Loading ...

Play interactive tourEdit tour

Analysis Report https://www.dropbox.com/l/scl/AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ

Overview

General Information

Joe Sandbox Version:26.0.0 Aquamarine
Analysis ID:173096
Start date:11.09.2019
Start time:20:46:11
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 5m 45s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:browseurl.jbs
Sample URL:https://www.dropbox.com/l/scl/AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ
Analysis system description:Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113
Number of analysed new started processes analysed:5
Number of new started drivers analysed:0
Number of existing processes analysed:0
Number of existing drivers analysed:0
Number of injected processes analysed:0
Technologies:
  • EGA enabled
  • AMSI enabled
Analysis stop reason:Timeout
Detection:CLEAN
Classification:clean1.win@3/130@44/34
Cookbook Comments:
  • Adjust boot time
  • Enable AMSI
  • Browsing link: https://www.dropbox.com/
  • Browsing link: https://www.google.com/policies/privacy/
  • Browsing link: https://www.google.com/policies/terms/
  • Browsing link: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=0&oref=e&r=aa9-n0dcalimultqdszojnqtjfgyw3vq8m39x0pffgy6fag8_-_1dqci8wlcdsg4ufj3gd5_musopcy2oxyvprwqwckx2resvw9w3woqv3dfaxijmglapcz1u3qrbekdqadvg3qmlv5d7ajikrylyxxx6qbp4grpv7wn4be6wyw91kj9apncqf8i82dfo7hebmvgpfkp9gvetuqex3r2p3ww&sm=1#
Warnings:
Show All
  • Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
  • Exclude process from analysis (whitelisted): ielowutil.exe, conhost.exe, CompatTelRunner.exe
  • Excluded IPs from analysis (whitelisted): 104.103.90.39, 104.16.100.29, 104.16.99.29, 172.217.23.228, 216.58.201.99, 216.58.201.72, 104.73.142.93, 2.18.69.168, 104.103.97.86, 172.217.23.238, 152.199.19.161, 82.199.68.72, 104.73.138.159, 23.5.109.152, 204.79.197.200, 13.107.21.200, 172.217.23.206, 216.58.201.110, 13.107.4.50, 216.58.201.67
  • Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, tags.bluekai.com.edgekey.net, e1879.e7.akamaiedge.net, ssl.gstatic.com, www.googleadservices.com, policies.google.com, cfl.dropboxstatic.com.cdn.cloudflare.net, adservice.google.com, e11290.dspg.akamaiedge.net, e9706.dscg.akamaiedge.net, iecvlist.microsoft.com, ytstatic.l.google.com, go.microsoft.com, js.bizographics.edgekey.net, www.googletagmanager.com, audownload.windowsupdate.nsatc.net, bat.bing.com, www.google.com, www.gstatic.com, bsnl.eyeblaster.akadns.net, www.google-analytics.com, www-google-analytics.l.google.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, dual-a-0001.a-msedge.net, www-googletagmanager.l.google.com, e15071.dscd.akamaiedge.net, ctldl.windowsupdate.com, c-0001.c-msedge.net, e881.p.akamaiedge.net, youtube-ui.l.google.com, e13541.x.akamaiedge.net, bat-bing-com.a-0001.a-msedge.net, au.au-msedge.net, play.google.com, wildcard.licdn.com.edgekey.net, go.microsoft.com.edgekey.net, sb.scorecardresearch.com.edgekey.net, secure-ds.serving-sys.com.edgekey.net, bs.eyeblaster.akadns.net, au.c-0001.c-msedge.net, cs9.wpc.v0cdn.net
  • Report size getting too big, too many NtCreateFile calls found.
  • Report size getting too big, too many NtDeviceIoControlFile calls found.

Detection

StrategyScoreRangeReportingWhitelistedDetection
Threshold10 - 100falseclean

Confidence

StrategyScoreRangeFurther Analysis Required?Confidence
Threshold40 - 5false
ConfidenceConfidence


Classification

Analysis Advice

Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis



Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and Control
Valid AccountsWindows Remote ManagementWinlogon Helper DLLPort MonitorsFile System Logical OffsetsCredential DumpingFile and Directory Discovery1Application Deployment SoftwareData from Local SystemData Encrypted1Standard Cryptographic Protocol2
Replication Through Removable MediaService ExecutionPort MonitorsAccessibility FeaturesBinary PaddingNetwork SniffingApplication Window DiscoveryRemote ServicesData from Removable MediaExfiltration Over Other Network MediumStandard Non-Application Layer Protocol2
Drive-by CompromiseWindows Management InstrumentationAccessibility FeaturesPath InterceptionRootkitInput CaptureQuery RegistryWindows Remote ManagementData from Network Shared DriveAutomated ExfiltrationStandard Application Layer Protocol2

Signature Overview

Click to jump to signature section


Phishing:

barindex
Found iframesShow sources
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=0&oref=e&r=aa9-n0dcalimultqdszojnqtjfgyw3vq8m39x0pffgy6fag8_-_1dqci8wlcdsg4ufj3gd5_musopcy2oxyvprwqwckx2resvw9w3woqv3dfaxijmglapcz1u3qrbekdqadvg3qmlv5d7ajikrylyxxx6qbp4grpv7wn4be6wyw91kj9apncqf8i82dfo7hebmvgpfkp9gvetuqex3r2p3ww&sm=1#HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=0&oref=e&r=aa9-n0dcalimultqdszojnqtjfgyw3vq8m39x0pffgy6fag8_-_1dqci8wlcdsg4ufj3gd5_musopcy2oxyvprwqwckx2resvw9w3woqv3dfaxijmglapcz1u3qrbekdqadvg3qmlv5d7ajikrylyxxx6qbp4grpv7wn4be6wyw91kj9apncqf8i82dfo7hebmvgpfkp9gvetuqex3r2p3ww&sm=1#HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQblAUAAAAAHIxpoTyzyKHd_2AbdDjSGcyhHSJ&co=aHR0cHM6Ly93d3cuZHJvcGJveC5jb206NDQz&hl=en&v=v1566858990656&size=invisible&sa=LOGIN&cb=asg4v23guukc
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=0&oref=e&r=aa9-n0dcalimultqdszojnqtjfgyw3vq8m39x0pffgy6fag8_-_1dqci8wlcdsg4ufj3gd5_musopcy2oxyvprwqwckx2resvw9w3woqv3dfaxijmglapcz1u3qrbekdqadvg3qmlv5d7ajikrylyxxx6qbp4grpv7wn4be6wyw91kj9apncqf8i82dfo7hebmvgpfkp9gvetuqex3r2p3ww&sm=1#HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQblAUAAAAAHIxpoTyzyKHd_2AbdDjSGcyhHSJ&co=aHR0cHM6Ly93d3cuZHJvcGJveC5jb206NDQz&hl=en&v=v1566858990656&size=invisible&sa=REGISTER&cb=fts5vuzde5xh
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0&oref=e&r=AA9-N0dCaLiMultqDSzOJnQtJfGYW3Vq8m39X0pfFgY6FAG8_-_1dQCI8wlcDSg4uFj3Gd5_MUsopCy2OXyvPrwqWCkX2REsvW9W3wOqV3dfAXIJMglAPCZ1u3qRbekdqADvg3QMlV5D7AJiKrYlyxxx6qBP4GRPv7WN4bE6wYw91Kj9apNCqF8i82DfO7HeBmVgpfkP9gvetUQEx3R2P3ww&sm=1HTTP Parser: Iframe src: https://dropboxcaptcha.com
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0&oref=e&r=AA9-N0dCaLiMultqDSzOJnQtJfGYW3Vq8m39X0pfFgY6FAG8_-_1dQCI8wlcDSg4uFj3Gd5_MUsopCy2OXyvPrwqWCkX2REsvW9W3wOqV3dfAXIJMglAPCZ1u3qRbekdqADvg3QMlV5D7AJiKrYlyxxx6qBP4GRPv7WN4bE6wYw91Kj9apNCqF8i82DfO7HeBmVgpfkP9gvetUQEx3R2P3ww&sm=1HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQblAUAAAAAHIxpoTyzyKHd_2AbdDjSGcyhHSJ&co=aHR0cHM6Ly93d3cuZHJvcGJveC5jb206NDQz&hl=en&v=v1566858990656&size=invisible&sa=LOGIN&cb=xj9z2pvy1g3u
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0&oref=e&r=AA9-N0dCaLiMultqDSzOJnQtJfGYW3Vq8m39X0pfFgY6FAG8_-_1dQCI8wlcDSg4uFj3Gd5_MUsopCy2OXyvPrwqWCkX2REsvW9W3wOqV3dfAXIJMglAPCZ1u3qRbekdqADvg3QMlV5D7AJiKrYlyxxx6qBP4GRPv7WN4bE6wYw91Kj9apNCqF8i82DfO7HeBmVgpfkP9gvetUQEx3R2P3ww&sm=1HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQblAUAAAAAHIxpoTyzyKHd_2AbdDjSGcyhHSJ&co=aHR0cHM6Ly93d3cuZHJvcGJveC5jb206NDQz&hl=en&v=v1566858990656&size=invisible&sa=REGISTER&cb=e3366737u0lt
META author tag missingShow sources
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=0&oref=e&r=aa9-n0dcalimultqdszojnqtjfgyw3vq8m39x0pffgy6fag8_-_1dqci8wlcdsg4ufj3gd5_musopcy2oxyvprwqwckx2resvw9w3woqv3dfaxijmglapcz1u3qrbekdqadvg3qmlv5d7ajikrylyxxx6qbp4grpv7wn4be6wyw91kj9apncqf8i82dfo7hebmvgpfkp9gvetuqex3r2p3ww&sm=1#HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0&oref=e&r=AA9-N0dCaLiMultqDSzOJnQtJfGYW3Vq8m39X0pfFgY6FAG8_-_1dQCI8wlcDSg4uFj3Gd5_MUsopCy2OXyvPrwqWCkX2REsvW9W3wOqV3dfAXIJMglAPCZ1u3qRbekdqADvg3QMlV5D7AJiKrYlyxxx6qBP4GRPv7WN4bE6wYw91Kj9apNCqF8i82DfO7HeBmVgpfkP9gvetUQEx3R2P3ww&sm=1HTTP Parser: No <meta name="author".. found
META copyright tag missingShow sources
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=0&oref=e&r=aa9-n0dcalimultqdszojnqtjfgyw3vq8m39x0pffgy6fag8_-_1dqci8wlcdsg4ufj3gd5_musopcy2oxyvprwqwckx2resvw9w3woqv3dfaxijmglapcz1u3qrbekdqadvg3qmlv5d7ajikrylyxxx6qbp4grpv7wn4be6wyw91kj9apncqf8i82dfo7hebmvgpfkp9gvetuqex3r2p3ww&sm=1#HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0&oref=e&r=AA9-N0dCaLiMultqDSzOJnQtJfGYW3Vq8m39X0pfFgY6FAG8_-_1dQCI8wlcDSg4uFj3Gd5_MUsopCy2OXyvPrwqWCkX2REsvW9W3wOqV3dfAXIJMglAPCZ1u3qRbekdqADvg3QMlV5D7AJiKrYlyxxx6qBP4GRPv7WN4bE6wYw91Kj9apNCqF8i82DfO7HeBmVgpfkP9gvetUQEx3R2P3ww&sm=1HTTP Parser: No <meta name="copyright".. found

Networking:

barindex
Connects to many different domainsShow sources
Source: unknownNetwork traffic detected: DNS query count 44
Found strings which match to known social media urlsShow sources
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"1559459634097838\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\n\u003Cimg height=\"1\" width=\"1\" src=\"https:\/\/www.facebook.com\/tr?id=1559459634097838\u0026amp;ev=PageView\n\u0026amp;noscript=1\"\u003E\n\u003C\/noscript\u003E\n", equals www.facebook.com (Facebook)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"442728829472826\");fbq(\"set\",\"agent\",\"tmgoogletagmanager\",\"442728829472826\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=442728829472826\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n", equals www.facebook.com (Facebook)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E(function(){var b=window._fbq||(window._fbq=[]);if(!b.loaded){var a=document.createElement(\"script\");a.async=!0;a.src=\"\/\/connect.facebook.net\/en_US\/fbds.js\";var c=document.getElementsByTagName(\"script\")[0];c.parentNode.insertBefore(a,c);b.loaded=!0}})();window._fbq=window._fbq||[];window._fbq.push([\"track\",\"6022929658670\",{value:\"0.00\",currency:\"AUD\"}]);\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" alt=\"\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?ev=6022929658670\u0026amp;cd[value]=0.00\u0026amp;cd[currency]=AUD\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E", equals www.facebook.com (Facebook)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/javascript\"\u003Evar yahoo_conversion_id=1000167477,yahoo_conversion_label=\"D5biCIWxsFgQlsDJyQM\",yahoo_conversion_value=400;\u003C\/script\u003E\n\u003Cscript type=\"text\/javascript\" src=\"https:\/\/s.yimg.jp\/images\/listing\/tool\/cv\/conversion.js\"\u003E\u003C\/script\u003E\n\u003Cnoscript\u003E\n\u003Cdiv style=\"display:inline;\"\u003E\n\u003Cimg height=\"1\" width=\"1\" style=\"border-style:none;\" alt=\"\" src=\"https:\/\/b91.yahoo.co.jp\/pagead\/conversion\/1000167477\/?value=400\u0026amp;label=D5biCIWxsFgQlsDJyQM\u0026amp;guid=ON\u0026amp;script=0\u0026amp;disvt=true\"\u003E\n\u003C\/div\u003E\n\u003C\/noscript\u003E", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/javascript\"\u003Evar yahoo_conversion_id=1000167477,yahoo_conversion_label=\"JzOGCJCctVgQlsDJyQM\",yahoo_conversion_value=1E3;\u003C\/script\u003E\n\u003Cscript type=\"text\/javascript\" src=\"http:\/\/i.yimg.jp\/images\/listing\/tool\/cv\/conversion.js\"\u003E\u003C\/script\u003E\n\u003Cnoscript\u003E\n\u003Cdiv style=\"display:inline;\"\u003E\n\u003Cimg height=\"1\" width=\"1\" style=\"border-style:none;\" alt=\"\" src=\"http:\/\/b91.yahoo.co.jp\/pagead\/conversion\/1000167477\/?value=1000\u0026amp;label=JzOGCJCctVgQlsDJyQM\u0026amp;guid=ON\u0026amp;script=0\u0026amp;disvt=true\"\u003E\n\u003C\/div\u003E\n\u003C\/noscript\u003E", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\u003Cimg src=\"https:\/\/pclick.yahoo.com\/p\/s=1197784220\u0026amp;t=nQ7ZmG55s0\" width=\"1\" height=\"1\"\u003E\n\u003Cimg src=\"https:\/\/sp.analytics.yahoo.com\/spp.pl?a=1000543649509\u0026amp;.yp=28224\u0026amp;js=no\"\u003E", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\u003Cimg src=\"https:\/\/pclick.yahoo.com\/p\/s=1197784988\u0026amp;t=X27VWMC9KC\" width=\"1\" height=\"1\"\u003E", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\u003Cscript type=\"text\/gtmscript\" language=\"javascript\"\u003Evar yahoo_retargeting_id=\"0GPI4UYVBZ\",yahoo_retargeting_label=\"\";\u003C\/script\u003E \u003Cscript type=\"text\/gtmscript\" language=\"javascript\" data-gtmsrc=\"\/\/b92.yahoo.co.jp\/js\/s_retargeting.js\"\u003E\u003C\/script\u003E", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\u003Cscript type=\"text\/gtmscript\" language=\"javascript\"\u003Evar yahoo_ydn_conv_io=\"SW8sl6IOLDWW1Gb2VZtb\",yahoo_ydn_conv_label=\"TE8WG0AVJNKC36G79K0449657\",yahoo_ydn_conv_transaction_id=\"\",yahoo_ydn_conv_amount=\"0\";\u003C\/script\u003E \u003Cscript type=\"text\/gtmscript\" language=\"javascript\" charset=\"UTF-8\" data-gtmsrc=\"\/\/b90.yahoo.co.jp\/conv.js\"\u003E\u003C\/script\u003E", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_html":"\u003Cscript type=\"text\/gtmscript\"\u003E(function(){var a=window._fbq||(window._fbq=[]);if(!a.loaded){var b=document.createElement(\"script\");b.async=!0;b.src=\"\/\/connect.facebook.net\/en_US\/fbds.js\";var c=document.getElementsByTagName(\"script\")[0];c.parentNode.insertBefore(b,c);a.loaded=!0}a.push([\"addPixelId\",\"890364094317472\"])})();window._fbq=window._fbq||[];window._fbq.push([\"track\",\"PixelInitialized\",{}]);\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" alt=\"\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=890364094317472\u0026amp;ev=PixelInitialized\"\u003E\u003C\/noscript\u003E", equals www.facebook.com (Facebook)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_url":"\/\/b91.yahoo.co.jp\/pagead\/conversion\/1000167477\/?value=400\u0026amp;label=D5biCIWxsFgQlsDJyQM\u0026amp;guid=ON\u0026amp;script=0\u0026amp;disvt=true", equals www.yahoo.com (Yahoo)
Source: gtm[1].js.2.drString found in binary or memory: "vtp_url":"https:\/\/sp.analytics.yahoo.com\/spp.pl?a=1000543649509\u0026.yp=28225\u0026js=no", equals www.yahoo.com (Yahoo)
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=48l-xdS4pXg"> equals www.youtube.com (Youtube)
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=YlmVKT3Zvhw"> equals www.youtube.com (Youtube)
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ZdEIZNg3epQ"> equals www.youtube.com (Youtube)
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ggoJFaE71W8"> equals www.youtube.com (Youtube)
Source: tpxf4nq03[1].js.2.drString found in binary or memory: if (/Twitter for iPhone/.test(w.navigator.userAgent || '')) { equals www.twitter.com (Twitter)
Source: privacy[1].htm0.2.drString found in binary or memory: like an email address to receive updates about our services.</p><p>We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.</p><h2>Information we collect as you use our services</h2><h3>Your apps, browsers & devices</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg"/></div><p>We collect information about the apps, browsers, and <a class="g1mG8c" href="privacy#footnote-devices" data-name="devices" jsaction="click:IPbaae(preventDefault=true)">devices</a> you use to access Google services, which helps us provide features like automatic product updates and dimming your screen if your battery runs low.</p><p>The information we collect includes <a class="g1mG8c" href="privacy#footnote-unique-id" data-name="unique-id" jsaction="click:IPbaa
Source: NBILBHKT.js.2.drString found in binary or memory: "</li><li>"+(0,_.G)("Products that are integrated into third-party apps and sites, like ads and embedded Google Maps")+"</li></ul><p>"+(0,_.G)("You can use our services in a variety of ways to manage your privacy. For example, you can sign up for a Google Account if you want to create and manage content like emails and photos, or see more relevant search results. And you can use many Google services when you\u2019re signed out or without creating an account at all, like searching on Google or watching YouTube videos. You can also choose to browse the web privately using Chrome in Incognito mode. And across our services, you can adjust your privacy settings to control what we collect and how your information is used.")+ equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: "</li><li>"+(0,_.G)('<a href="https://kids.youtube.com/privacynotice">YouTube Kids</a>')+"</li><li>"+(0,_.G)('<a href="https://families.google.com/familylink/privacy/child-policy/">Google Accounts Managed with Family Link, for Children under 13 (or applicable age in your country)</a>')+"</li></ul><h2>"+(0,_.G)("Other useful resources")+"</h2><p>"+(0,_.G)("The following links highlight useful resources for you to learn more about our practices and privacy settings.")+"</p><ul><li>",s$=_.F3(L)+" "+ equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: "</p><p>",Ne={style:f},If=""+X5(_.zy({name:"useful-ads"},Ne),L),Sj=(0,_.N)(If),Tj=""+X5(_.zy({name:"people-online"},Ne),L),Uj=(0,_.N)(Tj),Vj="We collect information to provide better services to all our users \u2014 from figuring out basic stuff like which language you speak, to more complex things like which <a "+(_.Q(Sj)+">ads you\u2019ll find most useful</a>, <a "+(_.Q(Uj)+">the people who matter most to you online</a>, or which YouTube videos you might like. The information Google collects, and how that information is used, depends on how you use our services and how you manage your privacy controls.")); equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: "</p><p>",ZG='href="'+_.O(_.R(_.C3({url:"https://support.google.com/accounts?p=privpol_endorse"},L)))+'" '+Y5(),$G=(0,_.N)(ZG),aH="When you\u2019re signed in and interact with some Google services, like leaving comments on a YouTube video or reviewing a song in Play, your name and photo appear next to your activity. We may also display this information in <a "+(_.Q($G)+">ads depending on your Shared endorsements setting</a>.");var bH=(0,_.G)(aH);var Sx=YG+bH+"</p><h2>"+(0,_.G)("When Google shares your information")+ equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: "</p><p>",iG=_.F3(L)+" "+Y5(),dl=(0,_.N)(iG),jG="We also built a place for you to review and control information saved in your Google Account. Your <a "+(_.Q(dl)+">Google Account</a> includes:");var kG=(0,_.G)(jG);var lG=hG+kG+"</p><h3>"+(0,_.G)("Privacy controls")+"</h3>"+e6({title:(0,_.K)(""+(0,_.G)("Activity Controls")),body:(0,_.K)(""+(0,_.G)("Decide what types of activity you\u2019d like saved in your account. For example, you can turn on Location History if you want traffic predictions for your daily commute, or you can save your YouTube Watch History to get better video suggestions.")), equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: "</p><ul><li>"+(0,_.G)("Signed-out search personalization:")+" ",sG='href="'+_.O(_.R(_.C3({url:(0,_.M)("https://www.google."+_.Sy(L.Nc)+"/history/optout?utm_source=pp")},L)))+'" '+Y5(),tG=(0,_.N)(sG),Fn="<a "+_.Q(tG)+">Choose</a> whether your search activity is used to offer you more relevant results and recommendations.";var uG=(0,_.G)(Fn);var vG=rG+uG+"</li><li>"+(0,_.G)("YouTube settings:")+" ",wG='href="'+_.O(_.R(_.C3({url:(0,_.M)("https://www.youtube.com/feed/history/search_history?utm_source=pp")}, equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: "fQaiDJhICa4";break;case "de":kd+="P31DFowd2Lw";break;case "ko":kd+="nTN9HQgnlh8";break;case "nl":kd+="1LMk791j64M";break;case "ja":kd+="cVX10SMzNaM";break;default:kd+="ggoJFaE71W8"}var Lj=Hf+=d6({id:kd,style:f},L),le="<p>"+(0,_.G)("We build a range of services that help millions of people daily to explore and interact with the world in new ways. Our services include:")+"</p><ul><li>"+(0,_.G)("Google apps, sites, and devices, like Search, YouTube, and Google Home")+"</li><li>"+(0,_.G)("Platforms like the Chrome browser and Android operating system")+ equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: "html5_playready_enable_non_persist_license")&&(this.u.pst="0"));"fairplay"==this.i.flavor?(a=d.initData.subarray(4),a=String.fromCharCode.apply(null,new Uint16Array(a.buffer,a.byteOffset,a.byteLength/2)).replace("skd://","https://")):a=this.i.o;g.Q(this.l.experiments,"enable_shadow_yttv_channels")&&(a=new g.Mm(a),document.location.origin&&document.location.origin.includes("green")?g.Om(a,"web-green-qa.youtube.com"):g.Om(a,"www.youtube.com"),a=a.toString());e=a=this.F=a;var k=void 0===k?!1:k;At(bja.test(e), equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: "subreason")):c.nb(sM(c,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK","//www.youtube.com/supported_browsers"));else if(b=c.l.M().Sd,d="//support.google.com/youtube/?p=player_error1",b&&(d=g.Hf(d,{hl:b})),c.nb(sM(c,"GENERIC_WITH_LINK_AND_CPN",d,!0)),a.Y&&!a.i)for(a=(0,g.x)(c.F,c),b=c.element.getElementsByTagName("a"),d=0;d<b.length;d++)e=c.K(b[d],"click",a),c.C.push(e);this.o.show()}else this.o&&(this.o.dispose(),this.o=null)}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: $y.prototype.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=cz(this);d&&"www.youtube.com"==c?d="https://youtu.be/"+a:g.Yy(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,lq&&(a=xp())&&(b.ebc=a));return g.Hf(d,b)}; equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: (_.Q(Cs)+">algorithms</a> to recognize patterns in data. For example, Google Translate helps people communicate across languages by detecting common language patterns in phrases you ask it to translate."));var Es=(0,_.G)(Ds);var Fs=ys+Es+"</p><p>",En={style:f},Gs=""+X5(_.zy({name:"combine-info"},En),L),Hs=(0,_.N)(Gs),Is=""+X5(_.zy({name:"other-sites"},En),L),Js=(0,_.N)(Is),bl="We may <a "+(_.Q(Hs)+">combine the information we collect</a> among our services and across your devices for the purposes described above. For example, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, <a "+ equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: (_.Q(Z9)+">affiliates</a>, including YouTube, Android, and services offered on third-party sites, such as advertising services. This Privacy Policy doesn\u2019t apply to services that have separate privacy policies that do not incorporate this Privacy Policy.");var a$=(0,_.G)($9);var b$=X9+a$+"</p><p>"+(0,_.G)("This Privacy Policy doesn\u2019t apply to:")+"</p><ul><li>"+(0,_.G)("The information practices of other companies and organizations that advertise our services")+"</li><li>"+(0,_.G)("Services offered by other companies or individuals, including products or sites that may include Google services, be displayed to you in search results, or be linked from our services")+ equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: (_.Q(ks)+">"+_.I(_.y4())+"</a></p>");var ls=(0,_.G)($k);e=is+ls}break;case "specific-partners":switch(d){case 1:var ms=e;var ns=(0,_.G)("specific partners");e=ms+ns;break;case 2:var os=e;var al="<p>For example, we allow YouTube creators and advertisers to work with measurement companies to learn about the audience of their YouTube videos or ads, using cookies or similar technologies. Another example is merchants on our shopping pages, who use cookies to understand how many different people see their product listings. "; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: (g.Om(b,"www.youtube.com"),c=b.toString()):c=Jt(c);b=new Nt(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: f[1].txt0.2.drString found in binary or memory: * As with any software that integrates with the Facebook platform, your use of equals www.facebook.com (Facebook)
Source: f[1].txt0.2.drString found in binary or memory: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. equals www.facebook.com (Facebook)
Source: f[1].txt0.2.drString found in binary or memory: * [http://developers.facebook.com/policy/]. This copyright notice shall be equals www.facebook.com (Facebook)
Source: f[1].txt0.2.drString found in binary or memory: * in connection with the web services and APIs provided by Facebook. equals www.facebook.com (Facebook)
Source: f[1].txt0.2.drString found in binary or memory: * this software is subject to the Facebook Platform Policy equals www.facebook.com (Facebook)
Source: pkg-business.min-vflm9Tqkc[1].js.2.drString found in binary or memory: //# sourceMappingURL=arbor_social_icon.min.js-vfloVVIi4.mapdefine(["require","exports","tslib","react","external/classnames","modules/clean/react/css","modules/clean/react/arbor/aspen/elements/arbor_social_icon"],function(e,t,o,i,s,a,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),i=o.__importDefault(i),s=o.__importDefault(s);var c=(function(e){function t(){return null!==e&&e.apply(this,arguments)||this}return o.__extends(t,e),t.prototype.renderIconListItem=function(e,t){var o,a=s.default((o={},o["social-icon-list-item--"+e.slug]=!!e.slug,o),"social-icon-list-item");return i.default.createElement("li",{key:e.socialName,className:a},i.default.createElement(r.ArborSocialIcon,{icon:e,showLabel:t}))},t.prototype.render=function(){for(var e=this.props,t=e.showLabel,o=e.vertical,a=[{imageSrc:"/static/images/arbor/aspen/icons/icons-fb-vflY59Xx8.svg",socialName:"Facebook",url:"http://www.facebook.com/dropbox"},{imageSrc:"/static/images/arbor/aspen/icons/icons-tw-vflyjHyN7.svg",socialName:"Twitter",url
Source: pkg-business.min-vflm9Tqkc[1].js.2.drString found in binary or memory: //# sourceMappingURL=arbor_social_icon.min.js-vfloVVIi4.mapdefine(["require","exports","tslib","react","external/classnames","modules/clean/react/css","modules/clean/react/arbor/aspen/elements/arbor_social_icon"],function(e,t,o,i,s,a,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),i=o.__importDefault(i),s=o.__importDefault(s);var c=(function(e){function t(){return null!==e&&e.apply(this,arguments)||this}return o.__extends(t,e),t.prototype.renderIconListItem=function(e,t){var o,a=s.default((o={},o["social-icon-list-item--"+e.slug]=!!e.slug,o),"social-icon-list-item");return i.default.createElement("li",{key:e.socialName,className:a},i.default.createElement(r.ArborSocialIcon,{icon:e,showLabel:t}))},t.prototype.render=function(){for(var e=this.props,t=e.showLabel,o=e.vertical,a=[{imageSrc:"/static/images/arbor/aspen/icons/icons-fb-vflY59Xx8.svg",socialName:"Facebook",url:"http://www.facebook.com/dropbox"},{imageSrc:"/static/images/arbor/aspen/icons/icons-tw-vflyjHyN7.svg",socialName:"Twitter",url
Source: pkg-business.min-vflm9Tqkc[1].js.2.drString found in binary or memory: //# sourceMappingURL=arbor_social_icon.min.js-vfloVVIi4.mapdefine(["require","exports","tslib","react","external/classnames","modules/clean/react/css","modules/clean/react/arbor/aspen/elements/arbor_social_icon"],function(e,t,o,i,s,a,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),i=o.__importDefault(i),s=o.__importDefault(s);var c=(function(e){function t(){return null!==e&&e.apply(this,arguments)||this}return o.__extends(t,e),t.prototype.renderIconListItem=function(e,t){var o,a=s.default((o={},o["social-icon-list-item--"+e.slug]=!!e.slug,o),"social-icon-list-item");return i.default.createElement("li",{key:e.socialName,className:a},i.default.createElement(r.ArborSocialIcon,{icon:e,showLabel:t}))},t.prototype.render=function(){for(var e=this.props,t=e.showLabel,o=e.vertical,a=[{imageSrc:"/static/images/arbor/aspen/icons/icons-fb-vflY59Xx8.svg",socialName:"Facebook",url:"http://www.facebook.com/dropbox"},{imageSrc:"/static/images/arbor/aspen/icons/icons-tw-vflyjHyN7.svg",socialName:"Twitter",url
