Windows Analysis Report
Notice to The Habit Burger Grill by Lawal.pdf

Phishing

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US

Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: Number of links: 0

Source: https://www.wearedreambox.com/	HTTP Parser: Total embedded SVG size: 1309729
Source: https://www.wearedreambox.com/about-us/	HTTP Parser: Total embedded SVG size: 1309075
Source: https://www.wearedreambox.com/our-services/	HTTP Parser: Total embedded SVG size: 1310990
Source: https://www.wearedreambox.com/featured-work/	HTTP Parser: Total embedded SVG size: 1309639
Source: https://www.wearedreambox.com/clients-partners/	HTTP Parser: Total embedded SVG size: 1308984
Source: https://www.wearedreambox.com/dbx-studios/	HTTP Parser: Total embedded SVG size: 1308984
Source: https://www.wearedreambox.com/contact-us/	HTTP Parser: Total embedded SVG size: 1308984

Source: https://www.facebook.com/wearedreambox	HTTP Parser: <input type="password" .../> found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: <input type="password" .../> found

Source: https://www.youtube.com/embed/gemMTEU5d0Y?autoplay=0&autohide=1&disablekb=1&controls=1&showinfo=0&modestbranding=1&loop=1&fs=1&rel=0&enablejsapi=1&origin=https%3A%2F%2Fwww.wearedreambox.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/gemMTEU5d0Y?autoplay=0&autohide=1&disablekb=1&controls=1&showinfo=0&modestbranding=1&loop=1&fs=1&rel=0&enablejsapi=1&origin=https%3A%2F%2Fwww.wearedreambox.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/gemMTEU5d0Y?autoplay=0&autohide=1&disablekb=1&controls=1&showinfo=0&modestbranding=1&loop=1&fs=1&rel=0&enablejsapi=1&origin=https%3A%2F%2Fwww.wearedreambox.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/gemMTEU5d0Y?autoplay=0&autohide=1&disablekb=1&controls=1&showinfo=0&modestbranding=1&loop=1&fs=1&rel=0&enablejsapi=1&origin=https%3A%2F%2Fwww.wearedreambox.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/gemMTEU5d0Y?autoplay=0&autohide=1&disablekb=1&controls=1&showinfo=0&modestbranding=1&loop=1&fs=1&rel=0&enablejsapi=1&origin=https%3A%2F%2Fwww.wearedreambox.com&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/gemMTEU5d0Y?autoplay=0&autohide=1&disablekb=1&controls=1&showinfo=0&modestbranding=1&loop=1&fs=1&rel=0&enablejsapi=1&origin=https%3A%2F%2Fwww.wearedreambox.com&widgetid=1	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No favicon

Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/wearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQHqQeORkVnG-wAAAY8LU4zAKIBWngpBYbUz3CGDy_qb80f_x3xlVME0-9d7ZPi6jru5SA3py46QasLALIePI5DQFmy7C2b4J51tZ90TV7VHgfV7F9-NpsSK1d5evNHb_oVsldE=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwearedreambox	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986473_11066&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=-2&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_986456_270901&as=F%2Fy%2F%2FK%2F5b4xpKWvLMZm6Kg&hl=en_US	HTTP Parser: No <meta name="copyright".. found

Compliance

Source:

Binary string: g.Pdb=function(a,b,c,d){a.videoData.Pz=b;if(a.Jf&&c){c=a.jk;var e=a.Jf;if(e.j.j){var f=fP(),h=e.j.videoInfos[0].video.j;if(!(f>h&&0!==h&&b.j===h)){var l;f=gbb(c,null==(l=e.j)?void 0:l.videoInfos);l=c.oa.getPlaybackRate();1<l&&f&&(l=zRa(c.W.G,e.j.videoInfos,l),0!==b.j&&l<b.j&&c.oa.setPlaybackRate(1));var m,n;b=g.wK[mP(b)];e=(null==(m=e.videoData.B)?void 0:null==(n=m.video)?void 0:n.j)||0;g.qC("yt-player-quality",{quality:b,previousQuality:e},31104E3);c.W.schedule.policy.C=480<=fP();if(c.L("html5_exponential_memory_for_sticky")){m= source: chromecache_1102.9.dr

Source:

Binary string: g.k.setPlaybackQualityRange=function(a,b,c){var d=g.OT(this.app,this.playerType);d&&g.Pdb(d,g.jP(a,b||a,!0,"m"),!0,c)}; source: chromecache_1102.9.dr

Software Vulnerabilities

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 65MB

Networking

Source: Joe Sandbox View	IP Address: 192.229.173.16 192.229.173.16
Source: Joe Sandbox View	IP Address: 13.107.246.41 13.107.246.41
Source: Joe Sandbox View	IP Address: 13.107.246.41 13.107.246.41
Source: Joe Sandbox View	IP Address: 162.159.61.3 162.159.61.3

