Windows Analysis Report https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/#_0

Phishing:

Phishing site detected (based on shot template match)

Source: https://scientificemployment.co.kr/files/

Matcher: Template: office matched

Yara detected HtmlPhish10

Source: Yara match

File source: 31927.2.pages.csv, type: HTML

Yara detected HtmlPhish7

Source: Yara match

File source: 31927.2.pages.csv, type: HTML

Form action URLs do not match main URL

Source: https://www.lucidpress.com/pages/industries/finance

HTTP Parser: Form action: https://www.facebook.com/tr/ lucidpress facebook

Found iframes

Source: https://www.lucidpress.com/pages/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: https://www.youtube.com/embed/Wu_JFhlI1Fo?autoplay=0&mute=0&controls=1&origin=https%3A%2F%2Fwww.lucidpress.com&playsinline=1&showinfo=0&rel=0&iv_load_policy=3&modestbranding=1&enablejsapi=1&widgetid=1
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: https://www.youtube.com/embed/Wu_JFhlI1Fo?autoplay=0&mute=0&controls=1&origin=https%3A%2F%2Fwww.lucidpress.com&playsinline=1&showinfo=0&rel=0&iv_load_policy=3&modestbranding=1&enablejsapi=1&widgetid=1
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: https://app-ab23.marketo.com/index.php/form/XDFrame
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: https://app-ab23.marketo.com/index.php/form/XDFrame
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: https://app-ab23.marketo.com/index.php/form/XDFrame
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: Iframe src: /documents/preloadPress
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: https://app-ab23.marketo.com/index.php/form/XDFrame
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: Iframe src: /documents/preloadPress
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-5NTB7NT
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: Iframe src: //insight.adsrvr.org/tags/5po8geu/q0cpq2s/iframe

HTML body contains low number of good links

Source: https://scientificemployment.co.kr/files/	HTTP Parser: Number of links: 0
Source: https://scientificemployment.co.kr/files/	HTTP Parser: Number of links: 0

No HTML title found

Source: https://www.lucidpress.com/pages/	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/	HTTP Parser: HTML title missing
Source: https://scientificemployment.co.kr/files/	HTTP Parser: HTML title missing
Source: https://scientificemployment.co.kr/files/	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: HTML title missing
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: HTML title missing

META author tag missing

Source: https://www.lucidpress.com/pages/	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/	HTTP Parser: No <meta name="author".. found
Source: https://scientificemployment.co.kr/files/	HTTP Parser: No <meta name="author".. found
Source: https://scientificemployment.co.kr/files/	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: No <meta name="author".. found
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://www.lucidpress.com/pages/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/	HTTP Parser: No <meta name="copyright".. found
Source: https://scientificemployment.co.kr/files/	HTTP Parser: No <meta name="copyright".. found
Source: https://scientificemployment.co.kr/files/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/individuals	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/industries/franchises	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/industries/finance	HTTP Parser: No <meta name="copyright".. found
Source: https://www.lucidpress.com/pages/tour	HTTP Parser: No <meta name="copyright".. found

Compliance:

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Networking:

