006CF96A9F0D0DCE946ED19B429A7285AFA
Chrome Cache Entry: 242	ASCII text	8578A331AD09BB2EF6359FEC3916BEFC	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
Chrome Cache Entry: 243	ASCII text	BE80E888690B6CADD380074C51BEAD6D	41A44DD876FCCF1CF4A36EEA9C6A1B46DAC5351C	446620506B750FD4521D02CA3CFB477AC940A996D87A78C138CF62A615DAFE51
Chrome Cache Entry: 244	ASCII text, with very long lines (558), with no line terminators	29FCF11902728829DE4A2413EBA40216	D707FBFF1F6265FB2DA7204C5F2D2BD528134990	EFF1A472910977522D14647F2141FADE22114F49C698F9919E598433661EA76B
Chrome Cache Entry: 245	JPEG image data, baseline, precision 8, 192x192, components 3	2460F5DE9DE320900B6EDBEE239CD3A8	F385B3253B914E2044DCDC2384ACF8CC57B2259A	80FF763FE5B062BAFE61FF473D53E0610D68C8A977FA357D55DBE63C85552411
Chrome Cache Entry: 246	ASCII text, with very long lines (1828)	EA7B43247456DD8D6561B0F8E73E1AFC	1EE768C007186E37881D77D09D9F529AFE7D457D	09E763FF44E36E2CF8A2CF1057DEB967BDCA030EC974FDB8FC51AB28A623C1E5
Chrome Cache Entry: 247	ASCII text, with very long lines (1824)	EDC15AD5DAAC3CFA744BFFDB1E0174BE	E314A5CA702D0E77B2C2C023ADDADE266EA223B2	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
Chrome Cache Entry: 248	HTML document, ASCII text, with very long lines (1781)	29D752F817C4D3F8A89F234DAC924D72	EDD0DB40F808C818CFB7C5C21D3FF309D34BD0E0	49A6415E557290E6CC1865370F8DD89D676E856D484ACC779FE9A03E417F2AD5
Chrome Cache Entry: 249	Web Open Font Format (Version 2), TrueType, length 14104, version 1.0	223C4F03708006FDB1F2115D32785A3E	76F4F9FFCAAB85153E403137FE180FC4720E5F45	C5BF2B44104C6AE4BDC5CCAF16169C7D3BF8EA750CDDE9CAE7CC6DD0973A0DD0
Chrome Cache Entry: 250	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 251	ASCII text, with very long lines (522)	FADB3719FFA2A9E96CDC64FFEA0220FA	B9B00833E59E99ECE036B518D8429AF5EFEC1163	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
Chrome Cache Entry: 252	ASCII text, with very long lines (1211)	CB9BFA0FBDD957FBE7F4841B70341DB2	9CAD12A3580D3E4D340CB867E88B687C75564C5A	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
Chrome Cache Entry: 253	ASCII text, with very long lines (65536), with no line terminators	6A7950CC31489069917BF817B62B2BFE	44AAB6E9B8FDBAA23EA297CE69E26422277907C0	1B4DACB0DAFDA81D48EE0890EA113B3B8275BF2D16D5325F971F16EB75F7218A
Chrome Cache Entry: 254	data	03590D15E8F2E2FC72A4E8450327DFE3	235D75702BD000E4C77C57AB23B751B41548A418	F027A326BA4F88697FFFF1878F9A21C7FEADB1C4EA0124302B5CFD0A914E755E
Chrome Cache Entry: 255	ASCII text, with very long lines (22335)	C44EBBB1C5CC623F903B5EC3F9C94E13	C1B02B25117E84CC994936D034A3B02D0E6C28DC	2C0B8B1B44960FA5584FB5D8F1BB50E21662EC06A70FCA8EEDF8299C69F2E2BA
Chrome Cache Entry: 256	ASCII text, with very long lines (1352)	5CC6B93D41889C0A55C6C4FCD2D89713	51A59C1DAE337817C4EBAC39FBE61C232705A893	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
Chrome Cache Entry: 257	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
Chrome Cache Entry: 258	data	3003BCE3B000DB63E18519A184538374	F74A2BFDFCCAF89EF109569E6281BD2A12944AD6	82E752092694BA8300510D91A5092903AC5761F33F9E72CD781AE8AC53F9F857
Chrome Cache Entry: 259	ASCII text, with very long lines (2368)	ABFD2ADA44521989F7C040FC3EAEF6C9	D682B5CAAD4C1C839262A6D03CAFB95E0AF64A21	3F2536BBC0A15193347F2D6DD1F4E8BEFE2E221DF5C4FF99FDA6BD18C428C857
Chrome Cache Entry: 260	Web Open Font Format (Version 2), TrueType, length 38372, version 1.0	16ECEC131289CA4925D35C0515B28D9F	E2CBE7EC2BB494226EA423C7A7353B0E18B304C2	CB8CAC32D5CEF83E7674916378C2F47BDBBA7E6E6BD936F8026A58AC4E71FA53
Chrome Cache Entry: 261	data	4433142940C4C665B720740FDB8EA3D5	74B7BFC8C8D967A4F1BFD77BEE98847DECCB8AC9	AF6544E1F3C8A73F7709816587DEC2D47D6498220986568923555ABB17F748B0
Chrome Cache Entry: 262	ASCII text, with very long lines (829)	84D95B7A2C73DBCCE629E7A7CC1DD0B8	B597F2E6E17792A9A415D445166CB20A4980A50D	BAEBB194CD33324576498D7F6872896ADEEDC3705793F647FFDB1937EDC53C37
Chrome Cache Entry: 263	data	19B7A79F407C1FF0A6CFF1D79F9BE8F3	7906DC01979BF8098B2DADDC9F87518B9CDFB80D	75F2EAD9E0D05562931616BE029A2F91CB3F5070C4962AF6251D8DB4237D2C4C
Chrome Cache Entry: 264	data	E5F9283AA65AE0C84308E33EECF92392	9AD33573FBD250B01DC9A14EF6B4490C7402D1C7	B910FA7298E6BA7AE05750B61B7199C32ACFB3D3E74A6923B9CDF0EFC0E0B405
Chrome Cache Entry: 265	ASCII text, with very long lines (22335)	C44EBBB1C5CC623F903B5EC3F9C94E13	C1B02B25117E84CC994936D034A3B02D0E6C28DC	2C0B8B1B44960FA5584FB5D8F1BB50E21662EC06A70FCA8EEDF8299C69F2E2BA
Chrome Cache Entry: 266	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B

Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: midwestinnovationhub.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=BKEp-3ZoTEUreYLRKKK4VPGzAww&publisher_website_key=wam.md5.0b6d11474dcacb86ff9ecef537115e35 HTTP/1.1Host: ms.godaddy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: midwestinnovationhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET /i.gif?e=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&s=BKEp-3ZoTEUreYLRKKK4VPGzAww&publisher_website_key=wam.md5.0b6d11474dcacb86ff9ecef537115e35 HTTP/1.1Host: ms.godaddy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: azk=ue1-4fea7badb0224ec68481a4d9ef57c848; azk-ss=true
Source: global traffic	HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: midwestinnovationhub.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://midwestinnovationhub.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://midwestinnovationhub.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _tccl_visit=e9c07ff0-8bf1-441e-917e-dff8e0e80bd1; _scc_session=pc=1&C_TOUCH=2024-09-29T13:18:26.603Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: midwestinnovationhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://midwestinnovationhub.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/reamaze-godaddy-loader.js HTTP/1.1Host: cdn.reamaze.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.midwestinnovationhub.com
Source: global traffic	DNS traffic detected: DNS query: midwestinnovationhub.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: websites.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: ms.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: cdn.reamaze.com
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com

Source: global traffic

Source: chromecache_233.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://github.com/JulietaUla/Montserrat)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://github.com/clauseggers/Playfair-Display)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTPYgFE_.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTjYgFE_.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/playfairdisplay/v37/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidg18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidh18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidi18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidj18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkido18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidv18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdg18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdh18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdi18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdj18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdo18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdv18Smxg.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_223.2.dr, chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/gfonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_160.2.dr	String found in binary or memory: https://img1.wsimg.com/isteam/videos/uA41GmyyG8IMaxXdb
Source: chromecache_223.2.dr	String found in binary or memory: https://midwestinnovationhub.com/
Source: chromecache_160.2.dr	String found in binary or memory: https://midwestinnovationhub.com/404
Source: chromecache_248.2.dr, chromecache_240.2.dr	String found in binary or memory: https://ms.godaddy.com/i.gif?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjoz
Source: chromecache_248.2.dr, chromecache_240.2.dr	String found in binary or memory: https://ms.godaddy.com/r?e=eyJ2IjoiMS4xMiIsImF2IjoxMzc5NjY0LCJhdCI6MjQ0NywiYnQiOjAsImNtIjozNjk2

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/236@32/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.midwestinnovationhub.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5872 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5872 --field-trial-handle=2296,i,2123755170467681721,4804006807955981310,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_203.2.dr

Binary or memory string: QEMUz)Q_

ID:	1522247
Product:	CloudBasic
Start time:	15:17:23
Start date:	29.09.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://www.midwestinnovationhub.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://www.midwestinnovationhub.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://www.midwestinnovationhub.com/