Source: chromecache_927.9.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_927.9.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_851.9.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_851.9.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_816.9.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Vkd8AdLnKqZ/ equals www.facebook.com (Facebook)
Source: chromecache_1102.9.dr	String found in binary or memory: (g.Ko(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Ko(c,"www.youtube.com"),d=c.toString()):(c=DBa(d),yJ(c)&&(d=c));c=new g.yP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_851.9.dr	String found in binary or memory: __d("PolarisExternalRoutes",["PolarisLocales","URI"],(function(a,b,c,d,e,f,g){"use strict";var h;function a(a){return new(h||(h=c("URI")))(a).addQueryData({locale:c("PolarisLocales").locale}).toString()}b=a("https://help.instagram.com/581066165581870/");d="https://about.instagram.com/blog/";e="https://about.instagram.com";f="https://about.meta.com";var i="https://developers.facebook.com/docs/instagram",j="https://help.instagram.com",k="https://www.facebook.com/privacy/policy",l="https://privacycenter.instagram.com/policy/",m="https://www.instagram.com/privacy/cookie_settings/",n="/legal/cookies/",o=a("https://help.instagram.com/416323267314424/"),p="https://www.facebook.com/policies/cookies",q="https://privacycenter.instagram.com/policies/cookies/",r="https://privacycenter.instagram.com/policies/cookies/?annotations[0]=explanation%2F3_companies_list",s="https://www.facebook.com/help/instagram/261704639352628",t="https://www.whatsapp.com/legal/commerce-policy/",u="https://about.meta.com/technologies/meta-verified/",v=a("https://help.instagram.com/contact/543840232909258/"),w=a("https://help.instagram.com/contact/598671977756435/"),x=a("https://help.instagram.com/contact/406206379945942/");a=a("https://help.instagram.com/contact/383679321740945");var y="https://help.instagram.com/116024195217477",z="https://www.facebook.com/help/instagram/1164377657035425/",A="https://familycenter.instagram.com/supervision",B="https://familycenter.instagram.com/education",C="https://business.facebook.com/latest/creator_marketplace?source=ig_web_profile&nav_ref=ig_web_profile",D="https://business.facebook.com/latest?nav_ref=ig_web_more_nav_menu",E="https://business.facebook.com/billing_hub/payment_settings?",F="https://m.facebook.com/billing_hub/payment_settings?",G="https://indonesia.fb.com/panduan-digital/";g.NEW_LEGAL_TERMS_PATH=b;g.INSTAGRAM_PRESS_SITE_PATH=d;g.INSTAGRAM_ABOUT_SITE_PATH=e;g.META_ABOUT_SITE_PATH=f;g.INSTAGRAM_API_SITE_PATH=i;g.INSTAGRAM_HELP_SITE_PATH=j;g.NEW_PRIVACY_POLICY_PATH=k;g.INSTAGRAM_PRIVACY_POLICY_PATH=l;g.INSTAGRAM_COOKIE_SETTINGS_PATH=m;g.NEW_COOKIE_POLICY_PATH=n;g.NETZDG_URHDAG_RANKING_OF_CONTENT_PATH=o;g.FACEBOOK_COOKIE_POLICY_PATH=p;g.INSTAGRAM_COOKIE_POLICY_PATH_UPDATED=q;g.INSTAGRAM_COOKIE_POLICY_OTHER_COMPANIES_PATH=r;g.FACEBOOK_CONTACT_UPLOADING_AND_NON_USERS=s;g.WHATSAPP_COMMERCE_POLICY_PATH=t;g.META_VERIFIED_MARKETING_PATH=u;g.NETZDG_REPORT_CONTACT_FORM_PATH=v;g.CPA_REPORT_CONTACT_FORM_PATH=w;g.DSA_REPORT_CONTACT_FORM_PATH=x;g.COMMUNITY_VIOLATIONS_GUIDELINES_CONTACT_FORM_PATH=a;g.ACCOUNT_PRIVACY_HELP_PATH=y;g.ACTIVITY_STATUS_HELP_PATH=z;g.FAMILY_CENTER_HOME_PATH=A;g.EDUCATION_HUB_PATH=B;g.CREATOR_MARKETPLACE_PATH=C;g.MORE_NAV_MENU_META_BUSINESS_SUITE_PATH=D;g.BILLING_HUB_DESKTOP_PATH=E;g.BILLING_HUB_MSITE_PATH=F;g.META_IN_INDONESIA_PATH=G}),98); equals www.facebook.com (Facebook)
Source: chromecache_851.9.dr	String found in binary or memory: __d("PolarisFBConnectHelpers",["FbSdkConsts","InstagramQueryParamsHelper","PolarisConfig","PolarisConfigConstants","PolarisFBSignupQEHelpers","PolarisIGWebStorage","PolarisLocales","PolarisLoggedOutCtaLogger","PolarisLogger","PolarisOneTapLoginStorage","PolarisRoutes","PolarisUA","PolarisWebStorage","Promise","Random","asyncToGeneratorRuntime","browserHistory_DO_NOT_USE","cometAsyncFetch","emptyFunction","isStringNullOrEmpty","nullthrows","polarisFBReady","qex"],(function(a,b,c,d,e,f,g){"use strict";var h,i=[0,0,0,0,0,0,0,0],j="https://m.facebook.com/dialog/oauth",k="https://www.facebook.com/dialog/oauth",l="https://www.facebook.com/oidc/",m="NewUserInterstitial.profile_picture_url",n="fbAccessToken",o="fbLoginKey",p="fbLoginReturnURL",q="fbPlainToken";function r(a,e){e===void 0&&(e=[]);var f=c("PolarisWebStorage").getSessionStorage(),g=i.reduce(function(a){return a+d("Random").uint32().toString(36)},"");f!=null&&f.setItem(o,g);f="https://www.instagram.com"+d("PolarisRoutes").SIGNUP_PATH;var h="https://www.instagram.com"+d("PolarisRoutes").FACEBOOK_V2_SIGNUP_PATH,j=t(),k=d("PolarisFBSignupQEHelpers").shouldUseOIDCSignupFlow();if(!k){g=(k={},k[o]=g,k[p]=a,k);a={client_id:d("PolarisConfigConstants").instagramFBAppId,locale:c("PolarisLocales").locale,redirect_uri:f,response_type:"code,granted_scopes",scope:e.concat(d("FbSdkConsts").PERMISSIONS.EMAIL).join(","),state:JSON.stringify(g)};k=d("InstagramQueryParamsHelper").appendQueryParams(j,a);d("browserHistory_DO_NOT_USE").redirect(k)}else{f=function(){var a=b("asyncToGeneratorRuntime").asyncToGenerator(function*(){var a=(yield c("cometAsyncFetch")("/oidc/state/",{data:{},method:"POST"}));return a});return function(){return a.apply(this,arguments)}}();f().then(function(a){a=a.state;a={app_id:d("PolarisConfigConstants").instagramFBAppId,redirect_uri:h,response_type:"code",scope:"openid email profile",state:a};a=d("InstagramQueryParamsHelper").appendQueryParams(j,a);d("browserHistory_DO_NOT_USE").redirect(a)})["catch"](function(a){return c("emptyFunction")()})}}function s(){var a=c("PolarisWebStorage").getSessionStorage(),b=null;a!