Found strings which match to known social media urls

Source: Current Session.1.dr	String found in binary or memory: id=327700410950882&ev=Microdata&dl=https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises&rl=&if=false&ts=1628049764830&cd%5BDataLayer%5D=%5B%5D&cd%5BMeta%5D=%7B%22title%22%3A%22Marketing+for+Franchises-+Digital+and+Print+Templates+%7C+Lucidpress%22%2C%22meta%3Adescription%22%3A%22Empower+franchisees+to+localize+your+brand+%28without+damaging+it%29+and+streamline+content+creation+through+web-based%2C+lockable+templates+on+Lucidpress.%22%7D&cd%5BOpenGraph%5D=%7B%22og%3Asite_name%22%3A%22Lucidpress%22%2C%22og%3Atype%22%3A%22article%22%2C%22og%3Aurl%22%3A%22https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises%22%2C%22og%3Atitle%22%3A%22Streamline+your+franchise+marketing+%26+keep+it+consistent%22%2C%22og%3Adescription%22%3A%22*%2F%22%2C%22og%3Aupdated_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%2C%22article%3Apublished_time%22%3A%222017-01-25T10%3A52%3A59-07%3A00%22%2C%22article%3Amodified_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%7D&cd%5BSchema.org%5D=%5B%5D&cd%5BJSON-LD%5D=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT1M12S%22%2C%22name%22%3A%22Testimonial+%E2%80%94%C2%A0Use+Lucidpress+across+locations%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F80ce968d08742a85416a6a796aaf4163.jpg%3Fimage_crop_resized%3D943x526%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22uploadDate%22%3A%222019-07-24%22%2C%22description%22%3A%22a+Testimonials+video%22%7D%2C%7B%22%40context%22%3A%22http%3A%2F%2Fwww.schema.org%22%2C%22%40type%22%3A%22Organization%22%2C%22name%22%3A%22Lucidpress%22%2C%22url%22%3A%22https%3A%2F%2Fwww.lucidpress.com%22%2C%22sameAs%22%3A%5B%22https%3A%2F%2Fwww.youtube.com%2Fuser%2Flucidpressapp%22%2C%22https%3A%2F%2Fplus.google.com%2F%2BLucidpressDesign%22%2C%22https%3A%2F%2Fwww.facebook.com%2Flucidpress%22%2C%22https%3A%2F%2Ftwitter.com%2Flucidpress%22%5D%2C%22logo%22%3A%22https%3A%2F%2Fd2slcw3kip6qmk.cloudfront.net%2Fapp%2Fpress%2Flogos%2Flucidpress-logo-2015-189x34%402x.png%22%2C%22description%22%3A%22A+Cloud-Based+Design+and+Desktop+Publishing+Tool%22%2C%22address%22%3A%7B%22%40type%22%3A%22PostalAddress%22%2C%22addressLocality%22%3A%22South+Jordan%22%2C%22addressRegion%22%3A%22UT%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.44&r=stable&ec=2&o=30&fbp=fb.1.1628049719748.842609000&it=1628049762402&coo=false&es=automatic&tm=3&rqm=formPOST equals www.facebook.com (Facebook)
Source: Current Session.1.dr	String found in binary or memory: id=327700410950882&ev=Microdata&dl=https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises&rl=&if=false&ts=1628049764830&cd%5BDataLayer%5D=%5B%5D&cd%5BMeta%5D=%7B%22title%22%3A%22Marketing+for+Franchises-+Digital+and+Print+Templates+%7C+Lucidpress%22%2C%22meta%3Adescription%22%3A%22Empower+franchisees+to+localize+your+brand+%28without+damaging+it%29+and+streamline+content+creation+through+web-based%2C+lockable+templates+on+Lucidpress.%22%7D&cd%5BOpenGraph%5D=%7B%22og%3Asite_name%22%3A%22Lucidpress%22%2C%22og%3Atype%22%3A%22article%22%2C%22og%3Aurl%22%3A%22https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises%22%2C%22og%3Atitle%22%3A%22Streamline+your+franchise+marketing+%26+keep+it+consistent%22%2C%22og%3Adescription%22%3A%22*%2F%22%2C%22og%3Aupdated_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%2C%22article%3Apublished_time%22%3A%222017-01-25T10%3A52%3A59-07%3A00%22%2C%22article%3Amodified_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%7D&cd%5BSchema.org%5D=%5B%5D&cd%5BJSON-LD%5D=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT1M12S%22%2C%22name%22%3A%22Testimonial+%E2%80%94%C2%A0Use+Lucidpress+across+locations%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F80ce968d08742a85416a6a796aaf4163.jpg%3Fimage_crop_resized%3D943x526%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22uploadDate%22%3A%222019-07-24%22%2C%22description%22%3A%22a+Testimonials+video%22%7D%2C%7B%22%40context%22%3A%22http%3A%2F%2Fwww.schema.org%22%2C%22%40type%22%3A%22Organization%22%2C%22name%22%3A%22Lucidpress%22%2C%22url%22%3A%22https%3A%2F%2Fwww.lucidpress.com%22%2C%22sameAs%22%3A%5B%22https%3A%2F%2Fwww.youtube.com%2Fuser%2Flucidpressapp%22%2C%22https%3A%2F%2Fplus.google.com%2F%2BLucidpressDesign%22%2C%22https%3A%2F%2Fwww.facebook.com%2Flucidpress%22%2C%22https%3A%2F%2Ftwitter.com%2Flucidpress%22%5D%2C%22logo%22%3A%22https%3A%2F%2Fd2slcw3kip6qmk.cloudfront.net%2Fapp%2Fpress%2Flogos%2Flucidpress-logo-2015-189x34%402x.png%22%2C%22description%22%3A%22A+Cloud-Based+Design+and+Desktop+Publishing+Tool%22%2C%22address%22%3A%7B%22%40type%22%3A%22PostalAddress%22%2C%22addressLocality%22%3A%22South+Jordan%22%2C%22addressRegion%22%3A%22UT%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.44&r=stable&ec=2&o=30&fbp=fb.1.1628049719748.842609000&it=1628049762402&coo=false&es=automatic&tm=3&rqm=formPOST equals www.youtube.com (Youtube)
Source: 000003.log7.1.dr	String found in binary or memory: -_https://www.youtube.com equals www.youtube.com (Youtube)
Source: Cookies-journal.3.dr	String found in binary or memory: .www.linkedin.combscookie/ equals www.linkedin.com (Linkedin)
Source: Cookies-journal.3.dr	String found in binary or memory: .www.linkedin.combscookie//` equals www.linkedin.com (Linkedin)
Source: Cookies-journal.3.dr	String found in binary or memory: .www.linkedin.combscookie/9 equals www.linkedin.com (Linkedin)
Source: 000003.log7.1.dr	String found in binary or memory: 5_https://www.youtube.com equals www.youtube.com (Youtube)
Source: b83f3040864ea492_0.1.dr	String found in binary or memory: G_keyhttps://www.youtube.com/s/player/2840754e/fetch-polyfill.vflset/fetch-polyfill.js equals www.youtube.com (Youtube)
Source: 000003.log0.1.dr	String found in binary or memory: Gnamespace-27319ebc_2dec_4a92_bc15_f91a2c1693cd-https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: 000003.log7.1.dr	String found in binary or memory: META:https://www.youtube.com equals www.youtube.com (Youtube)
Source: 717025da8c1cabec_0.1.dr	String found in binary or memory: U_keyhttps://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/embed.js equals www.youtube.com (Youtube)
Source: Current Session.1.dr	String found in binary or memory: Use Lucidpress across locations","thumbnailUrl":"https://embed-ssl.wistia.com/deliveries/80ce968d08742a85416a6a796aaf4163.jpg?image_crop_resized=943x526","embedUrl":"https://fast.wistia.net/embed/iframe/n95q2k1da9","uploadDate":"2019-07-24","description":"a Testimonials video"},{"@context":"http://www.schema.org","@type":"Organization","name":"Lucidpress","url":"https://www.lucidpress.com","sameAs":["https://www.youtube.com/user/lucidpressapp","https://plus.google.com/+LucidpressDesign","https://www.facebook.com/lucidpress","https://twitter.com/lucidpress"],"logo":"https://d2slcw3kip6qmk.cloudfront.net/app/press/logos/lucidpress-logo-2015-189x34@2x.png","description":"A Cloud-Based Design and Desktop Publishing Tool","address":{"@type":"PostalAddress","addressLocality":"South Jordan","addressRegion":"UT"}}] equals www.facebook.com (Facebook)
Source: Current Session.1.dr	String found in binary or memory: Use Lucidpress across locations","thumbnailUrl":"https://embed-ssl.wistia.com/deliveries/80ce968d08742a85416a6a796aaf4163.jpg?image_crop_resized=943x526","embedUrl":"https://fast.wistia.net/embed/iframe/n95q2k1da9","uploadDate":"2019-07-24","description":"a Testimonials video"},{"@context":"http://www.schema.org","@type":"Organization","name":"Lucidpress","url":"https://www.lucidpress.com","sameAs":["https://www.youtube.com/user/lucidpressapp","https://plus.google.com/+LucidpressDesign","https://www.facebook.com/lucidpress","https://twitter.com/lucidpress"],"logo":"https://d2slcw3kip6qmk.cloudfront.net/app/press/logos/lucidpress-logo-2015-189x34@2x.png","description":"A Cloud-Based Design and Desktop Publishing Tool","address":{"@type":"PostalAddress","addressLocality":"South Jordan","addressRegion":"UT"}}] equals www.twitter.com (Twitter)
Source: Current Session.1.dr	String found in binary or memory: Use Lucidpress across locations","thumbnailUrl":"https://embed-ssl.wistia.com/deliveries/80ce968d08742a85416a6a796aaf4163.jpg?image_crop_resized=943x526","embedUrl":"https://fast.wistia.net/embed/iframe/n95q2k1da9","uploadDate":"2019-07-24","description":"a Testimonials video"},{"@context":"http://www.schema.org","@type":"Organization","name":"Lucidpress","url":"https://www.lucidpress.com","sameAs":["https://www.youtube.com/user/lucidpressapp","https://plus.google.com/+LucidpressDesign","https://www.facebook.com/lucidpress","https://twitter.com/lucidpress"],"logo":"https://d2slcw3kip6qmk.cloudfront.net/app/press/logos/lucidpress-logo-2015-189x34@2x.png","description":"A Cloud-Based Design and Desktop Publishing Tool","address":{"@type":"PostalAddress","addressLocality":"South Jordan","addressRegion":"UT"}}] equals www.youtube.com (Youtube)
Source: Current Session.1.dr	String found in binary or memory: X(https://www.facebook.com/tr/ [id ev ] #0 equals www.facebook.com (Facebook)
Source: 000003.log7.1.dr	String found in binary or memory: _https://www.youtube.com equals www.youtube.com (Youtube)
Source: b83f3040864ea492_0.1.dr	String found in binary or memory: _keyhttps://www.youtube.com/s/player/2840754e/fetch-polyfill.vflset/fetch-polyfill.js equals www.youtube.com (Youtube)
Source: efb30ae481d2e08d_0.1.dr	String found in binary or memory: _keyhttps://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/base.js equals www.youtube.com (Youtube)
Source: 717025da8c1cabec_0.1.dr	String found in binary or memory: _keyhttps://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/embed.js equals www.youtube.com (Youtube)
Source: 3ca51d4fc58c490f_0.1.dr	String found in binary or memory: _keyhttps://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/remote.js equals www.youtube.com (Youtube)
Source: 484516fa709d9ae0_0.1.dr	String found in binary or memory: _keyhttps://www.youtube.com/s/player/2840754e/www-embed-player.vflset/www-embed-player.js equals www.youtube.com (Youtube)
Source: 912d957790332ec4_0.1.dr	String found in binary or memory: _keyhttps://www.youtube.com/s/player/2840754e/www-widgetapi.vflset/www-widgetapi.js equals www.youtube.com (Youtube)
Source: Reporting and NEL.3.dr	String found in binary or memory: coop_reporthttps://www.facebook.com/browser_reporting/ equals www.facebook.com (Facebook)
Source: Reporting and NEL.3.dr	String found in binary or memory: coop_reporthttps://www.facebook.com/browser_reporting/s equals www.facebook.com (Facebook)
Source: Current Session.1.dr	String found in binary or memory: https://www.facebook.com/tr/ equals www.facebook.com (Facebook)
Source: Current Session.1.dr	String found in binary or memory: https://www.youtube.com equals www.youtube.com (Youtube)
Source: Current Session.1.dr	String found in binary or memory: https://www.youtube.com" equals www.youtube.com (Youtube)
Source: Current Session.1.dr	String found in binary or memory: https://www.youtube.com/embed/Wu_JFhlI1Fo?autoplay=0&mute=0&controls=1&origin=https%3A%2F%2Fwww.lucidpress.com&playsinline=1&showinfo=0&rel=0&iv_load_policy=3&modestbranding=1&enablejsapi=1&widgetid=1 equals www.youtube.com (Youtube)
Source: Current Session.1.dr	String found in binary or memory: id=327700410950882&ev=Microdata&dl=https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises&rl=&if=false&ts=1628049764830&cd%5BDataLayer%5D=%5B%5D&cd%5BMeta%5D=%7B%22title%22%3A%22Marketing+for+Franchises-+Digital+and+Print+Templates+%7C+Lucidpress%22%2C%22meta%3Adescription%22%3A%22Empower+franchisees+to+localize+your+brand+%28without+damaging+it%29+and+streamline+content+creation+through+web-based%2C+lockable+templates+on+Lucidpress.%22%7D&cd%5BOpenGraph%5D=%7B%22og%3Asite_name%22%3A%22Lucidpress%22%2C%22og%3Atype%22%3A%22article%22%2C%22og%3Aurl%22%3A%22https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises%22%2C%22og%3Atitle%22%3A%22Streamline+your+franchise+marketing+%26+keep+it+consistent%22%2C%22og%3Adescription%22%3A%22*%2F%22%2C%22og%3Aupdated_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%2C%22article%3Apublished_time%22%3A%222017-01-25T10%3A52%3A59-07%3A00%22%2C%22article%3Amodified_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%7D&cd%5BSchema.org%5D=%5B%5D&cd%5BJSON-LD%5D=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT1M12S%22%2C%22name%22%3A%22Testimonial+%E2%80%94%C2%A0Use+Lucidpress+across+locations%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F80ce968d08742a85416a6a796aaf4163.jpg%3Fimage_crop_resized%3D943x526%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22uploadDate%22%3A%222019-07-24%22%2C%22description%22%3A%22a+Testimonials+video%22%7D%2C%7B%22%40context%22%3A%22http%3A%2F%2Fwww.schema.org%22%2C%22%40type%22%3A%22Organization%22%2C%22name%22%3A%22Lucidpress%22%2C%22url%22%3A%22https%3A%2F%2Fwww.lucidpress.com%22%2C%22sameAs%22%3A%5B%22https%3A%2F%2Fwww.youtube.com%2Fuser%2Flucidpressapp%22%2C%22https%3A%2F%2Fplus.google.com%2F%2BLucidpressDesign%22%2C%22https%3A%2F%2Fwww.facebook.com%2Flucidpress%22%2C%22https%3A%2F%2Ftwitter.com%2Flucidpress%22%5D%2C%22logo%22%3A%22https%3A%2F%2Fd2slcw3kip6qmk.cloudfront.net%2Fapp%2Fpress%2Flogos%2Flucidpress-logo-2015-189x34%402x.png%22%2C%22description%22%3A%22A+Cloud-Based+Design+and+Desktop+Publishing+Tool%22%2C%22address%22%3A%7B%22%40type%22%3A%22PostalAddress%22%2C%22addressLocality%22%3A%22South+Jordan%22%2C%22addressRegion%22%3A%22UT%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.44&r=stable&ec=2&o=30&fbp=fb.1.1628049719748.842609000&it=1628049762402&coo=false&es=automatic&tm=3&rqm=formPOST equals www.facebook.com (Facebook)
Source: Current Session.1.dr	String found in binary or memory: id=327700410950882&ev=Microdata&dl=https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises&rl=&if=false&ts=1628049764830&cd%5BDataLayer%5D=%5B%5D&cd%5BMeta%5D=%7B%22title%22%3A%22Marketing+for+Franchises-+Digital+and+Print+Templates+%7C+Lucidpress%22%2C%22meta%3Adescription%22%3A%22Empower+franchisees+to+localize+your+brand+%28without+damaging+it%29+and+streamline+content+creation+through+web-based%2C+lockable+templates+on+Lucidpress.%22%7D&cd%5BOpenGraph%5D=%7B%22og%3Asite_name%22%3A%22Lucidpress%22%2C%22og%3Atype%22%3A%22article%22%2C%22og%3Aurl%22%3A%22https%3A%2F%2Fwww.lucidpress.com%2Fpages%2Findustries%2Ffranchises%22%2C%22og%3Atitle%22%3A%22Streamline+your+franchise+marketing+%26+keep+it+consistent%22%2C%22og%3Adescription%22%3A%22*%2F%22%2C%22og%3Aupdated_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%2C%22article%3Apublished_time%22%3A%222017-01-25T10%3A52%3A59-07%3A00%22%2C%22article%3Amodified_time%22%3A%222020-11-09T12%3A09%3A37-07%3A00%22%7D&cd%5BSchema.org%5D=%5B%5D&cd%5BJSON-LD%5D=%5B%7B%22%40context%22%3A%22http%3A%2F%2Fschema.org%2F%22%2C%22%40id%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22%40type%22%3A%22VideoObject%22%2C%22duration%22%3A%22PT1M12S%22%2C%22name%22%3A%22Testimonial+%E2%80%94%C2%A0Use+Lucidpress+across+locations%22%2C%22thumbnailUrl%22%3A%22https%3A%2F%2Fembed-ssl.wistia.com%2Fdeliveries%2F80ce968d08742a85416a6a796aaf4163.jpg%3Fimage_crop_resized%3D943x526%22%2C%22embedUrl%22%3A%22https%3A%2F%2Ffast.wistia.net%2Fembed%2Fiframe%2Fn95q2k1da9%22%2C%22uploadDate%22%3A%222019-07-24%22%2C%22description%22%3A%22a+Testimonials+video%22%7D%2C%7B%22%40context%22%3A%22http%3A%2F%2Fwww.schema.org%22%2C%22%40type%22%3A%22Organization%22%2C%22name%22%3A%22Lucidpress%22%2C%22url%22%3A%22https%3A%2F%2Fwww.lucidpress.com%22%2C%22sameAs%22%3A%5B%22https%3A%2F%2Fwww.youtube.com%2Fuser%2Flucidpressapp%22%2C%22https%3A%2F%2Fplus.google.com%2F%2BLucidpressDesign%22%2C%22https%3A%2F%2Fwww.facebook.com%2Flucidpress%22%2C%22https%3A%2F%2Ftwitter.com%2Flucidpress%22%5D%2C%22logo%22%3A%22https%3A%2F%2Fd2slcw3kip6qmk.cloudfront.net%2Fapp%2Fpress%2Flogos%2Flucidpress-logo-2015-189x34%402x.png%22%2C%22description%22%3A%22A+Cloud-Based+Design+and+Desktop+Publishing+Tool%22%2C%22address%22%3A%7B%22%40type%22%3A%22PostalAddress%22%2C%22addressLocality%22%3A%22South+Jordan%22%2C%22addressRegion%22%3A%22UT%22%7D%7D%5D&sw=1280&sh=1024&v=2.9.44&r=stable&ec=2&o=30&fbp=fb.1.1628049719748.842609000&it=1628049762402&coo=false&es=automatic&tm=3&rqm=formPOST equals www.youtube.com (Youtube)

URLs found in memory or binary data

Source: 77EC63BDA74BD0D0E0426DC8F8008506.3.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: 9e8fb8d7969b740f_0.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: 8df26d7862269223_0.1.dr, 9e8fb8d7969b740f_0.1.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: Current Session.1.dr	String found in binary or memory: http://schema.org/
Source: Current Session.1.dr	String found in binary or memory: http://www.schema.org
Source: Reporting and NEL-journal.3.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=%2B1JpKXCf3ryoG0bRTwEjD40RnzsFVsMWljs82%2Br7ha2yLwfClkxFtbx
Source: Reporting and NEL-journal.3.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=%2FhBjZgPnBN8zjCWEkIBKzle1Fh%2BK0sSJClU2iVtXAdPQD08Gd3LJnI6
Source: Reporting and NEL.3.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=0Pkx%2F5EvbBuFjTeVQkSKzRomAfQNx9Au5l8zTsIqD%2BE2TItSTqljImN
Source: Reporting and NEL.3.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=4ykGTcW1R1pLyI76DBKHa9wsq%2BYJbtmGX7m7FI28gTDfh3hI%2FlCnuD8
Source: c75fd236c5715bf5_0.1.dr	String found in binary or memory: https://a.omappapi.com/app/js/api.min.js
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://a.omappapi.com/app/js/api.min.jsa
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://a.omappapi.com/app/js/api.min.jsaD
Source: 11519cf6722cebd8_0.1.dr	String found in binary or memory: https://a.omappapi.com/app/js/webfont/1.5.18/webfont.js
Source: 11519cf6722cebd8_0.1.dr	String found in binary or memory: https://a.omappapi.com/app/js/webfont/1.5.18/webfont.jsaD
Source: manifest.json0.1.dr, 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://accounts.google.com
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://ajax.googleapis.com
Source: Network Action Predictor.1.dr	String found in binary or memory: https://ajax.googleapis.com/
Source: a08876ffa2327bb1_0.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 8df26d7862269223_0.1.dr, 9e8fb8d7969b740f_0.1.dr	String found in binary or memory: https://analytics.app.lucidpress.com
Source: 8df26d7862269223_0.1.dr, 9e8fb8d7969b740f_0.1.dr	String found in binary or memory: https://analytics.app.preprodchart.com
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: https://analytics.app.preprodpress.com
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: https://analytics.lucid.app
Source: cf61c57ce830d611_0.1.dr	String found in binary or memory: https://analytics.lucidchart.com
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: https://analytics.lucidchart.eu
Source: cf61c57ce830d611_0.1.dr	String found in binary or memory: https://analytics.lucidpress.com
Source: cf61c57ce830d611_0.1.dr	String found in binary or memory: https://analytics.preprodchart.com
Source: cf61c57ce830d611_0.1.dr	String found in binary or memory: https://analytics.preprodpress.com
Source: manifest.json0.1.dr, 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://apis.google.com
Source: 000003.log7.1.dr	String found in binary or memory: https://app-ab23.marketo.com
Source: 000003.log7.1.dr	String found in binary or memory: https://app-ab23.marketo.com(_https://app-ab23.marketo.com
Source: Current Session.1.dr	String found in binary or memory: https://app-ab23.marketo.com/index.php/form/XDFrame
Source: b9fd5174b2b27d8d_0.1.dr	String found in binary or memory: https://app-ab23.marketo.com/index.php/form/getForm?munchkinId=805-PTZ-019&form=1310&url=https%3A%2F
Source: 6310199623e4f717_0.1.dr, 4e43ecd1850e312e_0.1.dr	String found in binary or memory: https://app-ab23.marketo.com/js/forms2/js/forms2.min.js
Source: 4e43ecd1850e312e_0.1.dr	String found in binary or memory: https://app-ab23.marketo.com/js/forms2/js/forms2.min.jsaD
Source: b2ca9cbc5835c823_0.1.dr	String found in binary or memory: https://app.lucidpress.com/documents/preloadPress
Source: 3abce8e1224b2b4a_0.1.dr	String found in binary or memory: https://app.lucidpress.com/js/config
Source: 879405f047052d89_0.1.dr, 669cabd97da730ba_0.1.dr	String found in binary or memory: https://app.lucidpress.com/js/metriclogger
Source: 669cabd97da730ba_0.1.dr	String found in binary or memory: https://app.lucidpress.com/js/metricloggeraD
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://app.optinmonster.test/wp-content/optinmonster-api-js/dist/Api.js
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://app.optinmonster.test/wp-content/optinmonster-api-js/dist/ApiDebug.js
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://app.optinmonster.test/wp-content/optinmonster-live-site-inspector/dist/lsi.min.js
Source: 1f27d52f4685155b_0.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.1.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: Network Action Predictor.1.dr	String found in binary or memory: https://code.jquery.com/
Source: 97ccc3139b57518d_0.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: bdedffdee771d124_0.1.dr	String found in binary or memory: https://connect.facebook.net/signals/config/327700410950882?v=2.9.44&r=stable
Source: 2b048cc042e03fe8_0.1.dr	String found in binary or memory: https://connect.facebook.net/signals/config/388265628034613?v=2.9.44&r=stable
Source: manifest.json0.1.dr	String found in binary or memory: https://content.googleapis.com
Source: Reporting and NEL-journal.3.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
Source: Reporting and NEL-journal.3.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/downloads-lorry
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net
Source: 9c28f5ea48551af7_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/app/webroot/js/kissmetrics/kissmetrics-20171101.js
Source: cf61c57ce830d611_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/app/webroot/js/kissmetrics/kissmetrics-20171101.jsa
Source: cf61c57ce830d611_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/app/webroot/js/kissmetrics/kissmetrics-20171101.jsaD
Source: 6cf670600583e2ad_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/common/js/tsDeps-20171101.js
Source: 6cf670600583e2ad_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/common/js/tsDeps-20171101.jsaD
Source: 7c0da8815cfc18e0_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/common/js/userTimingPolyfill.js
Source: 7c0da8815cfc18e0_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/common/js/userTimingPolyfill.jsaD
Source: e8d309b72ff3563c_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/lib/bundles/js/jquery-2.1.1_jquery-ui-1.9.2_jquery-cookie-pre-
Source: 232e7b39f04b917b_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/lib/external/retina/retina-1.3.0-lucid.min.js
Source: 232e7b39f04b917b_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/lib/external/retina/retina-1.3.0-lucid.min.jsaD
Source: c4be86f3067767f8_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/lib/lucid/analytics/analytics-1.0.js
Source: c4be86f3067767f8_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/lib/lucid/analytics/analytics-1.0.jsaD
Source: Favicons.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/marketing/images/LucidpressFavicon.png
Source: Favicons.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/marketing/images/LucidpressFavicon.png.
Source: 9db2a2427c57691b_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/marketing/press/legacy/press.site.v3.js
Source: 9db2a2427c57691b_0.1.dr	String found in binary or memory: https://d2slcw3kip6qmk.cloudfront.net/marketing/press/legacy/press.site.v3.jsaD
Source: 9e8fb8d7969b740f_0.1.dr, 16d3920e81d43803_0.1.dr	String found in binary or memory: https://d5x2n72glkaxl.cloudfront.net/js/bacon?compiled=1&version=20201116-151730-f8bf3034
Source: 9e8fb8d7969b740f_0.1.dr	String found in binary or memory: https://d5x2n72glkaxl.cloudfront.net/js/bacon?compiled=1&version=20201116-151730-f8bf3034aD
Source: 8df26d7862269223_0.1.dr, 5455f51911b7f1ec_0.1.dr	String found in binary or memory: https://d5x2n72glkaxl.cloudfront.net/js/bacon?compiled=1&version=20210422-142202-054eb930
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: https://d5x2n72glkaxl.cloudfront.net/js/bacon?compiled=1&version=20210422-142202-054eb930aD
Source: 5b25dd016621059c_0.1.dr	String found in binary or memory: https://d5x2n72glkaxl.cloudfront.net/js/cookieSyncClient?compiled=1&version=20201116-151730-f8bf3034
Source: 7897f5c0a911aadb_0.1.dr	String found in binary or memory: https://d5x2n72glkaxl.cloudfront.net/js/cookieSyncClient?compiled=1&version=20210422-142202-054eb930
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/MutationObserver
Source: e551372dd2e52f96_0.1.dr	String found in binary or memory: https://developers.marketo.com/?p=7696
Source: 487f1d5b-bbda-4bd0-948a-7b65b7ced8a6.tmp.3.dr, 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr, 55db216a-8d7a-4787-98c1-542acdadb070.tmp.3.dr	String found in binary or memory: https://dns.google
Source: 0acaaaadc4c914e9_0.1.dr	String found in binary or memory: https://doug1izaerwt3.cloudfront.net/97d3f65032112221645075836786b6a2d73cfab0.2.js
Source: Current Session.1.dr	String found in binary or memory: https://embed-ssl.wistia.com/deliveries/80ce968d08742a85416a6a796aaf4163.jpg?image_crop_resized=943x
Source: e0505305f66deae6_0.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/E-v1.js
Source: fb80d1369f3aa1d8_0.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/allIntegrations.js
Source: e5a20816cc7df83a_0.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/captions.js
Source: a46e99debb0a3d57_0.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/engines/hls_video.js
Source: f4f9f38849ed3f3b_0.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/playPauseLoadingControl.js
Source: 94e7ece914e4fd2a_0.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/wistia-mux.js
Source: d0f4bc903a84af29_0.1.dr	String found in binary or memory: https://fast.wistia.com/embed/captions/f2io542br0.json?callback=wistiajson1
Source: 744438a3b04cd6f2_0.1.dr	String found in binary or memory: https://fast.wistia.com/embed/medias/f2io542br0.jsonp
Source: 753ed346724b8042_0.1.dr	String found in binary or memory: https://fast.wistia.com/embed/medias/n95q2k1da9.jsonp
Source: Current Session.1.dr	String found in binary or memory: https://fast.wistia.net/embed/iframe/n95q2k1da9
Source: manifest.json0.1.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://fonts.gstatic.com
Source: Network Action Predictor-journal.1.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://github.com/webpack-contrib/style-loader#insertat)
Source: manifest.json0.1.dr	String found in binary or memory: https://hangouts.google.com/
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://hotjar.com
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://identify.hotjar.com
Source: 70c4e67f3fb74bfe_0.1.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1628017200000/19908047.js
Source: 26496c37008854d9_0.1.dr	String found in binary or memory: https://js.hs-banner.com/19908047.js
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: Network Action Predictor.1.dr	String found in binary or memory: https://ka-f.fontawesome.com/
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://kit.fontawesome.com
Source: Network Action Predictor.1.dr	String found in binary or memory: https://kit.fontawesome.com/
Source: 1bf6f0b82f1b9913_0.1.dr	String found in binary or memory: https://kit.fontawesome.com/585b051251.js
Source: Current Session.1.dr	String found in binary or memory: https://localhost.adsrvr.org/5po8geu/q0cpq2s/iframe
Source: 8df26d7862269223_0.1.dr, 9e8fb8d7969b740f_0.1.dr	String found in binary or memory: https://lucidchart.zendesk.com/hc
Source: 232e7b39f04b917b_0.1.dr, 653512280d5ec3f7_0.1.dr, 5d87a95d8e77ca56_0.1.dr, c4be86f3067767f8_0.1.dr, 97ccc3139b57518d_0.1.dr, 649647fdaa2ac7fa_0.1.dr, 7c0da8815cfc18e0_0.1.dr, bc596498e72d7de1_0.1.dr, bdedffdee771d124_0.1.dr	String found in binary or memory: https://lucidpress.com/
Source: 136ed6e9c6c535fe_0.1.dr	String found in binary or memory: https://lucidpress.com/#
Source: c75fd236c5715bf5_0.1.dr	String found in binary or memory: https://lucidpress.com/$
Source: 4ffe4d312864231e_0.1.dr	String found in binary or memory: https://lucidpress.com/%
Source: 653512280d5ec3f7_0.1.dr	String found in binary or memory: https://lucidpress.com/.
Source: 3144cfa7b74c9c14_0.1.dr	String found in binary or memory: https://lucidpress.com//
Source: 97ccc3139b57518d_0.1.dr	String found in binary or memory: https://lucidpress.com//0
Source: 3926d97490ec7585_0.1.dr	String found in binary or memory: https://lucidpress.com/0
Source: c9c309f1cf0acfca_0.1.dr	String found in binary or memory: https://lucidpress.com/2
Source: 70c4e67f3fb74bfe_0.1.dr	String found in binary or memory: https://lucidpress.com/3
Source: 97ccc3139b57518d_0.1.dr	String found in binary or memory: https://lucidpress.com/3N
Source: 3b8a3819ae183954_0.1.dr	String found in binary or memory: https://lucidpress.com/6
Source: 7050a61d8ecb7565_0.1.dr	String found in binary or memory: https://lucidpress.com/6L
Source: 86148923446bd99f_0.1.dr	String found in binary or memory: https://lucidpress.com/8
Source: 68382e91bd491a4a_0.1.dr	String found in binary or memory: https://lucidpress.com/=
Source: 9cf4dc79cecb1e5e_0.1.dr, 54676502d7e53de2_0.1.dr	String found in binary or memory: https://lucidpress.com/A
Source: 26496c37008854d9_0.1.dr	String found in binary or memory: https://lucidpress.com/C
Source: 70c4e67f3fb74bfe_0.1.dr	String found in binary or memory: https://lucidpress.com/D
Source: c9c309f1cf0acfca_0.1.dr	String found in binary or memory: https://lucidpress.com/E
Source: 5a67bb9a97ce4a10_0.1.dr	String found in binary or memory: https://lucidpress.com/G
Source: 5d87a95d8e77ca56_0.1.dr	String found in binary or memory: https://lucidpress.com/H
Source: 0acaaaadc4c914e9_0.1.dr	String found in binary or memory: https://lucidpress.com/H~
Source: e0f37abd0105d912_0.1.dr	String found in binary or memory: https://lucidpress.com/J
Source: 69c52365d1e07cb3_0.1.dr	String found in binary or memory: https://lucidpress.com/K
Source: 0acaaaadc4c914e9_0.1.dr, 11519cf6722cebd8_0.1.dr	String found in binary or memory: https://lucidpress.com/M
Source: 5d87a95d8e77ca56_0.1.dr	String found in binary or memory: https://lucidpress.com/N
Source: 2b048cc042e03fe8_0.1.dr	String found in binary or memory: https://lucidpress.com/O:
Source: ca3b9b2a2d1b77ef_0.1.dr	String found in binary or memory: https://lucidpress.com/Os
Source: 653512280d5ec3f7_0.1.dr	String found in binary or memory: https://lucidpress.com/P
Source: 26496c37008854d9_0.1.dr	String found in binary or memory: https://lucidpress.com/Q
Source: 8b047c8ca3185f09_0.1.dr	String found in binary or memory: https://lucidpress.com/R
Source: c9c309f1cf0acfca_0.1.dr	String found in binary or memory: https://lucidpress.com/U
Source: 9cf4dc79cecb1e5e_0.1.dr	String found in binary or memory: https://lucidpress.com/V
Source: 26496c37008854d9_0.1.dr	String found in binary or memory: https://lucidpress.com/a
Source: 63d2ef5776c2dff9_0.1.dr	String found in binary or memory: https://lucidpress.com/a8
Source: 5a67bb9a97ce4a10_0.1.dr	String found in binary or memory: https://lucidpress.com/c
Source: bc596498e72d7de1_0.1.dr	String found in binary or memory: https://lucidpress.com/f
Source: 85763b6d81129b54_0.1.dr	String found in binary or memory: https://lucidpress.com/g
Source: 8b047c8ca3185f09_0.1.dr	String found in binary or memory: https://lucidpress.com/h
Source: e551372dd2e52f96_0.1.dr	String found in binary or memory: https://lucidpress.com/k?
Source: 2b048cc042e03fe8_0.1.dr	String found in binary or memory: https://lucidpress.com/l
Source: 8b047c8ca3185f09_0.1.dr, b36074278b6f58e7_0.1.dr	String found in binary or memory: https://lucidpress.com/m
Source: 0acaaaadc4c914e9_0.1.dr	String found in binary or memory: https://lucidpress.com/n
Source: 79ada431a13d1e1b_0.1.dr	String found in binary or memory: https://lucidpress.com/o
Source: 73c009e4d2d837cd_0.1.dr	String found in binary or memory: https://lucidpress.com/oa
Source: de1d6c5e4c268a14_0.1.dr	String found in binary or memory: https://lucidpress.com/pQ
Source: 2b048cc042e03fe8_0.1.dr	String found in binary or memory: https://lucidpress.com/q
Source: 86148923446bd99f_0.1.dr	String found in binary or memory: https://lucidpress.com/v
Source: b9fd5174b2b27d8d_0.1.dr	String found in binary or memory: https://lucidpress.com/w
Source: 653512280d5ec3f7_0.1.dr	String found in binary or memory: https://lucidpress.com/we
Source: 04961dce325769e6_0.1.dr	String found in binary or memory: https://lucidpress.com/y
Source: 9db2a2427c57691b_0.1.dr	String found in binary or memory: https://lucidpress.com/~T
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: https://lucidpress.zendesk.com/hc
Source: 6310199623e4f717_0.1.dr	String found in binary or memory: https://marketo.com/
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com
Source: Network Action Predictor.1.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/
Source: e4e7bcc9f3f65ebb_0.1.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: e551372dd2e52f96_0.1.dr	String found in binary or memory: https://munchkin.marketo.net/160/munchkin.js
Source: e551372dd2e52f96_0.1.dr	String found in binary or memory: https://munchkin.marketo.net/160/munchkin.jsa
Source: e551372dd2e52f96_0.1.dr	String found in binary or memory: https://munchkin.marketo.net/160/munchkin.jsaD
Source: b1df0b547e1475db_0.1.dr	String found in binary or memory: https://munchkin.marketo.net/munchkin.js
Source: b1df0b547e1475db_0.1.dr	String found in binary or memory: https://munchkin.marketo.net/munchkin.jsa
Source: b1df0b547e1475db_0.1.dr	String found in binary or memory: https://munchkin.marketo.net/munchkin.jsaD
Source: 63d2ef5776c2dff9_0.1.dr	String found in binary or memory: https://nexus.ensighten.com/choozle/13609/Bootstrap.js
Source: 6471a25cf09b93a9_0.1.dr	String found in binary or memory: https://nexus.ensighten.com/choozle/13609/code/6270411c3792dbc63b7e880e949ffac3.js?conditionId0=4899
Source: 54676502d7e53de2_0.1.dr	String found in binary or memory: https://nexus.ensighten.com/choozle/13609/code/7e3bcccbe9be6061a65a6eb142929580.js?conditionId0=4219
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://ogs.google.com
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://optinmonster.com/?utm_source=plugin&utm_medium=link&utm_campaign=powered-by-link
Source: manifest.json.1.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://play.google.com
Source: Current Session.1.dr	String found in binary or memory: https://plus.google.com/
Source: Current Session.1.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://pub.lucidpress.com
Source: QuotaManager.1.dr	String found in binary or memory: https://pub.lucidpress.com/
Source: 6ee33651a10082bc_0.1.dr	String found in binary or memory: https://pub.lucidpress.com/292c4e00-83b0-4a5d-84f0-b0f2e3086142/en.js
Source: 7050a61d8ecb7565_0.1.dr	String found in binary or memory: https://pub.lucidpress.com/292c4e00-83b0-4a5d-84f0-b0f2e3086142/i18n.js
Source: 1d58900ef9548d95_0.1.dr	String found in binary or memory: https://pub.lucidpress.com/292c4e00-83b0-4a5d-84f0-b0f2e3086142/viewer.js
Source: 2368f14ec8465d59_0.1.dr	String found in binary or memory: https://pub.lucidpress.com/292c4e00-83b0-4a5d-84f0-b0f2e3086142/viewerDeps.js
Source: Current Session.1.dr	String found in binary or memory: https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/
Source: Current Session.1.dr	String found in binary or memory: https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/#_0
Source: History Provider Cache.1.dr	String found in binary or memory: https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/#_02
Source: History.1.dr	String found in binary or memory: https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/#_0PROPOSAL
Source: Current Session.1.dr	String found in binary or memory: https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/#_0b
Source: 73c009e4d2d837cd_0.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://r3---sn-5hneknee.gvt1.com
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://redirector.gvt1.com
Source: 3144cfa7b74c9c14_0.1.dr	String found in binary or memory: https://s.adroll.com/j/roundtrip.js
Source: 653512280d5ec3f7_0.1.dr	String found in binary or memory: https://s.adroll.com/j/sendrolling.js
Source: 760b8d90b587e9be_0.1.dr	String found in binary or memory: https://s.adroll.com/pixel/DPYX46NNDVH3LEFFJGQU52/2DEQJ47H2BCHDFEEMMMO52/2CTM4X74SRH65AWOK2XUOS.js
Source: 36b6fba4af0d29f0_0.1.dr	String found in binary or memory: https://s.adroll.com/pixel/DPYX46NNDVH3LEFFJGQU52/2DEQJ47H2BCHDFEEMMMO52/5L5WDS6OHZHVFITHFLZBSA.js
Source: 2bf196ed578d39d4_0.1.dr	String found in binary or memory: https://s.adroll.com/pixel/DPYX46NNDVH3LEFFJGQU52/2DEQJ47H2BCHDFEEMMMO52/E7HOZDB27BAXZBW2AVAA7Y.js
Source: 79ada431a13d1e1b_0.1.dr	String found in binary or memory: https://s.adroll.com/pixel/DPYX46NNDVH3LEFFJGQU52/2DEQJ47H2BCHDFEEMMMO52/EGVXETWO6JB5DGYNJAFJKF.js
Source: 85763b6d81129b54_0.1.dr	String found in binary or memory: https://s.adroll.com/pixel/DPYX46NNDVH3LEFFJGQU52/2DEQJ47H2BCHDFEEMMMO52/ZPOEDXQGG5HMJCGDSDMVVG.js
Source: manifest.json.1.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: Network Action Predictor.1.dr, 1f27d52f4685155b_0.1.dr, a08876ffa2327bb1_0.1.dr	String found in binary or memory: https://scientificemployment.co.kr/
Source: e4e7bcc9f3f65ebb_0.1.dr	String found in binary or memory: https://scientificemployment.co.kr/#
Source: 1bf6f0b82f1b9913_0.1.dr	String found in binary or memory: https://scientificemployment.co.kr/J
Source: Current Session.1.dr	String found in binary or memory: https://scientificemployment.co.kr/files/
Source: History.1.dr	String found in binary or memory: https://scientificemployment.co.kr/files//
Source: History.1.dr	String found in binary or memory: https://scientificemployment.co.kr/files/Share
Source: Current Session.1.dr	String found in binary or memory: https://scientificemployment.co.kr/files/d
Source: 136ed6e9c6c535fe_0.1.dr, 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://script.hotjar.com/modules.7cb32ca5fc09d90486d4.js
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://script.hotjar.com/modules.7cb32ca5fc09d90486d4.jsaD
Source: 73c009e4d2d837cd_0.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: 73c009e4d2d837cd_0.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.jsaD
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://ssl.google-analytics.com
Source: cb9539f511edb801_0.1.dr	String found in binary or memory: https://ssl.google-analytics.com/ga.js
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://ssl.gstatic.com
Source: c9c309f1cf0acfca_0.1.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-1127749.js?sv=7
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://stats.g.doubleclick.net
Source: messages.json83.1.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json83.1.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://surveystats.hotjar.io/hit
Source: 8fe07a2eac9bbdcf_0.1.dr, b50541f1c86a2586_0.1.dr, 245ef57e8f449a35_0.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: Current Session.1.dr	String found in binary or memory: https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://vc.hotjar.io/sessions
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://widget.manychat.com/
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://www.google-analytics.com
Source: 5d87a95d8e77ca56_0.1.dr, 8fe07a2eac9bbdcf_0.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: 8fe07a2eac9bbdcf_0.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.jsaD
Source: 8fe07a2eac9bbdcf_0.1.dr, 245ef57e8f449a35_0.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: manifest.json0.1.dr, 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.google.com/
Source: e30433071d163748_0.1.dr	String found in binary or memory: https://www.google.com/js/th/lQhxPAwZ8aKovI4sh1-uQnDIc052gq1eOOABQ5agqhc.js
Source: fe4fa11aeea0c6e3_0.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=
Source: manifest.json0.1.dr	String found in binary or memory: https://www.google.com;
Source: bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://www.google.de
Source: de1d6c5e4c268a14_0.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.js
Source: de1d6c5e4c268a14_0.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.jsaD
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 8b047c8ca3185f09_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-QEXLWR84HV&l=dataLayer&cx=c
Source: 5a67bb9a97ce4a10_0.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-5NTB7NT
Source: 524eb97b-cc46-4d43-befb-1833d443708b.tmp.3.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://www.gstatic.com
Source: fc0ab71f99454919_0.1.dr	String found in binary or memory: https://www.gstatic.com/charts/loader.js
Source: 335e69ddec2b9ac6_0.1.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: manifest.json0.1.dr	String found in binary or memory: https://www.gstatic.com;
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://www.hotjar.com/?utm_source=client&utm_medium=survey&utm_campaign=insights
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://www.hotjar.com/feedback-surveys?utm_source=client&utm_medium=poll&utm_campaign=insights
Source: 9c4ce06407e78835_0.1.dr	String found in binary or memory: https://www.hotjar.com/incoming-feedback?utm_source=client&utm_medium=incoming_feedback&utm_campaign
Source: 8df26d7862269223_0.1.dr	String found in binary or memory: https://www.lucidchart.com
Source: Current Session.1.dr, bbd721c5-d31c-4e0f-9969-8fe510ea4bb8.tmp.3.dr	String found in binary or memory: https://www.lucidpress.com
Source: 000003.log0.1.dr	String found in binary or memory: https://www.lucidpress.com/
Source: History.1.dr	String found in binary or memory: https://www.lucidpress.com/Lucidpress:
Source: Favicons.1.dr	String found in binary or memory: https://www.lucidpress.com/favicon.ico?v=3
Source: Favicons.1.dr, Current Session.1.dr, 000003.log0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/%Lucidpress:
Source: f2bea8a28a3b041d_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/0ee4d6f25c76d3dcba2bb16327789e4cd1bba4a4-83f4c3a37ff92a69c2fb.js
Source: f2bea8a28a3b041d_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/0ee4d6f25c76d3dcba2bb16327789e4cd1bba4a4-83f4c3a37ff92a69c2fb.jsaD
Source: 69c52365d1e07cb3_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/1571-3de1b972d9fe07c0c6db.js
Source: 69c52365d1e07cb3_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/1571-3de1b972d9fe07c0c6db.jsaD
Source: 1fdd9223c59d29c5_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/3bf9cc50-048e3c591f22f27bea65.js
Source: 1fdd9223c59d29c5_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/3bf9cc50-048e3c591f22f27bea65.jsaD
Source: ca3b9b2a2d1b77ef_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/56cfc42abbcdf11df1c7b164da712a06e6dd4bb6-d4fffa3f6e7ae9c768bb.js
Source: ca3b9b2a2d1b77ef_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/56cfc42abbcdf11df1c7b164da712a06e6dd4bb6-d4fffa3f6e7ae9c768bb.jsaD
Source: 97b18308691cf543_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/7334108c79c0ee97fb6a8fe3441190ba93c90256-bb824e31dcb74ca23912.js
Source: 97b18308691cf543_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/7334108c79c0ee97fb6a8fe3441190ba93c90256-bb824e31dcb74ca23912.jsaD
Source: d8c12ba555b8fd74_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/9cb7a7c1-b81241aeca748339f0e7.js
Source: d8c12ba555b8fd74_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/9cb7a7c1-b81241aeca748339f0e7.jsaD
Source: History.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/Lucidpress:
Source: bbc5df8f6e9d126f_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/app-05d8e4afe72162b1a44e.js
Source: b2ca9cbc5835c823_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/app-05d8e4afe72162b1a44e.jsa
Source: b2ca9cbc5835c823_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/app-05d8e4afe72162b1a44e.jsaD
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/businesshttps://www.lucidpress.com/pages/industries/associations
Source: 55e80d4e28e5225e_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/component---src-templates-nineteen-homepage-nineteen-homepage-tsx-d
Source: 3926d97490ec7585_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/component---src-templates-nineteen-nineteen-tsx-1ecc3d0f8bd3b119449
Source: 99e37995f9d11b6f_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/d66f1a69-884d63b954c0e6b9b27b.js
Source: 99e37995f9d11b6f_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/d66f1a69-884d63b954c0e6b9b27b.jsaD
Source: 428618177cf744c1_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/framework-8f6597af57c976af6db6.js
Source: 428618177cf744c1_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/framework-8f6597af57c976af6db6.jsaD
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/individuals
Source: History.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/individualsIndividual
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/finance
Source: History.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/financeFinance
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/financem
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/franchises
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/franchisesBMarketing
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/franchisesG?
Source: History.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/industries/franchisesMarketing
Source: 86148923446bd99f_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/misc/drupal.js?qwihau
Source: 0533db396c0afa88_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/misc/jquery-extend-3.4.0.js?v=1.4.4
Source: 9cf4dc79cecb1e5e_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/misc/jquery-html-prefilter-3.5.0-backport.js?v=1.4.4
Source: e0f37abd0105d912_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/misc/jquery.js?v=1.4.4
Source: 649647fdaa2ac7fa_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/misc/jquery.once.js?v=1.2
Source: 1dc280024f36cf4a_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/reactPlayerFilePlayer-476d010e022eb97978ec.js
Source: bafa4abe8309bd13_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/reactPlayerYouTube-691ca1b63f375aad24d4.js
Source: b00b652f820841d0_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/sites/all/themes/lucid/js/ab-tests/ab-test.js?qwihau
Source: 04961dce325769e6_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/sites/all/themes/lucid/js/dialog-polyfill.js?qwihau
Source: 3b8a3819ae183954_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/sites/all/themes/lucid/js/lucid-modal-video.js?qwihau
Source: 665496601399c43a_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/sites/all/themes/lucid/js/marketo/load-forms.js
Source: 68382e91bd491a4a_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/sites/all/themes/lucid/js/nav/core.js?qwihau
Source: 6d222a8160032f40_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/sites/all/themes/lucid/templates/nav/nav-ad/nav-ad.js
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/tour
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/tour=Create
Source: History.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/tourCreate
Source: 76bc4d890f98c7fb_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/webpack-runtime-2912c4c8bff1fb38771a.js
Source: 76bc4d890f98c7fb_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/webpack-runtime-2912c4c8bff1fb38771a.jsa
Source: 76bc4d890f98c7fb_0.1.dr	String found in binary or memory: https://www.lucidpress.com/pages/webpack-runtime-2912c4c8bff1fb38771a.jsaD
Source: Current Session.1.dr	String found in binary or memory: https://www.lucidpress.comh
Source: Current Session.1.dr	String found in binary or memory: https://www.youtube.com
Source: 000003.log0.1.dr	String found in binary or memory: https://www.youtube.com/
Source: Current Session.1.dr	String found in binary or memory: https://www.youtube.com/embed/Wu_JFhlI1Fo?autoplay=0&mute=0&controls=1&origin=https%3A%2F%2Fwww.luci
Source: b83f3040864ea492_0.1.dr	String found in binary or memory: https://www.youtube.com/s/player/2840754e/fetch-polyfill.vflset/fetch-polyfill.js
Source: efb30ae481d2e08d_0.1.dr	String found in binary or memory: https://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/base.js
Source: 717025da8c1cabec_0.1.dr	String found in binary or memory: https://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/embed.js
Source: 3ca51d4fc58c490f_0.1.dr	String found in binary or memory: https://www.youtube.com/s/player/2840754e/player_ias.vflset/en_US/remote.js
Source: 484516fa709d9ae0_0.1.dr	String found in binary or memory: https://www.youtube.com/s/player/2840754e/www-embed-player.vflset/www-embed-player.js
Source: 912d957790332ec4_0.1.dr	String found in binary or memory: https://www.youtube.com/s/player/2840754e/www-widgetapi.vflset/www-widgetapi.js
Source: Current Session.1.dr	String found in binary or memory: https://www.youtube.com/user/lucidpressapp
Source: 484516fa709d9ae0_0.1.dr	String found in binary or memory: https://youtube.com/
Source: b83f3040864ea492_0.1.dr	String found in binary or memory: https://youtube.com/)
Source: e30433071d163748_0.1.dr	String found in binary or memory: https://youtube.com/.
Source: 717025da8c1cabec_0.1.dr	String found in binary or memory: https://youtube.com/:jA
Source: 3ca51d4fc58c490f_0.1.dr	String found in binary or memory: https://youtube.com/O
Source: 335e69ddec2b9ac6_0.1.dr	String found in binary or memory: https://youtube.com/o
Source: efb30ae481d2e08d_0.1.dr	String found in binary or memory: https://youtube.com/y

System Summary:

Classification label

Source: classification engine

Classification label: mal64.phis.win@52/364@0/87

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-610A1120-144C.pma

Jump to behavior

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\56ebb465-cf7f-464c-95ed-b0319c20b148.tmp

Jump to behavior

SQL strings found in memory and binary data

Source: QuotaManager-journal.1.dr

Binary or memory string: CREATE TABLE HostQuotaTable(host TEXT NOT NULL, type INTEGER NOT NULL, quota INTEGER DEFAULT 0, UNIQUE(host, type));

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://pub.lucidpress.com/d2d8f4ec-03d1-433d-9635-8d794acb5292/#_0'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1312,3565287986375282334,5985329352411713397,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1760 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1312,3565287986375282334,5985329352411713397,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=6724 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1312,3565287986375282334,5985329352411713397,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=6568 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1312,3565287986375282334,5985329352411713397,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1760 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1312,3565287986375282334,5985329352411713397,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=6724 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1312,3565287986375282334,5985329352411713397,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=6568 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior