Analysis Report https://covid19risk.biosci.gatech.edu/

Overview

General Information

Sample URL: https://covid19risk.biosci.gatech.edu/
Analysis ID: 321184

Most interesting Screenshot:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

Allocates a big amount of memory (probably used for heap spraying)

Classification

Software Vulnerabilities:

barindex
Allocates a big amount of memory (probably used for heap spraying)
Source: iexplore.exe Memory has grown: Private usage: 0MB later: 201MB
Source: msapplication.xml0.1.dr String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x9ccff3d8,0x01d6bf91</date><accdate>0x9ccff3d8,0x01d6bf91</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x9ccff3d8,0x01d6bf91</date><accdate>0x9ccff3d8,0x01d6bf91</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.dr String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x9cd4b890,0x01d6bf91</date><accdate>0x9cd4b890,0x01d6bf91</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.dr String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x9cd4b890,0x01d6bf91</date><accdate>0x9cd4b890,0x01d6bf91</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.dr String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x9cd71af4,0x01d6bf91</date><accdate>0x9cd71af4,0x01d6bf91</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.dr String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x9cd71af4,0x01d6bf91</date><accdate>0x9cd71af4,0x01d6bf91</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: unknown DNS traffic detected: queries for: covid19risk.biosci.gatech.edu
Source: matomo[1].js.2.dr String found in binary or memory: http://bestiejs.github.io/json3
Source: UT6BD5TO.htm.2.dr String found in binary or memory: http://covid19risk.biosci.gatech.edu/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: http://datainterfaces.org/projects/covid19eventi/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: http://ecotheory.biology.gatech.edu/
Source: dat96BD.tmp.2.dr String found in binary or memory: http://fontawesome.io
Source: dat96BD.tmp.2.dr String found in binary or memory: http://fontawesome.io/license/
Source: dat96BD.tmp.2.dr String found in binary or memory: http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens
Source: UT6BD5TO.htm.2.dr String found in binary or memory: http://friendlycities.gatech.edu/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: http://jordan.biology.gatech.edu/page/
Source: matomo[1].js.2.dr String found in binary or memory: http://kit.mit-license.org
Source: UT6BD5TO.htm.2.dr String found in binary or memory: http://sjbeckett.github.io/
Source: msapplication.xml.1.dr String found in binary or memory: http://www.amazon.com/
Source: msapplication.xml1.1.dr String found in binary or memory: http://www.google.com/
Source: msapplication.xml2.1.dr String found in binary or memory: http://www.live.com/
Source: msapplication.xml3.1.dr String found in binary or memory: http://www.nytimes.com/
Source: msapplication.xml4.1.dr String found in binary or memory: http://www.reddit.com/
Source: msapplication.xml5.1.dr String found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.1.dr String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.1.dr String found in binary or memory: http://www.youtube.com/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://abc7news.com/covid-19-map-interactive-coronavirus-risk-calculator-cdc-guidelines-for/6355615
Source: js[1].js.2.dr String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: js[1].js.2.dr String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: analytics[1].js.2.dr String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://aroonchan.de
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://blogs.scientificamerican.com/observations/online-covid-19-dashboard-calculates-how-risky-reo
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://cnecovid.isciii.es/covid19/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://coronavirus.data.gov.uk
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://cos.gatech.edu/news/georgia-tech-researchers-release-county-level-calculator-estimate-risk-c
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://covid19ireland-geohive.hub.arcgis.com/
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.bi
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatecRoot
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-1
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-2M
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-2du/favicon.ico
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-3
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-4
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-4du/favicon.ico
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-5
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-6
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-6041-6du/favicon.ico
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-7270-1getting-sick/prevention.htmlAvailable%20data%20indi
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-7270-2
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/#tab-7270-2getting-sick/prevention.htmlAvailable%20data%20indi
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/$
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/5_50.html
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/?
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-19
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-6041-1Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-6041-2Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-6041-3Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-6041-4Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-6041-5Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-6041-6Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-7270-1gett
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/#tab-7270-2gett
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-osci.gatech.edu/ab-6041-6Root
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-ronavirus/2019-ncov/hcp/duration
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/XCOVID-ronavirus/2019-ncov/prevent-gett
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/ab-6041-6
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/ab-6041-6du/favicon.ico
Source: imagestore.dat.2.dr, ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/favicon.ico
Source: imagestore.dat.2.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/favicon.ico~
Source: imagestore.dat.2.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/favicon.ico~&
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/n
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/og.png
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://covid19risk.biosci.gatech.edu/tutorial.png
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://covidtracking.com/api/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://crosscut.com/2020/03/slow-coronavirus-events-250-plus-people-are-banned-why-250
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://dailymemphian.com/article/15338/shelby-county-coronavirus-cases-grow-by-306
Source: matomo[1].js.2.dr String found in binary or memory: https://developer.piwik.org/api-reference/tracking-javascript
Source: matomo[1].js.2.dr String found in binary or memory: https://developer.piwik.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://doi.org/10.1038/s41562-020-01000-9
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://ecotheory.biosci.gatech.edu/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://eventosycovid19.es
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://figshare.com/articles/COVID-19_Event_Risk_Assessment_Planner/11965533
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://github.com/appliedbinf/covid19-event-risk-planner
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://github.com/jsweitz/covid-19-event-risk-planner
Source: js[1].js.2.dr String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: matomo[1].js.2.dr String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://github.com/nytimes/covid-19-data
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://github.com/openZH/covid_19
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://github.com/pcm-dpc/COVID-19/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://gvwire.com/2020/08/06/if-100-people-go-to-a-party-in-fresno-county-its-99-someone-has-covid-
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://knight-hennessy.stanford.edu/program/scholars/2019/mallory-harris
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://kutv.com/news/local/how-likely-are-you-to-get-covid-19-this-new-map-will-tell-you
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://onemocneni-aktualne.mzcr.cz/covid-19
Source: js[1].js.2.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.2.dr String found in binary or memory: https://pagead2.googlesyndication.com/
Source: matomo[1].js.2.dr String found in binary or memory: https://piwik.org
Source: matomo[1].js.2.dr String found in binary or memory: https://piwik.org/free-software/bsd/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://rstudio.com/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://scholar.google.com/citations?user=-LBmdhYAAAAJ&amp;hl=en
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://scholar.google.com/citations?user=tygOpuIAAAAJ&amp;hl=en
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://seolhalee.github.io/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://slate.com/technology/2020/05/coronavirus-reopening-math.html
Source: analytics[1].js.2.dr String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://twitter.com/joshuasweitz/status/1237556232304508928?s=20
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://twitter.com/malar0ne
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.abil.ihrc.com/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.ajc.com/blog/get-schooled/scientists-the-math-show-how-large-events-like-march-madness-c
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.atlantamagazine.com/news-culture-articles/coronavirus-cancels-atlanta/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.bloomberg.com/news/newsletters/2020-08-12/maplab-an-actionable-map-of-covid-risk
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.boston.com/news/coronavirus/2020/08/03/interactive-tool-to-determine-your-covid-19-dange
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.bostonglobe.com/2020/11/10/nation/youre-not-doomed-zoom-how-have-safer-thanksgiving-duri
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://www.cdc.gov/co
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/hcp/duration-isolation.html
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/hcp/duration-isolation.html#:%7E:text=Available%20data%20i
Source: {BDD88031-2B84-11EB-90E4-ECF4BB862DED}.dat.1.dr String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/prevent-getting-sick/prevention.html
Source: ~DFD87BB83FAD412A7E.TMP.1.dr String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/prevent-getting-sick/prevention.htmlAvailable%20data%20ind
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.census.gov/data/tables/time-series/demo/popest/2010s-state-total.html
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.data.gouv.fr/fr/datasets/donnees-relatives-aux-resultats-des-tests-virologiques-covid-19
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.data.gv.at/covid-19/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.fox5atlanta.com/news/here-are-three-new-ways-to-tell-whether-were-beating-covid-19
Source: js[1].js.2.dr String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[1].js.2.dr String found in binary or memory: https://www.google.com
Source: js[1].js.2.dr String found in binary or memory: https://www.google.com/travel/flights/click/conversion/
Source: js[1].js.2.dr String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-45174995-12
Source: js[1].js.2.dr String found in binary or memory: https://www.googletraveladservices.com/travel/clk/pagead/conversion/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.healthline.com/health-news/covid19-tracker-assesses-risk-public-gatherings
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.kare11.com/article/news/health/coronavirus/georgia-tech-covid-19-risk-calculator-map-sho
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.latimes.com/science/story/2020-11-11/covid-19-risk-thanksgiving-2020-what-to-expect
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.masslive.com/coronavirus/2020/07/what-are-the-chances-someone-at-your-gathering-in-massa
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.nationalgeographic.com/science/2020/03/graphic-see-why-small-groups-are-safer-during-cov
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.nature.com/articles/d41591-020-00005-1
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.nature.com/articles/s41562-020-01000-9/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.nbcsandiego.com/news/local/new-tool-shows-risk-of-encountering-someone-with-covid-19/238
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.newsweek.com/trump-rally-tulsa-oklahoma-coronavirus-cases-covid-19-1511021
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.politico.com/newsletters/politico-nightly-coronavirus-special-edition/2020/07/23/the-pan
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.sfchronicle.com/bayarea/article/If-25-people-gather-in-SF-odds-are-34-that-at-15458554.p
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.sfgate.com/news/article/Interactive-map-tells-you-how-likely-it-is-15461395.php
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.sltrib.com/news/2020/08/02/answers-utahns-frequently/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.webmd.com/lung/news/20201109/whats-my-risk-of-covid
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.wired.com/story/thinking-about-a-holiday-gathering-look-at-this-map/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.wired.com/story/to-navigate-risk-in-a-pandemic-you-need-a-color-coded-chart/
Source: UT6BD5TO.htm.2.dr String found in binary or memory: https://www.wired.com/story/whats-social-distancing-flattening-curve-covid-19-questions/
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: classification engine Classification label: clean0.win@3/56@7/2
Source: C:\Program Files\internet explorer\iexplore.exe File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High Jump to behavior
Source: C:\Program Files\internet explorer\iexplore.exe File created: C:\Users\user\AppData\Local\Temp\~DF5F91CC1A9FC0CE82.TMP Jump to behavior
Source: C:\Program Files\internet explorer\iexplore.exe File read: C:\Users\desktop.ini Jump to behavior
Source: unknown Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2600 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2600 CREDAT:17410 /prefetch:2 Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 321184 URL: https://covid19risk.biosci.... Startdate: 20/11/2020 Architecture: WINDOWS Score: 0 11 covid19risk.biosci.gatech.edu 2->11 13 bioappweitzweb.biosci.gatech.edu 2->13 6 iexplore.exe 3 88 2->6         started        process3 process4 8 iexplore.exe 3 85 6->8         started        dnsIp5 15 matomo.chande.science 172.93.50.164, 443, 49731, 49732 INCERO-HVVCUS United States 8->15 17 bioappweitzweb.biosci.gatech.edu 130.207.66.12, 443, 49721, 49722 GEORGIA-TECHUS United States 8->17 19 6 other IPs or domains 8->19
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
172.93.50.164
 unknown United States
54540 INCERO-HVVCUS false
130.207.66.12
 unknown United States
2637 GEORGIA-TECHUS false

Contacted Domains

Name IP Active
matomo.chande.science 172.93.50.164 true
bioappweitzweb.biosci.gatech.edu 130.207.66.12 true
covid19risk.biosci.gatech.edu unknown unknown
d.basemaps.cartocdn.com unknown unknown
c.basemaps.cartocdn.com unknown unknown
b.basemaps.cartocdn.com unknown unknown
a.basemaps.cartocdn.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://covid19risk.biosci.gatech.edu/#tab-6041-6 false
    		high
    https://covid19risk.biosci.gatech.edu/#tab-6041-5 false
      		high
      https://covid19risk.biosci.gatech.edu/ false
        		high
        https://covid19risk.biosci.gatech.edu/#tab-6041-4 false
          		high
          https://www.cdc.gov/coronavirus/2019-ncov/hcp/duration-isolation.html#:%7E:text=Available%20data%20indicate%20that%20persons,20%20days%20after%20symptom%20onset false
            		high
            https://covid19risk.biosci.gatech.edu/#tab-7270-2 false
              		high
              https://covid19risk.biosci.gatech.edu/#tab-6041-3 false
                		high