=null&&(b=a.getItem(o),a.removeItem(o));return c("isStringNullOrEmpty")(b)?null:b}function t(){return d("PolarisUA").isMobile()?j:d("PolarisFBSignupQEHelpers").shouldUseOIDCSignupFlow()?l:k}function a(a){var b=s();return b==null||b===""?!1:a===b}function e(){var a=c("qex")._("89");switch(a){case-1:return!0;case 5:case 0:default:return!1}}function f(){var a;return(a=d("PolarisIGWebStorage").getStorageForUser(d("PolarisConfig").getViewerId()))==null?void 0:a.getItem(n)}function u(a){return v.apply(this,arguments)}function v(){v=b("asyncToGeneratorRuntime").asyncToGenerator(function*(a){var e=(yield new(h||(h=b("Promise")))(function(a,b){c("polarisFBReady").sdkReady(function(){c("polarisFBReady").getLoginStatus(!0).then(function(c){c.status===d("FbSdkConsts").STATUS.CONNECTED?a(c):b()})["catch"](function(a){b(a)})})}));if(a){a=(a=e.authResponse)==null?void 0:a.accessToken;x(a)}re
Source: chromecache_851.9.dr	String found in binary or memory: __d("PolarisLinkshimURI",["PolarisInstapi","URI","promiseDone"],(function(a,b,c,d,e,f,g){"use strict";var h,i=["l.facebook.com","l.instagram.com"],j=["help.instagram.com","www.facebook.com","business.facebook.com"];function k(a){var b;try{b=new(h||(h=c("URI")))(a)}catch(a){return!1}a=b.getDomain();var d=b.getProtocol().toLowerCase();return d!=null&&!d.startsWith("http")?!0:i.includes(a)&&!!b.getQueryData().u||j.includes(a)}function a(a,b,e){e===void 0&&(e=""),k(a)&&b(a),c("promiseDone")(d("PolarisInstapi").apiPost("/api/v1/web/linkshim/link/",{body:{cs:e,u:a}}).then(function(a){b(a.data.uri)}))}g.shouldSkipLinkShim=k;g.asyncGet=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_851.9.dr	String found in binary or memory: __d("RealtimeGraphQLRequest",["invariant","RequestStreamCommonRequestStreamCommonTypes","TransportSelectingClientSingleton","nullthrows","regeneratorRuntime"],(function(a,b,c,d,e,f,g,h){"use strict";a=function(){function a(a){var b=this,e=a.method,f=a.doc_id,g=a.is_intern,i=a.extra_headers,j=a.body,k=a.instrumentation_data;a=a.sandbox;this.$12=function(a){switch(a){case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Started:if(b.$10){b.$9!=null||h(0,13576);a=Date.now()-c("nullthrows")(b.$9);b.$7!=null&&b.$7(a)}else b.$10=!0,b.$5!=null&&b.$5();break;case d("RequestStreamCommonRequestStreamCommonTypes").FlowStatus.Stopped:b.$9=Date.now();b.$6!=null&&b.$6(!1,!1);break;default:break}};this.$10=!1;e={method:e,doc_id:f};g===!0&&(e=babelHelpers["extends"]({},e,{www_tier:"intern"}));a!=null&&(e=babelHelpers["extends"]({},e,{www_sandbox:a.replace(/^not-www\.(\d+)\.(od|sb)\.internalfb\.com$/,"www.$1.$2.facebook.com")}));i!=null&&(e=babelHelpers["extends"]({},e,i));this.$1=e;this.$2=JSON.stringify(j);this.$11=k}var e=a.prototype;e.onResponse=function(a){this.$3=a;return this};e.onError=function(a){this.$4=a;return this};e.onActive=function(a){this.$5=a;return this};e.onPause=function(a){this.$6=a;return this};e.onResume=function(a){this.$7=a;return this};e.onRetryUpdateRequestBody=function(a){this.$8=a;this.$1=babelHelpers["extends"]({},this.$1,{request_stream_retry:"false"});return this};e.send=function(){var a,d;return b("regeneratorRuntime").async(function(e){while(1)switch(e.prev=e.next){case 0:this.$3!=null||h(0,33593);a={onData:c("nullthrows")(this.$3)};this.$4!=null&&(a=babelHelpers["extends"]({},a,{onTermination:this.$4}));a=babelHelpers["extends"]({},a,{onFlowStatus:this.$12});this.$8!=null&&(a=babelHelpers["extends"]({},a,{onRetryUpdateRequestBody:this.$8}));e.next=7;return b("regeneratorRuntime").awrap(c("TransportSelectingClientSingleton").requestStream(this.$1,this.$2,a,this.$11));case 7:d=e.sent;return e.abrupt("return",{cancel:function(){d.cancel()},amendExperimental:function(a){try{d.amendWithoutAck(JSON.stringify(a));return!0}catch(a){return!1}}});case 9:case"end":return e.stop()}},null,this)};return a}();g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_851.9.dr	String found in binary or memory: __d("isPolarisAdLink",["URI"],(function(a,b,c,d,e,f,g){"use strict";var h,i="www.facebook.com",j=/www\.[\w\-]+\.(od|(sandcastle|twshared)(\w+\.)+\w+)?\.?facebook\.com/,k="/ads/ig_redirect/";function a(a){a=new(h||(h=c("URI")))(a);var b=a.getDomain();if(a.getPath()!==k)return!1;return b===i?!0:a.getDomain().match(j)!=null}g["default"]=a}),98); equals www.facebook.com (Facebook)
Source: chromecache_1102.9.dr	String found in binary or memory: a))):this.Id(g.NV(a.errorMessage)):this.Id(PV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Jn(c,{hl:a})),this.Id(PV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.kc&&!d.D&&RYa(this,function(e){if(g.tU(e,b.api,!VR(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.uc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: a.BASE_YT_URL)||"")||uBa(this.yf)||this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h||this.N?d=VB(d,h,bSa):h&&(d="embedded");this.La=d;cua();h=null;d=b?b.playerStyle:a.ps;f=g.Fb(cSa,d);!d||f&&!this.N||(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb(cSa,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Qo=!this.qa;this.Qa=UB(!1,a.disableplaybackui);this.disablePaidContentOverlay=UB(!1, equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: a.severity,e,mK(a.details),f)}else this.oa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.me(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.YC)(),FX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.me(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: aRa=function(a,b){if(!a.j["0"]){var c=new BK("0","fakesb",{video:new xK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new BQ(new g.yP("http://www.youtube.com/videoplayback"),c,"fake"):new MQ(new g.yP("http://www.youtube.com/videoplayback"),c,new lQ(0,0),new lQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: g.TR=function(a){a=RR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",yjb);var mBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var fNa={G5a:0,D5a:1,A5a:2,B5a:3,C5a:4,F5a:5,E5a:6};var upa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;g.y(Uu,g.Kd);Uu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Ln.Kj(this.G);delete Uu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: g.eS=function(a){var b=g.TR(a);rSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.TR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.NR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),nD&&(a=jpa())&&(b.ebc=a));return g.Jn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: r;this.hj=b?b.hl||"en_US":XB("en_US",a.hl);this.region=b?b.contentRegion||"US":XB("US",a.cr);this.hostLanguage=b?b.hostLanguage||"en":XB("en",a.host_language);this.Ko=!this.Cc&&Math.random()<g.WI(this.experiments,"web_player_api_logging_fraction");this.Za=!this.Cc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b||!b.deviceIsAudioOnly);this.Fd=WB(this.Fd,a.ismb);this.Qo?(r=a.vss_host||"s.youtube.com","s.youtube.com"===r&&(r=RR(this.Ga)||"www.youtube.com")):r="video.google.com";this.Sm= equals www.youtube.com (Youtube)
Source: chromecache_1038.9.dr	String found in binary or memory: re listening.</p> <a data-barba href="/contact-us" class="button -md -white text-black mt-56 lg:mt-48 md:mt-32">connect with us</a></div></div></div></div></div></div></div></section><footer class="lazyload footer -type-1 bg-dark-1" data-bg="" style="background-image:url(data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20500%20300%22%3E%3C/svg%3E)"><div class="container"><div class="footer__top"><div class="row y-gap-48 justify-content-between"><div class="col-lg-auto col-sm-12"> <a href="https://www.wearedreambox.com/" class="footer__logo text-white"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210%20140%22%3E%3C/svg%3E' data-src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"> </a></div><div class="col-lg-3 col-sm-6"><h4 class="text-xl fw-500 text-white"> Headquarters</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><p> 667 Cliffside Drive</p><p class="mt-8"> San Dimas, CA 91773</p><p class="mt-8"><a href="mailto:info@wearedreambox.com">info@wearedreambox.com</a></p><p class="mt-8"><a href="tel:+1 909.394.1060 ">+1 909.394.1060 </a></p></div></div><div class="col-lg-auto col-sm-4"><h4 class="text-xl fw-500 text-white"> Links</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><ul><li id="menu-item-1181" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1181"><a href="https://www.wearedreambox.com/about-us/" data-barba class="button -underline mt-4">About Us</a></li><li id="menu-item-1179" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1179"><a href="https://www.wearedreambox.com/news/" data-barba class="button -underline mt-4">In the News</a></li><li id="menu-item-1180" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1180"><a href="https://www.wearedreambox.com/contact-us/" data-barba class="button -underline mt-4">Contact</a></li><li id="menu-item-1178" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1178"><a href="https://www.wearedreambox.com/sitemap/" data-barba class="button -underline mt-4">Sitemap</a></li></ul></div></div><div class="col-lg-auto col-auto"><h4 class="text-xl fw-500 text-white"> Follow Us</h4><div class="social -bordered mt-16 sm:mt-12"> <a class="social__item text-white border-light" href="https://www.facebook.com/wearedreambox"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/social/facebook.png" alt="Facebook"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210
Source: chromecache_1038.9.dr	String found in binary or memory: re listening.</p> <a data-barba href="/contact-us" class="button -md -white text-black mt-56 lg:mt-48 md:mt-32">connect with us</a></div></div></div></div></div></div></div></section><footer class="lazyload footer -type-1 bg-dark-1" data-bg="" style="background-image:url(data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20500%20300%22%3E%3C/svg%3E)"><div class="container"><div class="footer__top"><div class="row y-gap-48 justify-content-between"><div class="col-lg-auto col-sm-12"> <a href="https://www.wearedreambox.com/" class="footer__logo text-white"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210%20140%22%3E%3C/svg%3E' data-src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"> </a></div><div class="col-lg-3 col-sm-6"><h4 class="text-xl fw-500 text-white"> Headquarters</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><p> 667 Cliffside Drive</p><p class="mt-8"> San Dimas, CA 91773</p><p class="mt-8"><a href="mailto:info@wearedreambox.com">info@wearedreambox.com</a></p><p class="mt-8"><a href="tel:+1 909.394.1060 ">+1 909.394.1060 </a></p></div></div><div class="col-lg-auto col-sm-4"><h4 class="text-xl fw-500 text-white"> Links</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><ul><li id="menu-item-1181" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1181"><a href="https://www.wearedreambox.com/about-us/" data-barba class="button -underline mt-4">About Us</a></li><li id="menu-item-1179" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1179"><a href="https://www.wearedreambox.com/news/" data-barba class="button -underline mt-4">In the News</a></li><li id="menu-item-1180" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1180"><a href="https://www.wearedreambox.com/contact-us/" data-barba class="button -underline mt-4">Contact</a></li><li id="menu-item-1178" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1178"><a href="https://www.wearedreambox.com/sitemap/" data-barba class="button -underline mt-4">Sitemap</a></li></ul></div></div><div class="col-lg-auto col-auto"><h4 class="text-xl fw-500 text-white"> Follow Us</h4><div class="social -bordered mt-16 sm:mt-12"> <a class="social__item text-white border-light" href="https://www.facebook.com/wearedreambox"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/social/facebook.png" alt="Facebook"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210
Source: chromecache_1038.9.dr	String found in binary or memory: re listening.</p> <a data-barba href="/contact-us" class="button -md -white text-black mt-56 lg:mt-48 md:mt-32">connect with us</a></div></div></div></div></div></div></div></section><footer class="lazyload footer -type-1 bg-dark-1" data-bg="" style="background-image:url(data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20500%20300%22%3E%3C/svg%3E)"><div class="container"><div class="footer__top"><div class="row y-gap-48 justify-content-between"><div class="col-lg-auto col-sm-12"> <a href="https://www.wearedreambox.com/" class="footer__logo text-white"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210%20140%22%3E%3C/svg%3E' data-src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"> </a></div><div class="col-lg-3 col-sm-6"><h4 class="text-xl fw-500 text-white"> Headquarters</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><p> 667 Cliffside Drive</p><p class="mt-8"> San Dimas, CA 91773</p><p class="mt-8"><a href="mailto:info@wearedreambox.com">info@wearedreambox.com</a></p><p class="mt-8"><a href="tel:+1 909.394.1060 ">+1 909.394.1060 </a></p></div></div><div class="col-lg-auto col-sm-4"><h4 class="text-xl fw-500 text-white"> Links</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><ul><li id="menu-item-1181" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1181"><a href="https://www.wearedreambox.com/about-us/" data-barba class="button -underline mt-4">About Us</a></li><li id="menu-item-1179" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1179"><a href="https://www.wearedreambox.com/news/" data-barba class="button -underline mt-4">In the News</a></li><li id="menu-item-1180" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1180"><a href="https://www.wearedreambox.com/contact-us/" data-barba class="button -underline mt-4">Contact</a></li><li id="menu-item-1178" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1178"><a href="https://www.wearedreambox.com/sitemap/" data-barba class="button -underline mt-4">Sitemap</a></li></ul></div></div><div class="col-lg-auto col-auto"><h4 class="text-xl fw-500 text-white"> Follow Us</h4><div class="social -bordered mt-16 sm:mt-12"> <a class="social__item text-white border-light" href="https://www.facebook.com/wearedreambox"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/social/facebook.png" alt="Facebook"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210
Source: chromecache_803.9.dr	String found in binary or memory: t have the depth to support.</p></div></div></div></div><div class="masthead__button overflow-hidden mt-48 md:mt-40 sm:mt-40 sm:ml-0 tc"><div class="js-button"> <a href="/contact-us/" class="button -md -outline-white text-white">contact us</a></div></div></div></section><footer class="lazyload footer -type-1 bg-dark-1" data-bg="" style="background-image:url(data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20500%20300%22%3E%3C/svg%3E)"><div class="container"><div class="footer__top"><div class="row y-gap-48 justify-content-between"><div class="col-lg-auto col-sm-12"> <a href="https://www.wearedreambox.com/" class="footer__logo text-white"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210%20140%22%3E%3C/svg%3E' data-src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"> </a></div><div class="col-lg-3 col-sm-6"><h4 class="text-xl fw-500 text-white"> Headquarters</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><p> 667 Cliffside Drive</p><p class="mt-8"> San Dimas, CA 91773</p><p class="mt-8"><a href="mailto:info@wearedreambox.com">info@wearedreambox.com</a></p><p class="mt-8"><a href="tel:+1 909.394.1060 ">+1 909.394.1060 </a></p></div></div><div class="col-lg-auto col-sm-4"><h4 class="text-xl fw-500 text-white"> Links</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><ul><li id="menu-item-1181" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1181"><a href="https://www.wearedreambox.com/about-us/" data-barba class="button -underline mt-4">About Us</a></li><li id="menu-item-1179" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1179"><a href="https://www.wearedreambox.com/news/" data-barba class="button -underline mt-4">In the News</a></li><li id="menu-item-1180" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1180"><a href="https://www.wearedreambox.com/contact-us/" data-barba class="button -underline mt-4">Contact</a></li><li id="menu-item-1178" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1178"><a href="https://www.wearedreambox.com/sitemap/" data-barba class="button -underline mt-4">Sitemap</a></li></ul></div></div><div class="col-lg-auto col-auto"><h4 class="text-xl fw-500 text-white"> Follow Us</h4><div class="social -bordered mt-16 sm:mt-12"> <a class="social__item text-white border-light" href="https://www.facebook.com/wearedreambox"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/social/facebook.png" alt="Facebook"></noscript><img class="lazyload" src='data