Source: msapplication.xml0.1.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xdf5cd5b4,0x01d5691c</date><accdate>0xdf5cd5b4,0x01d5691c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xdf5cd5b4,0x01d5691c</date><accdate>0xdf762af1,0x01d5691c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xdfa7db4b,0x01d5691c</date><accdate>0xdfa7db4b,0x01d5691c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xdfa7db4b,0x01d5691c</date><accdate>0xdfad851d,0x01d5691c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xdfc43e45,0x01d5691c</date><accdate>0xdfc43e45,0x01d5691c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.drString found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xdfc43e45,0x01d5691c</date><accdate>0xdfc6c73b,0x01d5691c</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=48l-xdS4pXg" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=YlmVKT3Zvhw" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=ZdEIZNg3epQ" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=ggoJFaE71W8" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: Ama=function(){if(!zX){zX=new Lo;var a=Op("client_streamz_web_flush_count",-1);-1!==a&&(zX.o=a);a=Op("client_streamz_web_flush_interval_seconds",-1);-1!==a&&(zX.flushInterval=1E3*a)}this.g=zX;this.g.A("/client_streamz/youtube/video_ads/visibility_error",{Uu:3,Tu:"element_name"},{Uu:3,Tu:"error_reason"})}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: DP=function(a,b){var c=a.l.M(),d=2==a.l.getPresentingPlayerType(),e=!d||b.isListed;e=!c.D&&!!b.videoId&&e;"play"!=c.playerStyle?c="https://support.google.com/youtube/?p=report_playback":(c={contact_type:"playbackissue",html5:1,ei:b.eventId,v:b.videoId,p:"movies_playback"},b.ya&&(c.fmt=ov(b.ya)),b.clientPlaybackNonce&&(c.cpn=b.clientPlaybackNonce),b.le&&(c.partnerid=b.le),c=g.Hf("//support.google.com/googleplay/",c));g.SC(a.o,e&&b.allowEmbed);g.SC(a.A,e);g.SC(a.u,e&&!b.sa);a.T.nb(c,"href");g.SC(a.C, equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: ED.prototype.C=function(a){var b=this.g.Xa,c=this.g.videoData,d={ns:b.N,el:QB(c),eurl:b.Ea,fmt:c.ya?ov(c.ya):0,html5:1,list:c.playlistId,cpn:c.clientPlaybackNonce,ei:c.eventId,ps:b.playerStyle,noflv:1,st:this.g.g(),video_id:c.videoId,metric:a};TB(c)&&(d.autoplay="1");"heartbeat"==a&&(d.tpmt=oD(this.i));g.Ta(d,b.deviceParams);JD(this,g.Hf(g.Q(b.experiments,"cardio_base_url_killswitch")?(b.g?b.protocol+"://www.youtube.com/":b.A)+"live_204":b.A+"live_204",d))}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: Et=function(a){var b=void 0===b?!1:b;return At(ffa.test(a),a,b,"Google/YouTube Brand Lift URL")}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: Fga=function(a,b,c){for(var d in b)for(var e=g.p(b[d]),f=e.next();!f.done;f=e.next()){f=f.value;if(!f.l)return;for(var k in f.l){if(!Dz[k])return;for(var l=g.p(Dz[k]),m=l.next();!m.done;m=l.next())m=m.value,a.i[m]=a.i[m]||new wz(k,m,f.l[k],a.u),a.o[k]=a.o[k]||{},a.o[k][f.mimeType]=!0}}fq()&&(a.i["com.youtube.fairplay"]=new wz("fairplay","com.youtube.fairplay","",a.u),a.o.fairplay={"audio/mp4":!0,"video/mp4":!0});a.g=zga(c,a.Jk).filter(function(n){return!!a.i[n]})}; equals www.youtube.com (Youtube)
Source: remote[1].js.2.drString found in binary or memory: G:"ytp-mdx-popup-dialog",L:{role:"dialog"},J:[{B:"div",G:"ytp-mdx-popup-dialog-inner-content",J:[{B:"div",G:"ytp-mdx-popup-title",U:"You're signed out"},{B:"div",G:"ytp-mdx-popup-description",U:"Videos you watch may be added to the TV's watch history and influence TV recommendations. To avoid this, cancel and sign in to YouTube on your computer."},{B:"div",G:"ytp-mdx-privacy-popup-buttons",J:[{B:"button",V:["ytp-button","ytp-mdx-privacy-popup-cancel"],U:"Cancel"},{B:"button",V:["ytp-button","ytp-mdx-privacy-popup-confirm"], equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: Haa=function(){var a=_.xa(_.zc(_.Ac("https://www.youtube.com/iframe_api"))),b={},c=b.document||document,d=_.Jc(a),e=document.createElement("SCRIPT"),f={Vq:e,Fi:void 0},g=new _.eg(Faa,f),h=null,l=null!=b.timeout?b.timeout:5E3;0<l&&(h=window.setTimeout(function(){G6(e,!0);g.yc(new H6(1,"Timeout reached for loading script "+d))},l),f.Fi=h);e.onload=e.onreadystatechange=function(){e.readyState&&"loaded"!=e.readyState&&"complete"!=e.readyState||(G6(e,b.LC||!1,h),g.hb(null))};e.onerror=function(){G6(e, equals www.youtube.com (Youtube)
Source: VLYFRQVP.htm.2.drString found in binary or memory: InitReact.mountComponent(mod, {"module_name": "modules/clean/react/arbor/aspen/elements/arbor_footer", "props": {"content": [{"section": "Dropbox", "links": [{"href": "/install", "label": "Desktop app"}, {"href": "/mobile", "label": "Mobile apps"}, {"href": "/plans?trigger=homepagefoot", "label": "Plans"}, {"href": "/security", "label": "Security"}, {"href": "/features?trigger=footer", "label": "Features"}]}, {"section": "Company", "links": [{"href": "/about", "label": "About us"}, {"href": null, "label": null}, {"href": "https://bit.ly/dbxdotcomapps", "label": "Jobs"}, {"href": "/news", "label": "Press"}, {"href": "https://investors.dropbox.com/", "label": "Investor relations"}, {"href": "https://blogs.dropbox.com/dropbox", "label": "Blog"}]}, {"section": "Support", "links": [{"href": "/help", "label": "Help Center"}, {"href": "/contact", "label": "Contact us"}, {"href": "/terms/cookies", "label": "Cookies"}, {"href": "/privacy", "label": "Privacy \u0026 terms"}, {"href": null, "label": null}, {"href": "/site
Source: VLYFRQVP.htm.2.drString found in binary or memory: InitReact.mountComponent(mod, {"module_name": "modules/clean/react/arbor/aspen/elements/arbor_footer", "props": {"content": [{"section": "Dropbox", "links": [{"href": "/install", "label": "Desktop app"}, {"href": "/mobile", "label": "Mobile apps"}, {"href": "/plans?trigger=homepagefoot", "label": "Plans"}, {"href": "/security", "label": "Security"}, {"href": "/features?trigger=footer", "label": "Features"}]}, {"section": "Company", "links": [{"href": "/about", "label": "About us"}, {"href": null, "label": null}, {"href": "https://bit.ly/dbxdotcomapps", "label": "Jobs"}, {"href": "/news", "label": "Press"}, {"href": "https://investors.dropbox.com/", "label": "Investor relations"}, {"href": "https://blogs.dropbox.com/dropbox", "label": "Blog"}]}, {"section": "Support", "links": [{"href": "/help", "label": "Help Center"}, {"href": "/contact", "label": "Contact us"}, {"href": "/terms/cookies", "label": "Cookies"}, {"href": "/privacy", "label": "Privacy \u0026 terms"}, {"href": null, "label": null}, {"href": "/site
Source: VLYFRQVP.htm.2.drString found in binary or memory: InitReact.mountComponent(mod, {"module_name": "modules/clean/react/arbor/aspen/elements/arbor_footer", "props": {"content": [{"section": "Dropbox", "links": [{"href": "/install", "label": "Desktop app"}, {"href": "/mobile", "label": "Mobile apps"}, {"href": "/plans?trigger=homepagefoot", "label": "Plans"}, {"href": "/security", "label": "Security"}, {"href": "/features?trigger=footer", "label": "Features"}]}, {"section": "Company", "links": [{"href": "/about", "label": "About us"}, {"href": null, "label": null}, {"href": "https://bit.ly/dbxdotcomapps", "label": "Jobs"}, {"href": "/news", "label": "Press"}, {"href": "https://investors.dropbox.com/", "label": "Investor relations"}, {"href": "https://blogs.dropbox.com/dropbox", "label": "Blog"}]}, {"section": "Support", "links": [{"href": "/help", "label": "Help Center"}, {"href": "/contact", "label": "Contact us"}, {"href": "/terms/cookies", "label": "Cookies"}, {"href": "/privacy", "label": "Privacy \u0026 terms"}, {"href": null, "label": null}, {"href": "/site
Source: NBILBHKT.js.2.drString found in binary or memory: L)))+'" '+Y5(),xG=(0,_.N)(wG),yG='href="'+_.O(_.R(_.C3({url:(0,_.M)("https://www.youtube.com/feed/history?utm_source=pp")},L)))+'" '+Y5(),zG=(0,_.N)(yG),AG="Pause and delete your <a "+(_.Q(xG)+">YouTube Search History</a> and your <a "+(_.Q(zG)+">YouTube Watch History</a>."));var BG=(0,_.G)(AG);var CG=vG+BG+"</li><li>"+(0,_.G)("Ad Settings:")+" ",Gn='href="'+_.O(_.R(_.C3({url:(0,_.M)("https://adssettings.google.com/?utm_source=pp")},L)))+'" '+Y5(),DG=(0,_.N)(Gn),EG="<a "+_.Q(DG)+">Manage</a> your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads."; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: MM=function(a){if(!a.l){var b=(null!=nr(["requestFullscreen","webkitRequestFullscreen","mozRequestFullScreen","msRequestFullscreen"],document.body)?"Full screen is unavailable. $BEGIN_LINKLearn More$END_LINK":"Your browser doesn't support full screen. $BEGIN_LINKLearn More$END_LINK").split(/\$(BEGIN|END)_LINK/);a.l=new JM(a.o,{B:"div",V:["ytp-popup","ytp-generic-popup"],L:{role:"alert",tabindex:"0"},J:[b[0],{B:"a",L:{href:"https://support.google.com/youtube/answer/6276924",target:a.o.M().u},U:b[2]}, equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: Math.random()<g.R(this.experiments,"web_player_api_logging_fraction");this.T=!this.fa;this.ld=new Set;this.deviceHasDisplay=S(!0,a.deviceHasDisplay);this.xf=yy(this.xf,a.ismb);d=a;g.Ev(this.experiments,"html5_qoe_intercept")?d=g.Ev(this.experiments,"html5_qoe_intercept"):this.kl?(d=d.vss_host||"s.youtube.com",T(this,"www_for_videostats")&&"s.youtube.com"==d&&(d=Uy(this.A)||"www.youtube.com")):d="video.google.com";this.Pi=d;this.Ve(a);this.F=new by;g.J(this,this.F);this.C=this.g&&!T(this,"enable_svg_mode_on_embed_mobile"); equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: Oga=function(a,b,c,d,e){if(!(lq||jq()||fq()))return yq();var f=Nga(c),k=Nz(c);if(!k)return yq();c={};var l=(c.fairplay="https://youtube.com/api/drm/fps?ek=uninitialized",c),m;c=[];var n=[],q=[],t=g.R(a.experiments,"html5_hls_min_video_height"),v;for(v in k)if(!g.Q(a.experiments,"html5_disable_drm_hfr_1080")||"383"!=v&&"373"!=v){var y=g.p(k[v]);for(m=y.next();!m.done;m=y.next()){var B=m.value;if(B.width){if(!(B.height<t)){var C=k[B.audioItag];if(C&&(c.push(B),m="fairplay"==B.g?l:null,q.push(Rz(C,[B], equals www.youtube.com (Youtube)
Source: insight.min[1].js.2.drString found in binary or memory: PixelLogger=function(d){function a(){return a.__super__.constructor.apply(this,arguments)}__extends(a,d);a.https_path="https://px.ads.linkedin.com/insight_tag_errors.gif";a.log=function(b,c){var e,f;e=this.map_error_data(c,"&",encodeURIComponent);f=new Image(1,1);f.src=""+this.https_path+"?"+e;return f};return a}(BaseLogger); equals www.linkedin.com (Linkedin)
Source: www-embed-player[1].js.2.drString found in binary or memory: XH.prototype.Ea=function(){if(this.g.videoData.Ac){var a=this.g.videoData.Ac;dI(this,"drm-"+a.flavor);dI(this,"eme-"+(a.i?"final":yz(a)?"ms":"com.youtube.fairplay"==a.g?"ytfp":Bz(a)?"safarifp":"nonfinal"))}}; equals www.youtube.com (Youtube)
Source: sp[1].js.2.drString found in binary or memory: YAHOO.ywa.I13N.handleJSONResponse([ { projectId: 543649509, fpcv: "", piggybacks: [{"type":"img","url":"//bat.bing.com/action/0?ti=4012642&Ver=2"}, {"type":"js_script","url":"(function(w,d,t,r,u){var f,n,i;w[u]=w[u]||[],f=function(){var o={ti:\"4012642\"};o.q=w[u],w[u]=new UET(o),w[u].push(\"pageLoad\")},n=d.createElement(t),n.src=r,n.async=1,n.onload=n.onreadystatechange=function(){var s=this.readyState;s&&s!==\"loaded\"&&s!==\"complete\"||(f(),n.onload=n.onreadystatechange=null)},i=d.getElementsByTagName(t)[0],i.parentNode.insertBefore(n,i)})(window,document,\"script\",\"//bat.bing.com/bat.js\",\"uetq\");"}] }]) equals www.yahoo.com (Yahoo)
Source: NBILBHKT.js.2.drString found in binary or memory: _.I2=function(a,b){a=a||{};var c=a.id,d=b.lc;a=b.Ex;b=_.G;c&&!a?(a='<div class="'+_.O("M3GAob")+'"><div class="'+_.O("O3bgpc")+'">',d=(0,_.Hy)("https://www.youtube.com/embed/"+_.Ry(c)+"?rel=0&showinfo=0&theme=light&version=3&hl="+_.Ry(d)+"&cc_lang_pref="+_.Ry(d)+"&cc_load_policy=1&enablejsapi=1"),c=_.G,d=_.uy(d,_.ny)?d.Me():d instanceof _.Hc?_.Jc(d):"about:invalid#zSoyz",c=c('<iframe src="'+_.O(d)+'" allowfullscreen="allowfullscreen" class="'+(_.O("Ylcf5b")+'"></iframe>')),a=a+c+"</div></div>"):a= equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: _.a6=function(a,b){var c=a.id,d=a.uf,e="";switch(_.lb(c)?c.toString():c){case "useful-ads":switch(d){case 1:var f=e;var g=(0,_.G)("ads you\u2019ll find most useful");e=f+g;break;case 2:var h=e,l="",n='href="'+_.O(_.R(_.C3({url:"https://support.google.com/accounts?p=privpol_whyad"},b)))+'"',t=(0,_.N)(n),v='href="'+_.O(_.R(_.C3({url:"https://support.google.com/accounts?p=privpol_whyad"},b)))+'"',C=(0,_.N)(v);l+="<p>";var z="For example, if you watch videos about baking on YouTube, you may see more ads that relate to baking as you browse the web. We also may use your IP address to determine your approximate location, so that we can serve you ads for a nearby pizza delivery service if you search for \u201cpizza.\u201d Learn more <a "+ equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: _.y5({content:(0,_.K)(cl)}),YG=_.J2({id:"infosharing"})+b6({name:"fa9e0e90d1e7ec399dad9f3257a9bb63",first:!0,style:f},L)+"<h1>"+_.I(_.H4())+"</h1><h2>"+(0,_.G)("When you share your information")+"</h2><p>"+(0,_.G)("Many of our services let you share information with other people, and you have control over how you share. For example, you can share videos on YouTube publicly or you can decide to keep your videos private. Remember, when you share information publicly, your content may become accessible through search engines, including Google Search.")+ equals www.youtube.com (Youtube)
Source: f[1].txt0.2.drString found in binary or memory: _linkedin_data_partner_id=u.data.partner_id;u.data.linkedin.partner_id=u.data.partner_id;u.data.linkedin.order_id=u.data.order_id;u.data.linkedin.conv_value=u.data.order_total;u.data.linkedin.conv_currency=u.data.order_currency;_linkedin=u.clearEmptyKeys(u.data.linkedin);u.loader({"type":"script","src":u.data.base_url,"cb":null,"loc":"script","id":"utag_18","attrs":{}});utag.DB("send:18:COMPLETE");}};utag.o[loader].loader.LOAD(id);}("18","dropbox.main"));}catch(error){utag.DB(error);} equals www.linkedin.com (Linkedin)
Source: www-embed-player[1].js.2.drString found in binary or memory: a.g.g().g.D("/client_streamz/youtube/video_ads/visibility_error",c,f),0<k&&Math.random()<k)){k=["id","class","style","hidden","aria-hidden"];l=[];for(var m=b;m;){for(var n={tagName:m.tagName},q={},t=g.p(k),v=t.next();!v.done;v=t.next())v=v.value,m.hasAttribute(v)&&(q[v]=m.getAttribute(v));g.$b(q)||(n.attributes=q);l.push(n);m=m.parentElement}k=Ema(l);g.N(Error("vis_check_error_reason: "+f+", dump: "+k))}}}})(); equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: bz=function(a){a=Uy(a.A);return"www.youtube-nocookie.com"==a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: cz=function(a){return g.Sy(a)?"music.youtube.com":bz(a)}; equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: d like saved in your account. For example, you can turn on Location History if you want traffic predictions for your daily commute, or you can save your YouTube Watch History to get better video suggestions.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/activitycontrols?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-activitycontrols">Go to Activity Controls</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Ad settings</h3><p class="n8ZyWe">Manage your preferences about the ads shown to you on Google and on sites and apps that <a class="g1mG8c" href="privacy#footnote-partner" data-name="partner" jsaction="click:IPbaae(preventDefault=true)">partner with Google</a> to show ads. You can modify your interests, choose whether your personal information is used to make ads more relevant to you, and turn on or off certain advertising
Source: NBILBHKT.js.2.drString found in binary or memory: e=jk+kk}break;case "deliver-services":switch(d){case 1:var ci=e;var Kf=(0,_.G)("deliver our services");e=ci+Kf;break;case 2:var lk=e,Lf="",mk='href="'+_.O(_.R(_.C3({url:"https://support.google.com/photos?p=privpol_manage"},b)))+'"',nk=(0,_.N)(mk);Lf=Lf+"<p>Examples of how we use your information to deliver our services include:</p><ul><li>We use the IP address assigned to your device to send you the data you requested, such as loading a YouTube video</li><li>We use unique identifiers stored in cookies on your device to help us authenticate you as the person who should have access to your Google Account</li><li>Photos and videos you upload to Google Photos are used to help you create albums, animations, and other creations that you can share. <a "+ equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.Fd("ytp-svg-volume-animation-hider",this.o.element));this.u=null;this.Z=new RM;g.J(this,this.Z);this.N=new RM;g.J(this,this.N);this.da("click",this.fa);this.K(a,"appresize",this.fc);this.K(a,"onVolumeChange",this.ea);var d=null;c.I?g.Ci(this,g.AM(b.Wa(),this.element)):(d="Your browser doesn't support changing the volume. $BEGIN_LINKLearn More$END_LINK".split(/\$(BEGIN|END)_LINK/),d=new JM(a,{B:"span",V:["ytp-popup","ytp-generic-popup"],L:{tabindex:"0"},J:[d[0],{B:"a",L:{href:"https://support.google.com/youtube/?p=noaudio", equals www.youtube.com (Youtube)
Source: remote[1].js.2.drString found in binary or memory: g.h.Tr=g.Ia;g.h.W=function(){this.info("disposeInternal");g.ap(this.o);this.o=0;this.g&&(this.g.removeUpdateListener(this.A),this.g.removeMessageListener("urn:x-cast:com.google.youtube.mdx",this.u));this.g=null;c8.gb.W.call(this)}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.h.UC=function(a){if(this.ga())return this;this.R=a.status;a=a.responseText;a=(new DOMParser).parseFromString(a,"text/xml").getElementsByTagName("MPD")[0];this.F=1E3*tw(qw(a,"minimumUpdatePeriod"))||Infinity;if(!this.T){var b;a:{if(a.attributes)for(b=0;b<a.attributes.length;b++)if("http://youtube.com/yt/2012/10/10"==a.attributes[b].value){b=a.attributes[b].name.split(":")[1];break a}b=""}this.X=b}this.isLive=Infinity>this.F&&this.ma;this.ba=parseInt(qw(a,Pw(this,"earliestMediaSequence")),10)||0; equals www.youtube.com (Youtube)
Source: remote[1].js.2.drString found in binary or memory: g.h.W=function(){this.Tr("");a8.gb.W.call(this)};g.Ua(c8,a8);g.h=c8.prototype;g.h.Sr=function(a){if(this.g){if(this.g==a)return;b8(this,"Overriding cast sesison with new session object");this.g.removeUpdateListener(this.A);this.g.removeMessageListener("urn:x-cast:com.google.youtube.mdx",this.u)}this.g=a;this.g.addUpdateListener(this.A);this.g.addMessageListener("urn:x-cast:com.google.youtube.mdx",this.u);qsa(this)}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.h.clone=function(){var a=new Sm;a.i=this.i;this.g&&(a.g=this.g.clone(),a.Ba=this.Ba);return a};var Zm="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),qda=/\bocr\b/,en=0,dn={};var uda=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;kn.prototype.getPlayerType=function(){return""}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.h.createSession=function(a){var b=a.initData;if(this.g.i){var c=this.u.createSession();"com.youtube.fairplay"==this.g.g&&(b=jH(this,b));b=c.generateRequest(a.contentType,b);c=new gH(null,null,null,c,null);b.then(null,To((0,g.x)(c.ey,c,"t.generateRequest")));return c}if(yz(this.g)){c=new Uint8Array(270);for(a=0;135>a;a++)c[2*a]='<PlayReadyCDMData type="LicenseAcquisition"><LicenseAcquisition version="1.0" Proactive="true"></LicenseAcquisition></PlayReadyCDMData>'.charCodeAt(a);b=this.l.createSession("video/mp4", equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.h.getAvailablePlaybackRates=function(){var a=this.app.M();a.wa?(a=a.Sb[0],a="https://admin.youtube.com"==a||"https://viacon.corp.google.com"==a?joa:k_):a=[1];return a}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.h.jm=function(a){if(1==a.info.type)this.g||(a.i&&"http://youtube.com/streaming/otf/durations/112015"==a.i.uri&&Nfa(this,a.i),this.g=vv(a));else if(2==a.info.type)if(g.wv(this.info)){if(!this.index.Fb()&&(a=g.ru(uv(a),0,1936286840))){var b=[],c=Au(a);a=c.Ir.length;var d=c.Tn,e=c.Ir,f=c.Fk;c=this.indexRange.end+c.Xu+1;for(var k=0,l=0;l<a;l++){var m=f[l]/d,n=e[l];b.push(new Xt(l,k,m,NaN,"range/"+c+"-"+(c+n-1)));k+=m;c+=n}this.index.append(b)}}else if(2==this.info.containerType&&this.g&&(d=new Hu(new DataView(this.g.buffer)), equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.h.se=function(a,b){b=void 0===b?!1:b;if("missing-qualities"==a)return{B:"a",L:{href:"https://support.google.com/youtube/?p=missing_quality",target:this.l.M().u},U:"Missing options?"};if("inline-survey"==a)return"";var c=[bO(this,a)],d=this.l.getPreferredQuality();b||"auto"!=d||"auto"!=a||(c.push(" "),c.push(bO(this,this.A,["ytp-menu-label-secondary"])));return{B:"div",J:c}};g.r(cO,g.W);cO.prototype.fc=function(a){g.SC(this,this.A&&400<=a.width)}; equals www.youtube.com (Youtube)
Source: remote[1].js.2.drString found in binary or memory: g.h.zL=function(a,b){if(!this.ga())if(b){var c=$6(b);if(g.Oa(c)){var d=""+c.type;c=c.data||{};this.info("onYoutubeMessage_: "+d+" "+g.vm(c));switch(d){case "mdxSessionStatus":psa(this,c.screenId);break;default:b8(this,"Unknown youtube message: "+d)}}else b8(this,"Unable to parse message.")}else b8(this,"No data in message.")}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.uz=function(a){var b=cz(a);!T(a,"yt_embeds_disable_new_error_lozenge_url")&&vga.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: g.zB=function(a){return iB(a)&&a.cg?(a={},a.fairplay="https://youtube.com/api/drm/fps?ek=uninitialized",a):a.ya&&a.ya.l||null}; equals www.youtube.com (Youtube)
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.facebook.com/tr/?id=15 equals www.facebook.com (Facebook)
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: hx(a.details)),c&&"manifest.net.connect"==a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.P.clientPlaybackNonce+"&t="+(0,g.fr)(),(new gG(a,"manifest",function(f){b.Lf=!0;b.La("pathprobe",f)},function(f){return b.u.onError(f.errorCode,hx(f.details))})).send())}}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: if (!window['YT']) {var YT = {loading: 0,loaded: 0};}if (!window['YTConfig']) {var YTConfig = {'host': 'http://www.youtube.com'};}if (!YT.loading) {YT.loading = 1;(function(){var l = [];YT.ready = function(f) {if (YT.loaded) {f();} else {l.push(f);}};window.onYTReady = function() {YT.loaded = 1;for (var i = 0; i < l.length; i++) {try {l[i]();} catch (e) {}}};YT.setConfig = function(c) {for (var k in c) {if (c.hasOwnProperty(k)) {YTConfig[k] = c[k];}}};var a = document.createElement('script');a.type = 'text/javascript';a.id = 'www-widgetapi-script';a.src = 'https://s.ytimg.com/yts/jsbin/www-widgetapi-vflCIdNAN/www-widgetapi.js';a.async = true;var c = document.currentScript;if (c) {var n = c.nonce || c.getAttribute('nonce');if (n) {a.setAttribute('nonce', n);}}var b = document.getElementsByTagName('script')[0];b.parentNode.insertBefore(a, b);})();} equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: if(n=rw(b,"ContentProtection"))if(g.eq())if((q=n.attributes.schemeIdUri)&&"http://youtube.com/drm/2012/10/10"==q.value)for(q={},n=n.firstChild;null!=n;n=n.nextSibling)"yt:SystemURL"==n.nodeName&&(q[n.attributes.type.value]=n.textContent.trim());else q=null;else if((q=n.attributes.schemeIdUri)&&"http://youtube.com/drm/2012/10/10"==q.textContent)for(q={},n=n.firstChild;null!=n;n=n.nextSibling)"SystemURL"==n.localName&&"http://youtube.com/yt/2012/10/10"==n.namespaceURI&&(q[n.attributes.type.textContent]= equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: iha=function(a,b){var c=b||sB(a);if(a.ia&&!c){if(fB(a)&&(c=a.ia,!c.g["0"])){var d=new $v("0","fakesb",void 0,new Vv(0,0,0,void 0,void 0,"auto"),null,null,1);c.g["0"]=a.sa?new iw(new Nt("http://www.youtube.com/videoplayback"),d,"fake"):new Aw(new Nt("http://www.youtube.com/videoplayback"),d,new cv(0,0),new cv(0,0),0,NaN)}return Ega(hB(a),a.Oa.o,a.ia,a.Ac).then(a.Xr,void 0,a)}return yq()}; equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: ll find most useful</a>, <a class="g1mG8c" href="privacy#footnote-people-online" data-name="people-online" jsaction="click:IPbaae(preventDefault=true)">the people who matter most to you online</a>, or which YouTube videos you might like. The information Google collects, and how that information is used, depends on how you use our services and how you manage your privacy controls.</p><p>When you equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: ll find most useful</h3><p>For example, if you watch videos about baking on YouTube, you may see more ads that relate to baking as you browse the web. We also may use your IP address to determine your approximate location, so that we can serve you ads for a nearby pizza delivery service if you search for equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: ll keep a record of your request in order to help solve any issues you might be facing.</p><h3>Protect Google, our users, and the public</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg"/></div><p>We use information to help improve the <a class="g1mG8c" href="privacy#footnote-safety-reliability" data-name="safety-reliability" jsaction="click:IPbaae(preventDefault=true)">safety and reliability</a> of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Google, our users, or the public.</p><hr/><p>We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with things like customized search results, personalized ads, or other features tailored to how you use our services. And we analyze your content to help us <a class="g1mG8c" href="privacy#footnote-detect-abuse"
Source: privacy[1].htm0.2.drString found in binary or memory: ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).</p></div></div><div class="m9JGT xXnO1d"><div class="nrAB0c"><div id="products" class="ahbJ5"></div><h1>Related privacy practices</h1><h2>Specific Google services</h2><p>The following privacy notices provide additional information about some Google services:</p><ul><li><a href="https://www.google.com/chrome/intl/en/privacy.html">Chrome & the Chrome Operating System</a></li><li><a href="https://play.google.com/books/intl/en/privacy.html">Play Books</a></li><li><a href="https://payments.google.com/legaldocument?family=0.privacynotice&hl=en">Payments</a></li><li><a href="https://fiber.google.com/legal/privacy.html">Fiber</a></li><li><a href="https://fi.google.com/about/tos/#project-fi-privacy-notice">Google Fi</a></li><li><a href="https://www.google.com/work/apps/terms/education_privacy.html">G Suite for Education</a></li><li><a href="https://kids.youtube.com/privacynotice">YouTube Kids</a></li><li>
Source: www-embed-player[1].js.2.drString found in binary or memory: lu=function(a,b,c){this.g=a;this.uri=b||"http://youtube.com/streaming/metadata/segment/102015";this.o=void 0===c?null:c;this.i=ku(this,"Sequence-Number");this.D=ku(this,"Segment-Count");this.F=this.g["Segment-Durations-Ms"]||"";this.ingestionTime=ku(this,"Ingestion-Walltime-Us")/1E6;this.l=(ku(this,"First-Frame-Time-Us")+ku(this,"First-Frame-Uncertainty-Us"))/1E6;this.C=ku(this,"Target-Duration-Us")/1E6;this.A="T"==this.g["Stream-Finished"];this.u="T"==this.g.Streamable}; equals www.youtube.com (Youtube)
Source: www-widgetapi[1].js.2.drString found in binary or memory: m.D=function(a){a.id=this.h;a.channel="widget";a=ab(a);var b=this.b;var c=eb(this.a.src||"");b=0==c.indexOf("https:")?[c]:b.a?[c.replace("http:","https:")]:b.f?[c]:[c,c.replace("http:","https:")];if(this.a.contentWindow)for(c=0;c<b.length;c++)try{this.a.contentWindow.postMessage(a,b[c])}catch(d){if(d.name&&"SyntaxError"==d.name)kb(d,"WARNING");else throw d;}else console&&console.warn&&console.warn("The YouTube player is not attached to the DOM. API calls should be made after the onReady event. See more: https://developers.google.com/youtube/iframe_api_reference#Events")};function Hb(a){return(0==a.search("cue")||0==a.search("load"))&&"loadModule"!=a} equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: n_.TOO_MANY_REQUESTS="Please log in to watch this video.",n_.TOO_MANY_REQUESTS_WITH_LINK="Please $BEGIN_LINKclick here$END_LINK to watch this video on YouTube.",n_.TOO_MANY_STREAMS_PER_USER="Playback stopped because too many videos belonging to the same account are playing.",n_.TOO_MANY_STREAMS_PER_ENTITLEMENT="Playback stopped because this video has been played on too many devices.",n_.UNSUPPORTED_DEVICE="Playback isn't supported on this device.",n_.VIDEO_FORBIDDEN="Access to this video is forbidden.", equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: oM=function(a){var b=a.M(),c=b.i;if(c){var d=new gM(a);b={B:"div",V:["ytp-error","ytp-related-on-error"],L:{role:"alert"},J:[{B:"div",G:"ytp-error-content",J:[{B:"div",G:"ytp-error-icon-container",J:[yL()]},{B:"div",G:"ytp-error-content-wrap",J:[{B:"div",G:"ytp-error-content-wrap-reason",U:"{{content}}"},{B:"div",G:"ytp-error-content-wrap-subreason",U:"{{subreason}}"}]}]},{B:"div",G:"ytp-small-redirect",J:[{B:"a",G:"ytp-small-redirect-link",L:{href:g.uz(b),target:b.u,"aria-label":"Visit YouTube to search for more videos"}, equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: re signed in and interact with some Google services, like leaving comments on a YouTube video or reviewing a song in Play, your name and photo appear next to your activity. We may also display this information in <a href="https://support.google.com/accounts?p=privpol_endorse" class="XddVQ" target="_blank">ads depending on your Shared endorsements setting</a>.</p><h2>When Google shares your information</h2><p>We do not share your personal information with companies, organizations, or individuals outside of Google except in the following cases:</p><h3>With your consent</h3><p>We equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: re signed in to a Google Account, including:</p><ul><li>Browser settings: For example, you can configure your browser to indicate when Google has set a <a class="g1mG8c" href="privacy#footnote-cookies-and-similar-technologies" data-name="cookies-and-similar-technologies" jsaction="click:IPbaae(preventDefault=true)">cookie</a> in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. But remember that our services <a class="g1mG8c" href="privacy#footnote-rely-on-cookies" data-name="rely-on-cookies" jsaction="click:IPbaae(preventDefault=true)">rely on cookies to function properly</a>, for things like remembering your language preferences.</li><li>Device-level settings: Your device may have controls that determine what information we collect. For example, you can <a href="https://support.google.com/websearch?p=privpol_locserp" class="XddVQ" target="_blank">modify location settings</a> on your Android device.</li></ul></div></div><div class=" xXnO1d"><div clas
Source: privacy[1].htm0.2.drString found in binary or memory: re signed out or without creating an account at all, like searching on Google or watching YouTube videos. You can also choose to browse the web privately using Chrome in Incognito mode. And across our services, you can adjust your privacy settings to control what we collect and how your information is used.</p><p>To help explain things as clearly as possible, we equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: re signed out, you can manage information associated with your browser or device, including:</p><ul><li>Signed-out search personalization: <a href="https://www.google.com/history/optout?utm_source=pp" class="XddVQ" target="_blank">Choose</a> whether your search activity is used to offer you more relevant results and recommendations.</li><li>YouTube settings: Pause and delete your <a href="https://www.youtube.com/feed/history/search_history?utm_source=pp" class="XddVQ" target="_blank">YouTube Search History</a> and your <a href="https://www.youtube.com/feed/history?utm_source=pp" class="XddVQ" target="_blank">YouTube Watch History</a>.</li><li>Ad Settings: <a href="https://adssettings.google.com/?utm_source=pp" class="XddVQ" target="_blank">Manage</a> your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads.</li></ul><h2>Exporting, removing & deleting your information</h2><p>You can export a copy of content in your Google Account if you want to back it up
Source: privacy[1].htm0.2.drString found in binary or memory: re using an <a class="g1mG8c" href="privacy#footnote-android-device" data-name="android-device" jsaction="click:IPbaae(preventDefault=true)">Android device with Google apps</a>, your device periodically contacts Google servers to provide information about your device and connection to our services. This information includes things like your device type, carrier name, crash reports, and which apps you've installed.</p><h3>Your activity</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg"/></div><p>We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:</p><ul><li>Terms you search for</li><li>Videos you watch</li><li><a class="g1mG8c" href="privacy#footnote-content-views" data-name="content-views" jsaction="click:IPbaae(preventDefault=true)">Views and interactions with content and ads</a></li><li>Voice and a
Source: f[1].txt0.2.drString found in binary or memory: return u.isEmptyObject(am_data)?undefined:am_data;};u.map={"fb_event:CompleteRegistration":"CompleteRegistration","fb_event:ViewContent":"ViewContent","fb_event:AddToCart":"AddToCart","page_type:CompleteRegistration":"CompleteRegistration","page_type:ViewContent":"ViewContent","page_type:AddToCart":"AddToCart","fb_value":"vc.value,reg.value","tealium_event:addBillingSuccess":"AddPaymentInfo"};u.extend=[function(a,b){try{if(/\/verify$/i.test(b['dom.pathname'])||/^\/third_party_signup/i.test(b['dom.pathname'])){b['fb_event']='ViewContent';b['fb_value']='1'}}catch(e){utag.DB(e)}}];u.send=function(a,b){if(u.ev[a]||u.ev.all!==undefined){utag.DB("send:169");utag.DB(b);var c,d,e,f,g,h,i,amObj,evt=[];u.data={"qsp_delim":"&","kvp_delim":"=","base_url":"https://connect.facebook.net/en_US/fbevents.js","cust_pixel":"505351543331318","conv_pixel":"","page_view":"true","calc_items":"true","default_event":"None","adv_match":"false","track_single":"true","disablePushState":"","custom_data":{},"custom_event":"","product_id":[]
Source: f[1].txt0.2.drString found in binary or memory: return u.isEmptyObject(am_data)?undefined:am_data;};u.map={"fb_event:Lead":"Lead","fb_content_name":"lead.content_name"};u.extend=[function(a,b){try{if((typeof b['dom.referrer']!='undefined'&&/pro\/try|buy\/professional/.test(b['dom.referrer'])&&/showcases|smart_sync_setting|enjoy/.test(b['dom.url']))){b['fb_event']='Lead';b['fb_content_name']='pro_trial_start'}}catch(e){utag.DB(e)}}];u.send=function(a,b){if(u.ev[a]||u.ev.all!==undefined){var c,d,e,f,g,h,i,amObj,evt=[];u.data={"qsp_delim":"&","kvp_delim":"=","base_url":"https://connect.facebook.net/en_US/fbevents.js","cust_pixel":"247157135986338","conv_pixel":"","page_view":"true","calc_items":"true","default_event":"None","adv_match":"false","track_single":"true","custom_data":{},"custom_event":"","product_id":[],"product_name":[],"product_category":[],"product_unit_price":[],"product_quantity":[],"evt_list":[],"ecom":{}};for(c=0;c<u.extend.length;c++){try{d=u.extend[c](a,b);if(d==false)return}catch(e){}};c=[];for(d in utag.loader.GV(u.map)){if(b[d]!==undefi
Source: f[1].txt0.2.drString found in binary or memory: return u.isEmptyObject(am_data)?undefined:am_data;};u.map={"fb_event:add_payment_info":"AddPaymentInfo","fb_event:start_trial":"StartTrial"};u.extend=[function(a,b){try{if(b['dom.pathname'].toString().toLowerCase().indexOf('/business/billing'.toLowerCase())>-1){b['fb_event']='add_payment_info'}}catch(e){utag.DB(e)}},function(a,b){try{if(b['dom.pathname'].toString().toLowerCase().indexOf('/team/setup/team_info'.toLowerCase())>-1){b['fb_event']='start_trial'}}catch(e){utag.DB(e)}}];u.send=function(a,b){if(u.ev[a]||u.ev.all!==undefined){utag.DB("send:48");utag.DB(b);var c,d,e,f,g,h,i,amObj,evt=[];u.data={"qsp_delim":"&","kvp_delim":"=","base_url":"https://connect.facebook.net/en_US/fbevents.js","cust_pixel":"329181751193634","conv_pixel":"2.0","page_view":"true","calc_items":"true","default_event":"None","adv_match":"false","track_single":"true","custom_data":{},"custom_event":"","product_id":[],"product_name":[],"product_category":[],"product_unit_price":[],"product_quantity":[],"evt_list":[],"ecom":{}};for(c=0;
Source: privacy[1].htm0.2.drString found in binary or memory: s <a href="technologies/retention">data retention periods</a>, including how long it takes us to delete your information.</p><p>We try to ensure that our services protect information from accidental or malicious deletion. Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="enforcement" class="ahbJ5"></div><div class="pjyxF m2dIJf"><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg"/></div><h1>Compliance &amp; cooperation with regulators</h1><p>We regularly review this Privacy Policy and make sure that we process your information in ways that comply with it.</p><h2>Data transfers</h2><p>We maintain <a class="g1mG8c" href="privacy#footnote-servers" data-name="servers" jsaction="click:IPbaae(preventDefault=true)">servers around the world</a> and your information may be processed on servers located outside of t
Source: privacy[1].htm0.2.drString found in binary or memory: s Search engine may index that article and display it to other people if they search for your name. We may also collect information about you from trusted partners, including marketing partners who provide us with information about potential customers of our business services, and security partners who provide us with information to <a class="g1mG8c" href="privacy#footnote-against-abuse" data-name="against-abuse" jsaction="click:IPbaae(preventDefault=true)">protect against abuse</a>. We also receive information from advertisers to provide <a class="g1mG8c" href="privacy#footnote-ad-services" data-name="ad-services" jsaction="click:IPbaae(preventDefault=true)">advertising and research services on their behalf</a>.</p><p>We use various technologies to collect and store information, including <a class="g1mG8c" href="privacy#footnote-cookies-and-similar-technologies" data-name="cookies-and-similar-technologies" jsaction="click:IPbaae(preventDefault=true)">cookies</a>, <a class="g1mG8c" href="privacy#footnote-pixel
Source: privacy[1].htm0.2.drString found in binary or memory: t covered in this Privacy Policy.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infochoices" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Your privacy controls</h1><p class="vxK8q">You have choices regarding the information we collect and how it's used</p><p>This section describes key controls for managing your privacy across our services. You can also visit the <a href="https://myaccount.google.com/privacycheckup?utm_source=pp" class="XddVQ" target="_blank">Privacy Checkup</a>, which provides an opportunity to review and adjust important privacy settings. In addition to these tools, we also offer specific privacy settings in our products equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: t follow the correct process. Learn more in our <a href="https://transparencyreport.google.com/user-data/overview">Transparency Report</a>.</p><div id="footnote-trends" class="ahbJ5"></div><h3>show trends</h3><p>When lots of people start searching for something, it can provide useful information about particular trends at that time. Google Trends samples Google web searches to estimate the popularity of searches over a certain period of time and shares those results publicly in aggregated terms. <a href="https://support.google.com/trends?p=privpol_about">Learn more</a></p><div id="footnote-specific-partners" class="ahbJ5"></div><h3>specific partners</h3><p>For example, we allow YouTube creators and advertisers to work with measurement companies to learn about the audience of their YouTube videos or ads, using cookies or similar technologies. Another example is merchants on our shopping pages, who use cookies to understand how many different people see their product listings. <a href="privacy/google-partners">L
Source: privacy[1].htm0.2.drString found in binary or memory: t reveal information about individual people.</p><div id="footnote-deliver-services" class="ahbJ5"></div><h3>deliver our services</h3><p>Examples of how we use your information to deliver our services include:</p><ul><li>We use the IP address assigned to your device to send you the data you requested, such as loading a YouTube video</li><li>We use unique identifiers stored in cookies on your device to help us authenticate you as the person who should have access to your Google Account</li><li>Photos and videos you upload to Google Photos are used to help you create albums, animations, and other creations that you can share. <a href="https://support.google.com/photos?p=privpol_manage">Learn more</a></li><li>A flight confirmation email you receive may be used to create a equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: this.protocol=0==this.Db.indexOf("http:")?"http":"https";this.A=Bt(a.BASE_YT_URL||"")||Bt(this.Db)||this.protocol+"://www.youtube.com/";d=a.el;c="detailpage";"adunit"==d?c=this.i?"embedded":"detailpage":"embedded"==d||this.xb?c=wy(c,d,tga):d&&(c="embedded");this.R=c;Ir();d=null;c=a.ps;var e=g.bb(Fy,c);!c||e&&!this.xb||(d=c);this.playerStyle=d;this.D=(this.Lb=g.bb(Fy,this.playerStyle))&&"play"!=this.playerStyle&&"jamboard"!=this.playerStyle;this.kl=!this.D;d={};this.deviceParams=(d.c=a.c||"web",d.cver= equals www.youtube.com (Youtube)
Source: insight.min[1].js.2.drString found in binary or memory: true};d.prototype.get_pixli_url=function(){return""+this.tag_settings.data.protocol+"//"+(this.tag_settings.data.test_url||"px.ads.linkedin.com")+"/collect/"};d.prototype.create_query_string=function(){var a,b;a=this.first_party_id_manager.li_fat_id;b=new ParamBuilder(this.tag_settings);a!=null&&b.add_li_fat_id(a);return QueryStringBuilder.build(b.build())};d.prototype.write_tags_to_dom=function(){var a,b;a=this.create_query_string();a=""+this.get_pixli_url()+"?"+a;b=this.context.doc.body;if(this.tag_settings.data.use_iframe!= equals www.linkedin.com (Linkedin)
Source: NBILBHKT.js.2.drString found in binary or memory: var Mf=(0,_.G)(vk);var wk=tk+Mf+"</p><h3>"+(0,_.G)("Your activity")+"</h3>"+b6({name:"39b031d352a2e1586cf50ac7f2bbc18b",style:f},L)+"<p>"+(0,_.G)("We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:")+"</p><ul><li>"+(0,_.G)("Terms you search for")+"</li><li>"+(0,_.G)("Videos you watch")+"</li><li>",Pe="",gi=""+X5(_.zy({name:"content-views"},{style:f}),L),xk=(0,_.N)(gi); equals www.youtube.com (Youtube)
Source: www-widgetapi[1].js.2.drString found in binary or memory: var U=null;function X(a,b,c){this.i=this.a=this.b=null;this.h=this[B]||(this[B]=++ma);this.f=0;this.o=!1;this.j=[];this.g=null;this.u=c;this.w={};c=document;if(a=x(a)?c.getElementById(a):a)if(c="iframe"==a.tagName.toLowerCase(),b.host||(b.host=c?eb(a.src):"https://www.youtube.com"),this.b=new Ab(b),c||(b=Cb(this,a),this.i=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.a=a,this.a.id||(a=b=this.a,a=a[B]||(a[B]=++ma),b.id="widget"+a),R[this.a.id]=this,window.postMessage){this.g=new N;Db(this);b=T(this.b,"events"); equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: var VZ={},Dz=(VZ.playready=["com.youtube.playready","com.microsoft.playready"],VZ.widevine=["com.youtube.widevine.l3","com.widevine.alpha"],VZ);g.h=g.Ez.prototype;g.h.getId=function(){return this.H}; equals www.youtube.com (Youtube)
Source: remote[1].js.2.drString found in binary or memory: var b={type:"getMdxSessionStatus"};a.g?a.g.sendMessage("urn:x-cast:com.google.youtube.mdx",b,g.Ia,(0,g.x)(function(){b8(this,"Failed to send message: getMdxSessionStatus.")},a)):b8(a,"Sending yt message without session: "+g.vm(b))},psa=function(a,b){g.ap(a.o); equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: var ci=(0,_.G)(kk);var Kf=ek+ci+"</p><p>"+(0,_.G)("We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.")+"</p><h2>"+(0,_.G)("Information we collect as you use our services")+"</h2><h3>"+(0,_.G)("Your apps, browsers & devices")+"</h3>"+b6({name:"e79ea0ed464fc8952d5b5582f9f9ae53",style:f},L)+"<p>",lk= equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: var ln=new kn;mn.prototype.getId=function(){return this.i};nn.prototype.getId=function(){return this.l};var pn=null;var Cda=["*.youtu.be","*.youtube.com"],Zna="ad.doubleclick.net bid.g.doubleclick.net corp.google.com ggpht.com google.co.uk google.com googleads.g.doubleclick.net googleads4.g.doubleclick.net googleadservices.com googlesyndication.com googleusercontent.com gstatic.com gvt1.com prod.google.com pubads.g.doubleclick.net s0.2mdn.net static.doubleclick.net static.doubleclick.net surveys.g.doubleclick.net youtube.com ytimg.com".split(" "),$na=["c.googlesyndication.com"];g.Ua(g.un,g.I);g.h=g.un.prototype;g.h.start=function(){this.stop();this.o=!1;var a=vn(this),b=wn(this);a&&!b&&this.i.mozRequestAnimationFrame?(this.g=g.gk(this.i,"MozBeforePaint",this.l),this.i.mozRequestAnimationFrame(null),this.o=!0):this.g=a&&b?a.call(this.i,this.l):this.i.setTimeout(raa(this.l),20)}; equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: ve added examples, explanatory videos, and definitions for <a href="privacy/key-terms#key-terms">key terms</a>. And if you have any questions about this Privacy Policy, you can <a href="https://support.google.com/policies?p=privpol_privts" class="XddVQ" target="_blank">contact us</a>.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infocollect" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Information Google collects</h1><p class="vxK8q">We want you to understand the types of information we collect as you use our services</p><p>We collect information to provide better services to all our users equals www.youtube.com (Youtube)
Source: privacy[1].htm0.2.drString found in binary or memory: ve watched on YouTube to suggest new apps you might like.</p><p>Depending on your settings, we may also show you <a class="g1mG8c" href="privacy#footnote-personalized-ads" data-name="personalized-ads" jsaction="click:IPbaae(preventDefault=true)">personalized ads</a> based on your interests. For example, if you search for equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: wz.prototype.Kd=function(){switch(this.g){case "com.youtube.playready":return"PRY";case "com.microsoft.playready":return"PRM";case "com.widevine.alpha":return"WVA";case "com.youtube.widevine.l3":return"WVY";case "com.youtube.fairplay":return"FPY";case "com.apple.fps.1_0":return"FPA";default:return this.g}}; equals www.youtube.com (Youtube)
Source: www-embed-player[1].js.2.drString found in binary or memory: zga=function(a,b){var c=fq(),d=c?["com.youtube.fairplay"]:["com.widevine.alpha"];b&&d.unshift("com.youtube.widevine.l3");return c?d:a?[].concat(g.fa(d),g.fa(Dz.playready)):[].concat(g.fa(Dz.playready),g.fa(d))}; equals www.youtube.com (Youtube)
Source: NBILBHKT.js.2.drString found in binary or memory: {style:f}),L),es=(0,_.N)(ds),fs='href="'+_.O(_.R(_.C3({url:(0,_.M)("https://myaccount.google.com/security-checkup?utm_source=pp")},L)))+'" '+Y5(),gs=(0,_.N)(fs),hs="We use the information we collect to customize our services for you, including providing recommendations, personalized content, and <a "+(_.Q(es)+">customized search results</a>. For example, <a "+(_.Q(gs)+">Security Checkup</a> provides security tips adapted to how you use Google products. And Google Play uses information like apps you\u2019ve already installed and videos you\u2019ve watched on YouTube to suggest new apps you might like.")); equals www.youtube.com (Youtube)
Performs DNS lookupsShow sources
Source: unknownDNS traffic detected: queries for: www.dropbox.com
Urls found in memory or binary dataShow sources
Source: msapplication.xml.1.drString found in binary or memory: http://www.amazon.com/
Source: KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf.2.dr, www-widgetapi[1].js.2.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: arrow-vflyvUgEl[1].svg.2.dr, google-logo-white-vfltwSoWq[1].svg.2.dr, unlimited-space-vflcjT5Sx[1].svg.2.drString found in binary or memory: http://www.bohemiancoding.com/sketch
Source: msapplication.xml1.1.drString found in binary or memory: http://www.google.com/
Source: msapplication.xml2.1.drString found in binary or memory: http://www.live.com/
Source: msapplication.xml3.1.drString found in binary or memory: http://www.nytimes.com/
Source: msapplication.xml4.1.drString found in binary or memory: http://www.reddit.com/
Source: msapplication.xml5.1.drString found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.1.drString found in binary or memory: http://www.wikipedia.com/
Source: www-embed-player[1].js.2.drString found in binary or memory: http://www.youtube.com
Source: msapplication.xml7.1.drString found in binary or memory: http://www.youtube.com/
Source: www-embed-player[1].js.2.drString found in binary or memory: http://www.youtube.com/videoplayback
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=48l-xdS4pXg
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=YlmVKT3Zvhw
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=ZdEIZNg3epQ
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=ggoJFaE71W8
Source: www-embed-player[1].js.2.drString found in binary or memory: http://youtube.com/drm/2012/10/10
Source: www-embed-player[1].js.2.drString found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: www-embed-player[1].js.2.drString found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: www-embed-player[1].js.2.drString found in binary or memory: http://youtube.com/yt/2012/10/10
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://8166291.fls.doubleclick.net/activityi;src=8166291;type=dpbxg0;cat=dpbx_0;ord=7471086992353;g
Source: privacy[1].htm0.2.drString found in binary or memory: https://about.google/
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://aboutme.google.com/?utm_source=pp
Source: www-embed-player[1].js.2.drString found in binary or memory: https://admin.youtube.com
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://adservice.google.com/ddm/fls/i/src=8166291;type=dpbxg0;cat=dpbx_0;ord=7471086992353;gtm=2wg8
Source: gtm[1].js.2.drString found in binary or memory: https://adservice.google.com/ddm/regclk
Source: NBILBHKT.js.2.drString found in binary or memory: https://adssettings.google.com/?utm_source=pp
Source: analytics[1].js.2.drString found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: privacy[1].htm0.2.drString found in binary or memory: https://apis.google.com/js/api.js
Source: f[1].txt.2.drString found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://bit.ly/dbxdotcomapps
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://blogs.dropbox.com/dropbox
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://bs.serving-sys.com/Serving?cn=ot&onetagid=9603&dispType=iframe&sync=0&sessionid=175412594492
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://cdn.krxd.net/partnerjs/xdi/proxy.3d2100fd7107262ecb55ce6847f01fa5.html
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://cdn.krxd.net/partnerjs/xdi/proxy.3d2100fd7107262ecb55ce6847f01fa5.html#
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/compiled/js/alameda_bundle/alameda_bundle_polyfilled-vflsP6s4Z.
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/accessibility-vflMYBl-j.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/arbor/aspen/elements/footer-vfl8YO1Br.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/arbor/aspen/elements/social_icon-vflm7iW2e.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/arbor/aspen/elements/social_icon_list-vfl5pcQhm.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/2015/components/computer_carousel-vfl45rXxI.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/2015/components/customers_collage-vflwMBptO.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/2015/components/plans_table-vfla-WPy1.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/2015/pages/landing--lux-vflgY-XfZ.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/base-vfl4JbY6S.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/components/try_business_cta-vflPnNGCE.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/business/pages/landing-vfl2wGHcU.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/bubble_dropdown_v2-vflzxzIjM.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/button-vfldKQ35-.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/calendar-vflO2TC4l.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/exp_cards-vflJsYU3g.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/login_form-vfl2PAYWd.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/login_or_register-vflAJk0Kd.css
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/react_locale_selector-vflxeouE9.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/components/title_bubble-vfl_KbQ0y.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/dropbox/app_actions-vflvECjbj.css
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/dropbox/base-vflaBrE6k.css
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/font_atlas_grotesk-vflmCGKGO.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/font_paper_atlas_grotesk-vflEbKJso.css
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/font_sharp_grotesk-vfle4tE4q.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/lasso/footer-vflpl9Kij.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/legacy_packages/components-vflaHmNdE.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/login_or_register-vflwQTrBQ.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/maestro_layout-vflK26Kjh.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/main-vflZUu-YC.css
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/modal-vflYDGbgV.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/pagelet-vflhEv14a.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/recaptcha_challenge-vflrcf67y.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/recaptcha_v2_challenge-vfl5GXpO2.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/scooter/scooter-scoped-vflWuydQl.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/sharing/shared_folder_invitation_signup_page-vflp8-ieF.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/spectrum/index.web-vfl9kR2Th.css
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/css/sprites/web_sprites-vflv2MHAO.css
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.wof
Source: VLYFRQVP.htm.2.dr, ~DF3AE191DFD15689ED.TMP.1.dr, imagestore.dat.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/favicon-vflUeLeeY.ico
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/icons/ajax-loading-small-blue
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/dropbox_webclip_120_m1.png
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/dropbox_webclip_152_m1.png
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/dropbox_webclip_60_m1.png
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/dropbox_webclip_76_m1.png
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/glyph_m1%402x.png
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/logo_m1.png
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://cfl.dropboxstatic.com/static/images/logo_catalog/twitter-card-glyph_m1%402x.png
Source: ytc[1].js.2.drString found in binary or memory: https://collect.tealiumiq.com/event
Source: f[1].txt0.2.drString found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://contacts.google.com
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://dbxlocal.dropboxstatic.com/WebSocket-vflez_6Rn.swf
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: www-widgetapi[1].js.2.drString found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://dis.us.criteo.com/dis/dis.aspx?p=51257&cb=65226304801&ref=&sc_r=1280x1024&sc_d=24
Source: www-embed-player[1].js.2.drString found in binary or memory: https://docs.google.com/get_video_info
Source: funcaptcha[1].js.2.drString found in binary or memory: https://dropbox-api.arkoselabs.com/v2/
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://dropbox.com/hstsping
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://dropboxcaptcha.com/
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://families.google.com/familylink/privacy/child-policy/
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://fi.google.com/about/tos/#project-fi-privacy-notice
Source: NBILBHKT.js.2.drString found in binary or memory: https://fiber.google.com/
Source: privacy[1].htm0.2.drString found in binary or memory: https://fiber.google.com/legal/privacy.html
Source: AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://flash.dropboxstatic.com/video-flashls-js-vflqOj2Is.swf
Source: gtm[1].js.2.drString found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: f[1].txt0.2.drString found in binary or memory: https://insight.adsrvr.org/track/up
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://insight.adsrvr.org/track/up?adv=2ro94sc&ref=&upid=o9lxggc&upv=1.1.0
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://investors.dropbox.com/
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://kids.youtube.com/privacynotice
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://marketing.dropbox.com/?landing=dbv2
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://marketing.dropbox.com/?landing=dbv2&referrer=
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/activitycontrols?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/dashboard?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/deleteaccount?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/deleteservices?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/inactive?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/preferences?utm_source=pp#deleteservices
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/privacy?utm_source=pp#personalinfo
Source: NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/security-checkup?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myaccount.google.com/shared-endorsements?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myactivity.google.com/?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://myactivity.google.com/myactivity?utm_source=pp
Source: 2DM03Y3W.htm.2.drString found in binary or memory: https://paper.dropbox.com
Source: NBILBHKT.js.2.drString found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=
Source: privacy[1].htm0.2.drString found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=en
Source: NBILBHKT.js.2.drString found in binary or memory: https://play.google.com/books/intl/
Source: privacy[1].htm0.2.drString found in binary or memory: https://play.google.com/books/intl/en/privacy.html
Source: NBILBHKT.js.2.drString found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://plus.google.com/settings?utm_source=pp
Source: {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://policies.googl
Source: ~DF3AE191DFD15689ED.TMP.1.dr, privacy[1].htm.2.drString found in binary or memory: https://policies.google.com/
Source: imagestore.dat.2.drString found in binary or memory: https://policies.google.com/favicon.ico
Source: imagestore.dat.2.drString found in binary or memory: https://policies.google.com/favicon.ico~
Source: ~DF3AE191DFD15689ED.TMP.1.dr, privacy[1].htm.2.drString found in binary or memory: https://policies.google.com/privacy
Source: privacy[1].htm.2.drString found in binary or memory: https://policies.google.com/privacy?hl=en&amp;gl=us
Source: privacy[1].htm.2.drString found in binary or memory: https://policies.google.com/privacy?hl=en&gl=us
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/privacyRPrivacy
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/privacyWdtR
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/privacyacy/
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/privacyacy/M
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/privacyacy/h
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/privacyacy/icon.ico
Source: terms[1].htm.2.drString found in binary or memory: https://policies.google.com/terms
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/termsdGoogle
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/termsrms/
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/termsrms/.com/policies/favicon.ico
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://policies.google.com/termsrms/User
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://privacy.google.com/businesses/affiliates
Source: insight.min[1].js.2.drString found in binary or memory: https://px.ads.linkedin.com/insight_tag_errors.gif
Source: www-embed-player[1].js.2.drString found in binary or memory: https://s.ytimg.com/yts/jsbin/www-widgetapi-vflCIdNAN/www-widgetapi.js
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://safebrowsing.google.com/?utm_source=pp
Source: f[1].txt.2.drString found in binary or memory: https://services.google.com/sitestats/
Source: f[1].txt0.2.drString found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: analytics[1].js.2.drString found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: analytics[1].js.2.drString found in binary or memory: https://stats.g.doubleclick.net/r/collect?t=dc&aip=1&_r=3&
Source: NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/a?p=privpol_admin
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/accounts?p=autocontacts&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_agereq&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_androidloc&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_controlads&amp;hl=en_US
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_endorse
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_location
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_lochistory
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_phone&amp;hl=en_US
Source: NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_whyad
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_whyad&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/adwordspolicy?p=privpol_p13nad
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/analytics?p=privpol_data&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/blogger?p=privpol_blog
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/chrome?p=privpol_chrsync
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/googlehome?p=privpol_actions&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/googlehome?p=privpol_homedata
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/googleplay?p=privpol_review
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/legal?p=privpol_remove
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/mail?p=privpol_signinactivity&amp;hl=en_US
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/photos?p=privpol_manage
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/policies?p=privpol_privts
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://support.google.com/recaptcha
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://support.google.com/recaptcha#6262736
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/sites?p=privpol_delete
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://support.google.com/trends?p=privpol_about
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_feed&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_incognito
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_locserp
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_privresults&amp;hl=en_US
Source: privacy[1].htm0.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_searchactivity
Source: www-embed-player[1].js.2.drString found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: www-embed-player[1].js.2.drString found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: www-embed-player[1].js.2.drString found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: www-embed-player[1].js.2.drString found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://takeout.google.com/?utm_source=pp
Source: NBILBHKT.js.2.drString found in binary or memory: https://transparencyreport.google.com/user-data/overview
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://twitter.com/dropbox
Source: privacy[1].htm0.2.drString found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: www-embed-player[1].js.2.drString found in binary or memory: https://viacon.corp.google.com
Source: {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://www.dropbox.co
Source: 2DM03Y3W.htm.2.drString found in binary or memory: https://www.dropbox.com
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/
Source: {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://www.dropbox.com/?landing=dbv2
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.dropbox.com/?landing=dbv20io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/da_DK/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/de/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/en_GB/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/es/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/es_ES/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/fr/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/id/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/it/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/ja/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/ko/
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.dropbox.com/l/scl/AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ
Source: {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://www.dropbox.com/l/scl/AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQRoot
Source: {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://www.dropbox.com/l/scl/AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQm/scl/fi/klk7az40io3jsyvm2ye5z/Bedf
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/ms/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/nb_NO/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/nl_NL/
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://www.dropbox.com/personal
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/pl/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/pt_BR/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/ru/
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftPropos
Source: ~DF3AE191DFD15689ED.TMP.1.dr, {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.dropbox.com/scl/fi/klk7az40io3jsyvm2ye5z/bedford%20payment%20and%20draftproposal.pdf?dl=
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/sv_SE/
Source: VLYFRQVP.htm.2.dr, AADCKjCffDiJjVyGQjzsOM8RjU94kY6UuzQ[1].htm.2.drString found in binary or memory: https://www.dropbox.com/team
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/th_TH/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/zh_CN/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropbox.com/zh_TW/
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropboxforum.com
Source: VLYFRQVP.htm.2.drString found in binary or memory: https://www.dropboxstatic.com/static/
Source: inferredEvents[1].js.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.drString found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: NBILBHKT.js.2.drString found in binary or memory: https://www.google.
Source: analytics[1].js.2.drString found in binary or memory: https://www.google.%/ads/ga-audiences
Source: {05E43B24-D510-11E9-AAE0-9CC1A2A860C6}.dat.1.drString found in binary or memory: https://www.google.com
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://www.google.com/about/datacenters/inside/locations
Source: f[1].txt.2.drString found in binary or memory: https://www.google.com/ads/mrc?sku=
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/chrome/intl/en/privacy.html
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://www.google.com/history/optout
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/history/optout?utm_source=pp
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_74x24dp.png
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_74x24dp.png
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/intl/en/safetycenter/
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.google.com/landing/2step/?utm_source=pp
Source: NBILBHKT.js.2.drString found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: f[7].txt.2.drString found in binary or memory: https://www.google.com/pagead/1p-user-list/753970383/?random
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.google.com/policies/privacy/
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.google.com/policies/privacy/jsyvm2ye5z/Bedford%20Payment%20and%20DraftProposal.pdf?dl=0&
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.google.com/policies/terms/User
Source: recaptcha__en[1].js.2.drString found in binary or memory: https://www.google.com/recaptcha/
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQblAUAAAAAHIxpoTyzyKHd_2AbdDjSGcyhHSJ&co=aHR0
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://www.google.com/work/apps/terms/education_privacy.html
Source: www-embed-player[1].js.2.drString found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: f[1].txt0.2.drString found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: f[1].txt0.2.drString found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_tracking_id##
Source: inferredEvents[1].js.2.drString found in binary or memory: https://www.googletraveladservices.com/travel/clk/pagead/conversion/
Source: inferredEvents[1].js.2.drString found in binary or memory: https://www.googletraveladservices.com/travel/flights/clk
Source: NBILBHKT.js.2.drString found in binary or memory: https://www.gstatic.
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdentityPoliciesUi.en_US.jOfxwuPbRGo.
Source: remote[1].js.2.drString found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/02698a3383765bd3c250471c53a86c5a.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/0d6da8d8c44e7e3ee95c4d56c19f04e1.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/13062c65605335a46d14656c46af3868.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/2951277d4c35389d7d304ed78d4fb6f6.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/3394102be0315326fd760e503b31c7b6.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/4c5ee41d52605ff6f43538d46a1c0d35.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/4f19891c43001db11efc8048f9bc7cdb.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/51cd09d6239edc9652bc05ad1d149a5c.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/546f2b674b407304a2570e71a216e509.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/9c1bd42ba6ec58ce82eef30bbb30ecc3.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/a8e78fa7fa279aa946fe1a9d6a0508f2.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/acad335ad7ba163209d8c3e671b2c445.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/d1b68e2cd423aba52d74f02573df2d2d.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/fb61fc4bfc85ad86f11342e699d685e9.svg
Source: zxcvbn.min-vflKq_aMA[1].js.2.dr, webworker[1].js.2.dr, anchor[2].htm.2.dr, anchor[1].htm.2.drString found in binary or memory: https://www.gstatic.com/recaptcha/api2/v1566858990656/recaptcha__en.js
Source: anchor[2].htm.2.drString found in binary or memory: https://www.gstatic.com/recaptcha/api2/v1566858990656/styles__ltr.css
Source: www-widgetapi[1].js.2.drString found in binary or memory: https://www.youtube.com
Source: NBILBHKT.js.2.drString found in binary or memory: https://www.youtube.com/embed/
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm0.2.drString found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: ~DF3AE191DFD15689ED.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://www.youtube.com/feed/history/search_history?utm_source=pp
Source: privacy[1].htm0.2.dr, NBILBHKT.js.2.drString found in binary or memory: https://www.youtube.com/feed/history?utm_source=pp
Source: www-embed-player[1].js.2.drString found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: NBILBHKT.js.2.drString found in binary or memory: https://www.youtube.com/iframe_api
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=48l-xdS4pXg
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=YlmVKT3Zvhw
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=ZdEIZNg3epQ
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=ggoJFaE71W8
Source: www-embed-player[1].js.2.drString found in binary or memory: https://youtu.be/
Source: pkg-business.min-vflm9Tqkc[1].js.2.drString found in binary or memory: https://youtu.be/fzPdJlX3Tqg
Source: www-embed-player[1].js.2.drString found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Uses HTTPSShow sources
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49744
Source: unknownNetwork traffic detected: HTTP traffic on port 49817 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49741
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
Source: unknownNetwork traffic detected: HTTP traffic on port 49789 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49800 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49766 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49781 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49769 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49803 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49795 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49826 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49851
Source: unknownNetwork traffic detected: HTTP traffic on port 49820 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49837 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49850
Source: unknownNetwork traffic detected: HTTP traffic on port 49812 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49784 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49806 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49823 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49798 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49777 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49790 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49840
Source: unknownNetwork traffic detected: HTTP traffic on port 49819 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49787 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49760 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49745 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49828 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49850 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49831 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49839
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49838
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49837
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49836
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49835
Source: unknownNetwork traffic detected: HTTP traffic on port 49774 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49782 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49799
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49832
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49798
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49831
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49797
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49796
Source: unknownNetwork traffic detected: HTTP traffic on port 49839 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49795
Source: unknownNetwork traffic detected: HTTP traffic on port 49814 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49790
Source: unknownNetwork traffic detected: HTTP traffic on port 49740 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49765 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49768 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49796 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49825 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49808 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49811 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49828
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49827
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49826
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49825
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49824
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49823
Source: unknownNetwork traffic detected: HTTP traffic on port 49771 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49789
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49788
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49820
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49786
Source: unknownNetwork traffic detected: HTTP traffic on port 49779 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49784
Source: unknownNetwork traffic detected: HTTP traffic on port 49813 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49783
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49782
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49781
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49780
Source: unknownNetwork traffic detected: HTTP traffic on port 49836 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49785 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49762 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49807 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49819
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49818
Source: unknownNetwork traffic detected: HTTP traffic on port 49776 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49799 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49810 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49817
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49816
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49815
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49814
Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49813
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49779
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49812
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49778
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49811
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49777
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49810
Source: unknownNetwork traffic detected: HTTP traffic on port 49816 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49776
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49775
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49774
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49773
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49771
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49770
Source: unknownNetwork traffic detected: HTTP traffic on port 49788 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49767 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49780 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49827 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49851 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49809
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49808
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49807
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49806
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49805
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49804
Source: unknownNetwork traffic detected: HTTP traffic on port 49773 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49803
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49769
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49768
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49767
Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49800
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49766
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49765
Source: unknownNetwork traffic detected: HTTP traffic on port 49783 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49838 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49762
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49760
Source: unknownNetwork traffic detected: HTTP traffic on port 49815 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49840 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49741 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49770 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49797 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49824 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49809 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
Source: unknownNetwork traffic detected: HTTP traffic on port 49778 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
Source: unknownNetwork traffic detected: HTTP traffic on port 49818 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49835 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49786 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49761 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49804 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49832 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49775 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49745

System Summary:

barindex
Classification labelShow sources
Source: classification engineClassification label: clean1.win@3/130@44/34
Creates files inside the user directoryShow sources
Source: C:\Program Files\internet explorer\iexplore.exeFile created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\HighJump to behavior
Creates temporary filesShow sources
Source: C:\Program Files\internet explorer\iexplore.exeFile created: C:\Users\user~1\AppData\Local\Temp\LowJump to behavior
Reads ini filesShow sources
Source: C:\Program Files\internet explorer\iexplore.exeFile read: C:\Users\desktop.iniJump to behavior
Spawns processesShow sources
Source: unknownProcess created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknownProcess created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4620 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exeProcess created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4620 CREDAT:17410 /prefetch:2Jump to behavior
Found graphical window changes (likely an installer)Show sources
Source: Window RecorderWindow detected: More than 3 window changes detected
Uses new MSVCR DllsShow sources
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exeFile opened: C:\Program Files (x86)\Java\jre1.8.0_171\bin\msvcr100.dllJump to behavior

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 173096 URL: https://www.dropbox.com/l/s... Startdate: 11/09/2019 Architecture: WINDOWS Score: 1 5 iexplore.exe 12 85 2->5         started        process3 7 iexplore.exe 8 365 5->7         started        dnsIp4 10 s.twitter.com 104.244.42.131, 443, 49785, 49786 unknown United States 7->10 12 t.co 104.244.42.5, 443, 49787, 49788 unknown United States 7->12 14 75 other IPs or domains 7->14

Simulations

Behavior and APIs

No simulations

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

SourceDetectionScannerLabelLink
cs2005.wpc.alphacdn.net0%VirustotalBrowse
platform.twitter.map.fastly.net0%VirustotalBrowse
spdc-global.pbp.gysm.yahoodns.net0%VirustotalBrowse
dropboxcaptcha.com0%VirustotalBrowse
www.dropbox-dns.com0%VirustotalBrowse
cdn-fastly.krxd.net.c.global-ssl.fastly.net0%VirustotalBrowse
c.global-ssl.fastly.net0%VirustotalBrowse
ml314.com0%VirustotalBrowse
edge.gycpi.b.yahoodns.net0%VirustotalBrowse
static.ads-twitter.com0%VirustotalBrowse
b92.yahoo.co.jp0%VirustotalBrowse
sjs.bizographics.com0%VirustotalBrowse
sb.scorecardresearch.com0%VirustotalBrowse

URLs

SourceDetectionScannerLabelLink
https://www.google.0%VirustotalBrowse
https://www.google.0%Avira URL Cloudsafe
https://www.google.0%Google Safe Browsingsafe
https://www.dropbox.co0%VirustotalBrowse
https://www.dropbox.co0%Avira URL Cloudsafe
https://about.google/0%VirustotalBrowse
https://about.google/0%Avira URL Cloudsafe
https://dropboxcaptcha.com/0%VirustotalBrowse
https://dropboxcaptcha.com/0%Avira URL Cloudsafe
https://policies.googl0%Avira URL Cloudsafe
https://policies.googl0%Google Safe Browsingsafe
https://www.google.%/ads/ga-audiences0%Avira URL Cloudsafe
https://www.google.%/ads/ga-audiences0%Google Safe Browsingsafe
https://dropbox-api.arkoselabs.com/v2/0%Avira URL Cloudsafe

Yara Overview

Initial Sample

No yara matches

PCAP (Network Traffic)

No yara matches

Dropped Files

No yara matches

Memory Dumps

No yara matches

Unpacked PEs

No yara matches

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.