Source: chromecache_803.9.dr	String found in binary or memory: t have the depth to support.</p></div></div></div></div><div class="masthead__button overflow-hidden mt-48 md:mt-40 sm:mt-40 sm:ml-0 tc"><div class="js-button"> <a href="/contact-us/" class="button -md -outline-white text-white">contact us</a></div></div></div></section><footer class="lazyload footer -type-1 bg-dark-1" data-bg="" style="background-image:url(data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20500%20300%22%3E%3C/svg%3E)"><div class="container"><div class="footer__top"><div class="row y-gap-48 justify-content-between"><div class="col-lg-auto col-sm-12"> <a href="https://www.wearedreambox.com/" class="footer__logo text-white"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210%20140%22%3E%3C/svg%3E' data-src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"> </a></div><div class="col-lg-3 col-sm-6"><h4 class="text-xl fw-500 text-white"> Headquarters</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><p> 667 Cliffside Drive</p><p class="mt-8"> San Dimas, CA 91773</p><p class="mt-8"><a href="mailto:info@wearedreambox.com">info@wearedreambox.com</a></p><p class="mt-8"><a href="tel:+1 909.394.1060 ">+1 909.394.1060 </a></p></div></div><div class="col-lg-auto col-sm-4"><h4 class="text-xl fw-500 text-white"> Links</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><ul><li id="menu-item-1181" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1181"><a href="https://www.wearedreambox.com/about-us/" data-barba class="button -underline mt-4">About Us</a></li><li id="menu-item-1179" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1179"><a href="https://www.wearedreambox.com/news/" data-barba class="button -underline mt-4">In the News</a></li><li id="menu-item-1180" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1180"><a href="https://www.wearedreambox.com/contact-us/" data-barba class="button -underline mt-4">Contact</a></li><li id="menu-item-1178" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1178"><a href="https://www.wearedreambox.com/sitemap/" data-barba class="button -underline mt-4">Sitemap</a></li></ul></div></div><div class="col-lg-auto col-auto"><h4 class="text-xl fw-500 text-white"> Follow Us</h4><div class="social -bordered mt-16 sm:mt-12"> <a class="social__item text-white border-light" href="https://www.facebook.com/wearedreambox"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/social/facebook.png" alt="Facebook"></noscript><img class="lazyload" src='data
Source: chromecache_803.9.dr	String found in binary or memory: t have the depth to support.</p></div></div></div></div><div class="masthead__button overflow-hidden mt-48 md:mt-40 sm:mt-40 sm:ml-0 tc"><div class="js-button"> <a href="/contact-us/" class="button -md -outline-white text-white">contact us</a></div></div></div></section><footer class="lazyload footer -type-1 bg-dark-1" data-bg="" style="background-image:url(data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20500%20300%22%3E%3C/svg%3E)"><div class="container"><div class="footer__top"><div class="row y-gap-48 justify-content-between"><div class="col-lg-auto col-sm-12"> <a href="https://www.wearedreambox.com/" class="footer__logo text-white"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"></noscript><img class="lazyload" src='data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20210%20140%22%3E%3C/svg%3E' data-src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/dreambox-condensed-brandmark-offwhite.svg" alt="Dreambox"> </a></div><div class="col-lg-3 col-sm-6"><h4 class="text-xl fw-500 text-white"> Headquarters</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><p> 667 Cliffside Drive</p><p class="mt-8"> San Dimas, CA 91773</p><p class="mt-8"><a href="mailto:info@wearedreambox.com">info@wearedreambox.com</a></p><p class="mt-8"><a href="tel:+1 909.394.1060 ">+1 909.394.1060 </a></p></div></div><div class="col-lg-auto col-sm-4"><h4 class="text-xl fw-500 text-white"> Links</h4><div class="footer__content text-base text-light mt-16 sm:mt-12"><ul><li id="menu-item-1181" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1181"><a href="https://www.wearedreambox.com/about-us/" data-barba class="button -underline mt-4">About Us</a></li><li id="menu-item-1179" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1179"><a href="https://www.wearedreambox.com/news/" data-barba class="button -underline mt-4">In the News</a></li><li id="menu-item-1180" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1180"><a href="https://www.wearedreambox.com/contact-us/" data-barba class="button -underline mt-4">Contact</a></li><li id="menu-item-1178" class="nav-btn-box-no menu-item menu-item-type-post_type menu-item-object-page menu-item-1178"><a href="https://www.wearedreambox.com/sitemap/" data-barba class="button -underline mt-4">Sitemap</a></li></ul></div></div><div class="col-lg-auto col-auto"><h4 class="text-xl fw-500 text-white"> Follow Us</h4><div class="social -bordered mt-16 sm:mt-12"> <a class="social__item text-white border-light" href="https://www.facebook.com/wearedreambox"> <noscript><img src="https://wearedreambox.b-cdn.net/wp-content/themes/stukram-child/images/social/facebook.png" alt="Facebook"></noscript><img class="lazyload" src='data
Source: chromecache_1102.9.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)||(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV|STB|GAME|OTT|ATV|BDP)_/.exec(g.pc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(oR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.hR(this.B)?gR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_1102.9.dr	String found in binary or memory: var G3={};var Bfb=/[&\?]action_proxy=1/,Afb=/[&\?]token=([\w-]*)/,Cfb=/[&\?]video_id=([\w-]*)/,Dfb=/[&\?]index=([\d-]*)/,Efb=/[&\?]m_pos_ms=([\d-]*)/,Gfb=/[&\?]vvt=([\w-]*)/,sfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Ffb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),vfb={android:"ANDROID", equals www.youtube.com (Youtube)

Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_1009.9.dr	String found in binary or memory: http://git.io/TrdQbw
Source: chromecache_660.9.dr	String found in binary or memory: http://go.wpbakery.com/licensing
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: http://scrollmagic.io
Source: chromecache_1102.9.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_1009.9.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: http://wicky.nillia.ms/headroom.js
Source: chromecache_621.9.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_1102.9.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_1102.9.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_1102.9.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_1102.9.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_1102.9.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_851.9.dr	String found in binary or memory: https://about.instagram.com
Source: chromecache_851.9.dr	String found in binary or memory: https://about.instagram.com/blog/
Source: chromecache_851.9.dr	String found in binary or memory: https://about.meta.com
Source: chromecache_1102.9.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_854.9.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_893.9.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
Source: chromecache_1102.9.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_851.9.dr	String found in binary or memory: https://e2e.instagram.com
Source: chromecache_851.9.dr	String found in binary or memory: https://fburl.com/comet_preloading
Source: chromecache_851.9.dr	String found in binary or memory: https://fburl.com/dialog-provider).
Source: chromecache_851.9.dr	String found in binary or memory: https://fburl.com/wiki/m19zmtlh
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Oswald%3A200%2C300%2C400%2C500%2C600%2C700%7CInter%3A300%2C4
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1pL7SUc.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa25L7SUc.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2pL7SUc.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752FD8Ghe4.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fj8Ghe4.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fz8Ghe4.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752GT8G.woff2)
Source: chromecache_981.9.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752HT8Ghe4.woff2)
Source: chromecache_1102.9.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: https://github.com/nk-o/jarallax
Source: chromecache_851.9.dr	String found in binary or memory: https://graph.instagram.com/logging_client_events
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: https://greensock.com
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/126382350847838
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/222826637847963
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/426700567389543/
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/477434105621119
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/535503073130320/
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/581066165581870/
Source: chromecache_851.9.dr	String found in binary or memory: https://help.instagram.com/629037417957828
Source: chromecache_851.9.dr	String found in binary or memory: https://i.instagram.com
Source: chromecache_1102.9.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: https://isotope.metafizzy.co
Source: chromecache_1102.9.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_1106.9.dr	String found in binary or memory: https://lexical.dev/docs/error?
Source: chromecache_1003.9.dr, chromecache_660.9.dr	String found in binary or memory: https://nkdev.info
Source: chromecache_1102.9.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_1102.9.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_1102.9.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_1102.9.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_1102.9.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://schema.org
Source: chromecache_854.9.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_1102.9.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_1102.9.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_1102.9.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_1102.9.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_854.9.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_1174.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserProfile.10f22
Source: chromecache_1025.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.tweetHandler.39f8
Source: chromecache_1061.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.6db4233a.j
Source: chromecache_1091.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.AccountAna
Source: chromecache_1033.9.dr, chromecache_751.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~
Source: chromecache_649.9.dr, chromecache_831.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie
Source: chromecache_883.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Conversati
Source: chromecache_787.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.LiveEvent~
Source: chromecache_893.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Ocf~bundle
Source: chromecache_1122.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.SettingsPr
Source: chromecache_748.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ShareJob~b
Source: chromecache_647.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Topics~bun
Source: chromecache_652.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.TwitterArt
Source: chromecache_1053.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.UserProfil
Source: chromecache_867.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules
Source: chromecache_879.9.dr, chromecache_1165.9.dr, chromecache_769.9.dr, chromecache_1154.9.dr, chromecache_974.9.dr, chromecache_737.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~b
Source: chromecache_993.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~o
Source: chromecache_1101.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DashMenu~l
Source: chromecache_1002.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.SideNav~bu
Source: chromecache_848.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.Typeahead~
Source: chromecache_909.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.WideLayout
Source: chromecache_1146.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.directMess
Source: chromecache_920.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.inlineTomb
Source: chromecache_849.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.Settings
Source: chromecache_1009.9.dr	String found in binary or memory: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/vendor.6c559eba.js.map
Source: chromecache_926.9.dr	String found in binary or memory: https://use.typekit.net/jry8pmk.css
Source: chromecache_1102.9.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_918.9.dr, chromecache_803.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js?
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-content/uploads/2021/09/Dreambox-Condensed-Brandmark-OffWhite-Sma
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-content/uploads/2022/05/cropped-dbc_logo-180x180.png
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-content/uploads/2022/05/cropped-dbc_logo-192x192.png
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-content/uploads/2022/05/cropped-dbc_logo-270x270.png
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-content/uploads/2022/05/cropped-dbc_logo-32x32.png
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://wearedreambox.b-cdn.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_660.9.dr	String found in binary or memory: https://wpbakery.com)
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.boldgrid.com/w3-total-cache/
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.google-analytics.com
Source: chromecache_854.9.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_854.9.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_854.9.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_854.9.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_1102.9.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_854.9.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-9DWBH10YZG
Source: chromecache_1102.9.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_949.9.dr	String found in binary or memory: https://www.instagram.com
Source: chromecache_927.9.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/#website
Source: chromecache_768.9.dr	String found in binary or memory: https://www.wearedreambox.com/?p=1010
Source: chromecache_803.9.dr	String found in binary or memory: https://www.wearedreambox.com/?p=1548
Source: chromecache_918.9.dr	String found in binary or memory: https://www.wearedreambox.com/?p=696
Source: chromecache_1038.9.dr	String found in binary or memory: https://www.wearedreambox.com/?p=718
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/?s=
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/comments/feed/
Source: chromecache_918.9.dr	String found in binary or memory: https://www.wearedreambox.com/contact-us/
Source: chromecache_918.9.dr	String found in binary or memory: https://www.wearedreambox.com/contact-us/#breadcrumb
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/feed/
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_800.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-content/cache/autoptimize/css/autoptimize_db32fd5e8dc3f140a07e99650
Source: chromecache_918.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-content/cache/autoptimize/js/autoptimize_4b16b34f57801ab4c3739d5352
Source: chromecache_803.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-content/cache/autoptimize/js/autoptimize_d9f52c42ae9806627d4a825b61
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/
Source: chromecache_1038.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wearedreambox.com%2Fcli
Source: chromecache_918.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wearedreambox.com%2Fcon
Source: chromecache_803.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wearedreambox.com%2Fdbx
Source: chromecache_768.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wearedreambox.com%2Fpor
Source: chromecache_803.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/wp/v2/pages/1548
Source: chromecache_918.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/wp/v2/pages/696
Source: chromecache_1038.9.dr	String found in binary or memory: https://www.wearedreambox.com/wp-json/wp/v2/pages/718
Source: chromecache_918.9.dr, chromecache_830.9.dr, chromecache_803.9.dr, chromecache_800.9.dr, chromecache_1038.9.dr, chromecache_768.9.dr, chromecache_926.9.dr	String found in binary or memory: https://www.wearedreambox.com/xmlrpc.php?rsd
Source: chromecache_1102.9.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_1102.9.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_893.9.dr	String found in binary or memory: https://x.com
Source: chromecache_1102.9.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_1102.9.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_1102.9.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_1102.9.dr	String found in binary or memory: https://yurt.corp.google.com

System Summary

Source: classification engine

Classification label: clean2.winPDF@66/1089@0/84

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.764

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-23 16-17-00-887.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Notice to The Habit Burger Grill by Lawal.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1572,i,13788243552439731158,17880342436043478329,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:adacompliance@dreamboxcreations.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,8044531815678129780,15848357629727198225,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5876 --field-trial-handle=2000,i,8044531815678129780,15848357629727198225,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5616 --field-trial-handle=2000,i,8044531815678129780,15848357629727198225,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1572,i,13788243552439731158,17880342436043478329,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2000,i,8044531815678129780,15848357629727198225,262144 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5876 --field-trial-handle=2000,i,8044531815678129780,15848357629727198225,262144 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5616 --field-trial-handle=2000,i,8044531815678129780,15848357629727198225,262144 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: g.Pdb=function(a,b,c,d){a.videoData.Pz=b;if(a.Jf&&c){c=a.jk;var e=a.Jf;if(e.j.j){var f=fP(),h=e.j.videoInfos[0].video.j;if(!(f>h&&0!==h&&b.j===h)){var l;f=gbb(c,null==(l=e.j)?void 0:l.videoInfos);l=c.oa.getPlaybackRate();1<l&&f&&(l=zRa(c.W.G,e.j.videoInfos,l),0!==b.j&&l<b.j&&c.oa.setPlaybackRate(1));var m,n;b=g.wK[mP(b)];e=(null==(m=e.videoData.B)?void 0:null==(n=m.video)?void 0:n.j)||0;g.qC("yt-player-quality",{quality:b,previousQuality:e},31104E3);c.W.schedule.policy.C=480<=fP();if(c.L("html5_exponential_memory_for_sticky")){m= source: chromecache_1102.9.dr

Source:

Binary string: g.k.setPlaybackQualityRange=function(a,b,c){var d=g.OT(this.app,this.playerType);d&&g.Pdb(d,g.jP(a,b||a,!0,"m"),!0,c)}; source: chromecache_1102.9.dr

Source: Notice to The Habit Burger Grill by Lawal.pdf	Initial sample: PDF keyword /JS count = 0
Source: Notice to The Habit Burger Grill by Lawal.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A91k7n7tn_jhrrxt_l8.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A91k7n7tn_jhrrxt_l8.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: Notice to The Habit Burger Grill by Lawal.pdf

Initial sample: PDF keyword stream count = 46

Source: Notice to The Habit Burger Grill by Lawal.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Notice to The Habit Burger Grill by Lawal.pdf

Initial sample: PDF keyword /ObjStm count = 8

Source: Notice to The Habit Burger Grill by Lawal.pdf

Initial sample: PDF keyword obj count = 52

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior