Loading ...

Play interactive tourEdit tour

Analysis Report https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?vc=0&c=0&w=1&flr=0

Overview

General Information

Sample URL:https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?vc=0&c=0&w=1&flr=0
Analysis ID:324345

Most interesting Screenshot:

Detection

Score:0
Range:0 - 100
Whitelisted:false
Confidence:80%

Signatures

No high impact signatures.

Classification

Startup

  • System is w10x64
  • iexplore.exe (PID: 4892 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)
    • iexplore.exe (PID: 5932 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4892 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)
  • cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=48l-xdS4pXg"> equals www.youtube.com (Youtube)
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=YlmVKT3Zvhw"> equals www.youtube.com (Youtube)
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ZdEIZNg3epQ"> equals www.youtube.com (Youtube)
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ggoJFaE71W8"> equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: like an email address to receive updates about our services.</p><p>We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.</p><h2>Information we collect as you use our services</h2><h3>Your apps, browsers & devices</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg"/></div><p>We collect information about the apps, browsers, and <a class="g1mG8c" href="privacy#footnote-devices" data-name="devices" jsaction="click:IPbaae(preventDefault=true)">devices</a> you use to access Google services, which helps us provide features like automatic product updates and dimming your screen if your battery runs low.</p><p>The information we collect includes <a class="g1mG8c" href="privacy#footnote-unique-id" data-name="unique-id" jsaction="click:IPbaae(preventDefault=true)">unique identifiers</a>, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including <a class="g1mG8c" href="privacy#footnote-ip" data-name="ip" jsaction="click:IPbaae(preventDefault=true)">IP address</a>, crash reports, system activity, and the date, time, and <a class="g1mG8c" href="privacy#footnote-referrer-url" data-name="referrer-url" jsaction="click:IPbaae(preventDefault=true)">referrer URL</a> of your request.</p><p>We collect this information when a Google service on your device contacts our servers equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: (g.Fm(b,"www.youtube.com"),c=b.toString()):c=Cv(c);b=new Ev(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: (r=r.vss_host||"s.youtube.com",this.ca("www_for_videostats")&&"s.youtube.com"===r&&(r=RC(this.N)||"www.youtube.com")):r="video.google.com";this.Wi=r;this.Pg(a,!0);this.K=new oC;g.D(this,this.K);r=b?b.innertubeApiKey:xC("",a.innertube_api_key);p=b?b.innertubeApiVersion:xC("",a.innertube_api_version);n=b?b.innertubeContextClientVersion:xC("",a.innertube_context_client_version);this.ea={innertubeApiKey:Xn("INNERTUBE_API_KEY")||r,innertubeApiVersion:Xn("INNERTUBE_API_VERSION")||p,fC:g.K("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO"), equals www.youtube.com (Youtube)
Source: so[1].htm.2.drString found in binary or memory: ,[36,"YouTube","0 -1863px","https://www.youtube.com/?gl\u003dGB","_blank",false,null,""] equals www.youtube.com (Youtube)
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=48l-xdS4pXg" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=YlmVKT3Zvhw" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=ZdEIZNg3epQ" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="http://www.youtube.com/watch?v=ggoJFaE71W8" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: BG.prototype.replace=function(a,b){for(var c=g.q(a),d=c.next();!d.done;d=c.next())delete this.u[d.value.encryptedTokenJarContents];AG(this,b)};DG.prototype.B=function(a){var b,c,d=null===(b=a.responseContext)||void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.u=void 0,"TVHTML5"===(null===(c=a.responseContext)||void 0===c?void 0:c.clientName)?(this.localStorage=CG(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.$p("YT_CL",JSON.stringify({X3:d}),15552E3,void 0,!0))};var GG={bluetooth:"CONN_DISCO",cellular:"CONN_CELLULAR_UNKNOWN",ethernet:"CONN_WIFI",none:"CONN_NONE",wifi:"CONN_WIFI",wimax:"CONN_CELLULAR_4G",other:"CONN_UNKNOWN",unknown:"CONN_UNKNOWN","slow-2g":"CONN_CELLULAR_2G","2g":"CONN_CELLULAR_2G","3g":"CONN_CELLULAR_3G","4g":"CONN_CELLULAR_4G"};var Lma=/[&\?]action_proxy=1/,Kma=/[&\?]token=([\w-]*)/,Mma=/[&\?]video_id=([\w-]*)/,Nma=/[&\?]index=([\d-]*)/,Oma=/[&\?]m_pos_ms=([\d-]*)/,Pma=/[&\?]vvt=([\w-]*)/,Qma=/[&\?]mt=([\d-]*)/,Hma="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),iH="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "), equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: Tga=function(a,b){if(!a.u["0"]){var c=new nw("0","fakesb",void 0,new hw(0,0,0,void 0,void 0,"auto"),null,null,1);a.u["0"]=b?new Hz(new Ev("http://www.youtube.com/videoplayback"),c,"fake"):new zw(new Ev("http://www.youtube.com/videoplayback"),c,new Mt(0,0),new Mt(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: 0772XWI7.js.2.drString found in binary or memory: _.v2=function(a,b){a=a||{};a=a.id;var c=b.Wc,d=b.fw;b=_.H;_.vw(a)&&!d?(d='<div class="'+_.P("M3GAob")+'"><div class="'+_.P("O3bgpc")+'">',a=(0,_.Bw)("https://www.youtube.com/embed/"+_.Hw(a)+"?rel=0&showinfo=0&theme=light&version=3&hl="+_.Hw(c)+"&cc_lang_pref="+_.Hw(c)+"&cc_load_policy=1&enablejsapi=1"),a=(0,_.H)('<iframe src="'+_.P(a)+'" allowfullscreen="allowfullscreen" class="'+(_.P("Ylcf5b")+'"></iframe>')),a=d+a+"</div></div>"):a="";return b(a)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: a.BASE_YT_URL)||"")||xv(this.Qb)||this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;f="detailpage";"adunit"===h?f=this.B?"embedded":"detailpage":"embedded"===h||this.C?f=vC(f,h,yha):h&&(f="embedded");this.ba=f;cp();h=null;f=b?b.playerStyle:a.ps;var l=g.nb(BC,f);!f||l&&!this.C||(h=f);this.playerStyle=h;this.P=(this.G=g.nb(BC,this.playerStyle))&&"area120-boutique"!==this.playerStyle&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Uq=!this.P;this.Y=R(!1,a.disableplaybackui);this.Sb= equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: b),this.N=!1,this.videoData.ca("html5_playready_enable_non_persist_license")&&(this.F.pst="0"));b=CB(this.B)?Asa(c.initData).replace("skd://","https://"):this.B.C;this.videoData.ca("enable_shadow_yttv_channels")&&(b=new g.Dm(b),document.location.origin&&document.location.origin.includes("green")?g.Fm(b,"web-green-qa.youtube.com"):g.Fm(b,"www.youtube.com"),b=b.toString());this.baseUrl=b;this.fairplayKeyId=Md(this.baseUrl,"ek")||"";if(b=Md(this.baseUrl,"cpi")||"")this.cryptoPeriodIndex=Number(b);this.ea= equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: d like saved in your account. For example, you can turn on Location History if you want traffic predictions for your daily commute, or you can save your YouTube Watch History to get better video suggestions.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/activitycontrols?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-activitycontrols">Go to Activity Controls</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Ad settings</h3><p class="n8ZyWe">Manage your preferences about the ads shown to you on Google and on sites and apps that <a class="g1mG8c" href="privacy#footnote-partner" data-name="partner" jsaction="click:IPbaae(preventDefault=true)">partner with Google</a> to show ads. You can modify your interests, choose whether your personal information is used to make ads more relevant to you, and turn on or off certain advertising services.</p><p class="n8ZyWe"><a href="https://adssettings.google.com/?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-adssettings">Go to Ad Settings</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">About you</h3><p class="n8ZyWe">Control what others see about you across Google services.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/profile?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-aboutme">Go to About You</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Shared endorsements</h3><p class="n8ZyWe">Choose whether your name and photo appear next to your activity, like reviews and recommendations, that appear in ads.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/shared-endorsements?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-sharedendorsements">Go to Shared Endorsements</a></p></div></div><h3>Ways to review & update your information</h3><div class="h0yEnd WTetv adRtod"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">My Activity</h3><p class="n8ZyWe">My Activity allows you to review and control data that equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: else if(!this.Oa.G&&"auth"===a.errorCode&&"429"===a.details.rc){e="TOO_MANY_REQUESTS";var f="6"}this.V("playererror",a.errorCode,e,g.mB(a.details),f)}else d=/^pp/.test(this.videoData.clientPlaybackNonce),mT(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(d="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.N)(),(new dE(d,"manifest",function(h){c.W=!0;pT(c,"pathprobe",h)},function(h){mT(c,h.errorCode,h.details)})).send())}; equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: g.$C=function(a){a=RC(a.N);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: g.RX.prototype.B=function(a){var b=this;Rxa(this);var c=a.Yv,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c||d.G?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.sc(UX(this,"TOO_MANY_REQUESTS_WITH_LINK",d.lk(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c||d.G?this.sc(g.SX(a.errorMessage)):this.sc(UX(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Id(c, equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: g.k.clone=function(){var a=new Jm;a.C=this.C;this.u&&(a.u=this.u.clone(),a.B=this.B);return a};var Qm="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),uda=/\bocr\b/;var vda=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;Tm.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.B[a]!=b&&(this.B[a]=b,this.u=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.aD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.VC(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,br&&(a=wp())&&(b.ebc=a));return g.Id(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.drString found in binary or memory: g.qD=function(a){var b=g.aD(a);!a.ca("yt_embeds_disable_new_error_lozenge_url")&&Aha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: ll keep a record of your request in order to help solve any issues you might be facing.</p><h3>Protect Google, our users, and the public</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg"/></div><p>We use information to help improve the <a class="g1mG8c" href="privacy#footnote-safety-reliability" data-name="safety-reliability" jsaction="click:IPbaae(preventDefault=true)">safety and reliability</a> of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Google, our users, or the public.</p><hr/><p>We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with things like customized search results, personalized ads, or other features tailored to how you use our services. And we analyze your content to help us <a class="g1mG8c" href="privacy#footnote-detect-abuse" data-name="detect-abuse" jsaction="click:IPbaae(preventDefault=true)">detect abuse</a> such as spam, malware, and illegal content. We also use <a class="g1mG8c" href="privacy#footnote-algorithm" data-name="algorithm" jsaction="click:IPbaae(preventDefault=true)">algorithms</a> to recognize patterns in data. For example, Google Translate helps people communicate across languages by detecting common language patterns in phrases you ask it to translate.</p><p>We may <a class="g1mG8c" href="privacy#footnote-combine-info" data-name="combine-info" jsaction="click:IPbaae(preventDefault=true)">combine the information we collect</a> among our services and across your devices for the purposes described above. For example, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, <a class="g1mG8c" href="privacy#footnote-other-sites" data-name="other-sites" jsaction="click:IPbaae(preventDefault=true)">your activity on other sites and apps</a> may be associated with your personal information in order to improve Google equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).</p></div></div><div class="m9JGT xXnO1d"><div class="nrAB0c"><div id="products" class="ahbJ5"></div><h1>Related privacy practices</h1><h2>Specific Google services</h2><p>The following privacy notices provide additional information about some Google services:</p><ul><li><a href="https://www.google.com/chrome/intl/en/privacy.html" class="N6CPUe" target="_blank">Chrome & the Chrome Operating System</a></li><li><a href="https://payments.google.com/legaldocument?family=0.privacynotice&hl=en" class="N6CPUe" target="_blank">Payments</a></li><li><a href="https://fiber.google.com/legal/privacy.html" class="N6CPUe" target="_blank">Fiber</a></li><li><a href="https://fi.google.com/about/tos/#project-fi-privacy-notice" class="N6CPUe" target="_blank">Google Fi</a></li><li><a href="https://www.google.com/work/apps/terms/education_privacy.html" class="N6CPUe" target="_blank">G Suite for Education</a></li><li><a href="https://readalong.google/intl/en_GB/privacy" class="N6CPUe" target="_blank">Read Along</a></li><li><a href="https://kids.youtube.com/privacynotice" class="N6CPUe" target="_blank">YouTube Kids</a></li><li><a href="https://families.google.com/familylink/privacy/child-policy/" class="N6CPUe" target="_blank">Google Accounts Managed with Family Link, for Children under 13 (or applicable age in your country)</a></li><li><a href="https://assistant.google.com/privacy-notice-childrens-features/" class="N6CPUe" target="_blank">Voice and Audio Collection from Children equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: re signed in to a Google Account, including:</p><ul><li>Browser settings: For example, you can configure your browser to indicate when Google has set a <a class="g1mG8c" href="privacy#footnote-cookies" data-name="cookies" jsaction="click:IPbaae(preventDefault=true)">cookie</a> in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. But remember that our services <a class="g1mG8c" href="privacy#footnote-rely-on-cookies" data-name="rely-on-cookies" jsaction="click:IPbaae(preventDefault=true)">rely on cookies to function properly</a>, for things like remembering your language preferences.</li><li>Device-level settings: Your device may have controls that determine what information we collect. For example, you can <a href="https://support.google.com/websearch?p=privpol_locserp" class="N6CPUe" target="_blank">modify location settings</a> on your Android device.</li></ul></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infosharing" class="ahbJ5"></div><div class="pjyxF m2dIJf"><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg"/></div><h1>Sharing your information</h1><h2>When you share your information</h2><p>Many of our services let you share information with other people, and you have control over how you share. For example, you can share videos on YouTube publicly or you can decide to keep your videos private. Remember, when you share information publicly, your content may become accessible through search engines, including Google Search.</p><p>When you equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: re signed out, you can manage information associated with your browser or device, including:</p><ul><li>Signed-out search personalization: <a href="https://www.google.com/history/optout?utm_source=pp" class="N6CPUe" target="_blank">Choose</a> whether your search activity is used to offer you more relevant results and recommendations.</li><li>YouTube settings: Pause and delete your <a href="https://www.youtube.com/feed/history/search_history?utm_source=pp" class="N6CPUe" target="_blank">YouTube Search History</a> and your <a href="https://www.youtube.com/feed/history?utm_source=pp" class="N6CPUe" target="_blank">YouTube Watch History</a>.</li><li>Ad Settings: <a href="https://adssettings.google.com/?utm_source=pp" class="N6CPUe" target="_blank">Manage</a> your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads.</li></ul><h2>Exporting, removing & deleting your information</h2><p>You can export a copy of content in your Google Account if you want to back it up or use it with a service outside of Google.</p><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM " alt="" src="https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg"/></div><div class="gwGFXb"><p class="n8ZyWe"><a href="https://takeout.google.com/?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-takeout">Export your data</a></p></div></div><p>You can also <a href="https://support.google.com/legal?p=privpol_remove" class="N6CPUe" target="_blank">request to remove content</a> from specific Google services based on applicable law.</p><p>To delete your information, you can:</p><ul><li>Delete your content from <a class="g1mG8c" href="privacy#footnote-delete-specific" data-name="delete-specific" jsaction="click:IPbaae(preventDefault=true)">specific Google services</a></li><li>Search for and then delete specific items from your account using <a href="https://myactivity.google.com/?utm_source=pp" class="N6CPUe" target="_blank">My Activity</a></li><li><a href="https://myaccount.google.com/deleteservices?utm_source=pp" class="N6CPUe" target="_blank">Delete specific Google products</a>, including your information associated with those products</li><li><a href="https://myaccount.google.com/deleteaccount?utm_source=pp" class="N6CPUe" target="_blank">Delete your entire Google Account</a></li></ul><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM " alt="" src="https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg"/></div><div class="gwGFXb"><p class="n8ZyWe"><a href="https://myaccount.google.com/delete-services-or-account?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-delete">Delete your information</a></p></div></div><p>And finally, <a href="https://myaccount.google.com/inactive?utm_source=pp" class="N6CPUe" target="_blank">Inactive Account Manager</a> allows you to give someone else access to parts of your Google Account in case you equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: re using an <a class="g1mG8c" href="privacy#footnote-android-device" data-name="android-device" jsaction="click:IPbaae(preventDefault=true)">Android device with Google apps</a>, your device periodically contacts Google servers to provide information about your device and connection to our services. This information includes things like your device type, carrier name, crash reports, and which apps you've installed.</p><h3>Your activity</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg"/></div><p>We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:</p><ul><li>Terms you search for</li><li>Videos you watch</li><li><a class="g1mG8c" href="privacy#footnote-content-views" data-name="content-views" jsaction="click:IPbaae(preventDefault=true)">Views and interactions with content and ads</a></li><li>Voice and audio information when you use audio features</li><li>Purchase activity</li><li>People with whom you communicate or share content</li><li>Activity on third-party sites and apps that use our services</li><li>Chrome browsing history you equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: s Search engine may index that article and display it to other people if they search for your name. We may also collect information about you from trusted partners, including marketing partners who provide us with information about potential customers of our business services, and security partners who provide us with information to <a class="g1mG8c" href="privacy#footnote-against-abuse" data-name="against-abuse" jsaction="click:IPbaae(preventDefault=true)">protect against abuse</a>. We also receive information from advertisers to provide <a class="g1mG8c" href="privacy#footnote-ad-services" data-name="ad-services" jsaction="click:IPbaae(preventDefault=true)">advertising and research services on their behalf</a>.</p><p>We use various technologies to collect and store information, including <a class="g1mG8c" href="privacy#footnote-cookies" data-name="cookies" jsaction="click:IPbaae(preventDefault=true)">cookies</a>, <a class="g1mG8c" href="privacy#footnote-pixel" data-name="pixel" jsaction="click:IPbaae(preventDefault=true)">pixel tags</a>, local storage, such as <a class="g1mG8c" href="privacy#footnote-browser-storage" data-name="browser-storage" jsaction="click:IPbaae(preventDefault=true)">browser web storage</a> or <a class="g1mG8c" href="privacy#footnote-application-data-cache" data-name="application-data-cache" jsaction="click:IPbaae(preventDefault=true)">application data caches</a>, databases, and <a class="g1mG8c" href="privacy#footnote-server-logs" data-name="server-logs" jsaction="click:IPbaae(preventDefault=true)">server logs</a>.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="whycollect" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/48l-xdS4pXg?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Why Google collects data</h1><p class="vxK8q">We use data to build better services</p><p>We use the information we collect from all our services for the following purposes:</p><h3>Provide our services</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg"/></div><p>We use your information to <a class="g1mG8c" href="privacy#footnote-deliver-services" data-name="deliver-services" jsaction="click:IPbaae(preventDefault=true)">deliver our services</a>, like processing the terms you search for in order to return results or helping you share content by suggesting recipients from your contacts.<h3>Maintain & improve our services</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg"/></div><p>We also use your information to <a class="g1mG8c" href="privacy#footnote-ensure-working" data-name="ensure-working" jsaction="click:IPbaae(preventDefault=true)">ensure
Source: privacy[1].htm.2.drString found in binary or memory: t covered in this Privacy Policy.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infochoices" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Your privacy controls</h1><p class="vxK8q">You have choices regarding the information we collect and how it's used</p><p>This section describes key controls for managing your privacy across our services. You can also visit the <a href="https://myaccount.google.com/privacycheckup?utm_source=pp&amp;utm_medium=Promo-in-product&amp;utm_campaign=pp_body" class="N6CPUe" target="_blank">Privacy Checkup</a>, which provides an opportunity to review and adjust important privacy settings. In addition to these tools, we also offer specific privacy settings in our products equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: t want this level of search customization, you can <a href="https://support.google.com/websearch?p=privpol_incognito">search and browse privately</a> or turn off <a href="https://www.google.com/history/optout?utm_source=pp">signed-out search personalization</a>.</p><h3 id="footnote-customizing">Customizing our services</h3><p>For example, we may display a Google Doodle on the Search homepage to celebrate an event specific to your country.</p><h3 id="footnote-deliver-services">deliver our services</h3><p>Examples of how we use your information to deliver our services include:</p><ul><li>We use the IP address assigned to your device to send you the data you requested, such as loading a YouTube video</li><li>We use unique identifiers stored in cookies on your device to help us authenticate you as the person who should have access to your Google Account</li><li>Photos and videos you upload to Google Photos are used to help you create albums, animations, and other creations that you can share. <a href="https://support.google.com/photos?p=privpol_manage">Learn more</a></li><li>A flight confirmation email you receive may be used to create a equals www.youtube.com (Youtube)
Source: 63OBTU3B.js.2.drString found in binary or memory: var Cqa=function(a){var b=_.Os("HEAD",a);return b&&0!=b.length?b[0]:a.documentElement},Dqa=function(){var a=_.zb(_.ed(new _.dd(_.ad,"https://www.youtube.com/iframe_api"))),b={},c=b.document||document,d=_.id(a),e=_.ne(document,"SCRIPT"),f={Vw:e,rl:void 0},g=new _.Df(Bqa,f),h=null,l=null!=b.timeout?b.timeout:5E3;0<l&&(h=window.setTimeout(function(){d6(e,!0);g.Yc(new e6(1,"Timeout reached for loading script "+d))},l),f.rl=h);e.onload=e.onreadystatechange=function(){e.readyState&&"loaded"!=e.readyState&& equals www.youtube.com (Youtube)
Source: 63OBTU3B.js.2.drString found in binary or memory: var hv=(0,_.H)(Qh);var iv=ev+hv+"</li><li>"+(0,_.H)("YouTube settings:")+" ",jv='href="'+_.P(_.S(_.IZ({url:(0,_.M)("https://www.youtube.com/feed/history/search_history?utm_source=pp")},b)))+'" '+_.Z(),kv=(0,_.N)(jv),lv='href="'+_.P(_.S(_.IZ({url:(0,_.M)("https://www.youtube.com/feed/history?utm_source=pp")},b)))+'" '+_.Z(),mv=(0,_.N)(lv),nv="Pause and delete your <a "+(_.R(kv)+">YouTube Search History</a> and your <a "+(_.R(mv)+">YouTube Watch History</a>."));var ov=(0,_.H)(nv);var Qo=iv+ov+"</li><li>"+ equals www.youtube.com (Youtube)
Source: iframe_api[1].js.2.drString found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/77da52cd\/www-widgetapi.vflset\/www-widgetapi.js';if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.drString found in binary or memory: ve added examples, explanatory videos, and definitions for <a href="privacy/key-terms#key-terms">key terms</a>. And if you have any questions about this Privacy Policy, you can <a href="https://support.google.com/policies?p=privpol_privts" class="N6CPUe" target="_blank">contact us</a>.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infocollect" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Information Google collects</h1><p class="vxK8q">We want you to understand the types of information we collect as you use our services</p><p>We collect information to provide better services to all our users equals www.youtube.com (Youtube)
Source: unknownDNS traffic detected: queries for: lh3.googleusercontent.com
Source: viewform[1].htm.2.drString found in binary or memory: http://schema.org/CreativeWork/FormObject
Source: RRZ8IZP3.js.2.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: qp_sprite136[1].svg.2.drString found in binary or memory: http://www.bohemiancoding.com/sketch
Source: qp_sprite136[1].svg.2.drString found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.drString found in binary or memory: http://www.broofa.com
Source: base[1].js.2.drString found in binary or memory: http://www.youtube.com/videoplayback
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=48l-xdS4pXg
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=YlmVKT3Zvhw
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=ZdEIZNg3epQ
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: http://www.youtube.com/watch?v=ggoJFaE71W8
Source: base[1].js.2.drString found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.2.drString found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.2.drString found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.2.drString found in binary or memory: http://youtube.com/yt/2012/10/10
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=gdrive;cat=googl004;ord=7416266139698
Source: 0772XWI7.js.2.drString found in binary or memory: https://about.google
Source: 0772XWI7.js.2.dr, terms[1].htm.2.dr, privacy[1].htm.2.drString found in binary or memory: https://about.google/
Source: terms[1].htm.2.drString found in binary or memory: https://about.google/intl/en_GB/how-our-business-works
Source: RRZ8IZP3.js.2.drString found in binary or memory: https://accounts.google.com/ServiceLogin
Source: cb=gapi[1].js.2.drString found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: cb=gapi[1].js.2.drString found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: base[1].js.2.drString found in binary or memory: https://admin.youtube.com
Source: so[1].htm.2.drString found in binary or memory: https://ads.google.com/home/?subid
Source: privacy[1].htm.2.drString found in binary or memory: https://adssettings.google.com/?utm_source=pp
Source: 63OBTU3B.js.2.drString found in binary or memory: https://adssettings.google.com/authenticated?utm_source=pp
Source: 0772XWI7.js.2.dr, terms[1].htm.2.drString found in binary or memory: https://adssettings.google.com?utm_source=ps-terms
Source: analytics[1].js.2.drString found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.dr, cb=gapi[1].js.2.dr, so[1].htm.2.drString found in binary or memory: https://apis.google.com
Source: m=_b,_tp[1].js.2.dr, so[1].htm.2.drString found in binary or memory: https://apis.google.com/js/api.js
Source: so[1].htm.2.drString found in binary or memory: https://artsandculture.google.com/?hl
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://assistant.google.com/privacy-notice-childrens-features/
Source: so[1].htm.2.drString found in binary or memory: https://books.google.co.uk/bkshp?hl
Source: m=A4UTCb,sy33,cNHZjb,sy47,VXdfxd,KFVhZe,sy3d,sWGJ4b[1].js.2.dr, cb=gapi[1].js.2.drString found in binary or memory: https://clients6.google.com
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://contacts.google.com
Source: so[1].htm.2.drString found in binary or memory: https://contacts.google.com/?hl
Source: m=A4UTCb,sy33,cNHZjb,sy47,VXdfxd,KFVhZe,sy3d,sWGJ4b[1].js.2.drString found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: m=A4UTCb,sy33,cNHZjb,sy47,VXdfxd,KFVhZe,sy3d,sWGJ4b[1].js.2.drString found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: cb=gapi[1].js.2.drString found in binary or memory: https://content.googleapis.com
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://docs.Root
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://docs.goog.google.com/terms
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://docs.googRoot
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://docs.google.co
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://docs.google.com/
Source: so[1].htm.2.drString found in binary or memory: https://docs.google.com/document/?usp
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQ
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWj
Source: viewform[1].htm.2.drString found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/formRespo
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/reportabu
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?
Source: base[1].js.2.drString found in binary or memory: https://docs.google.com/get_video_info
Source: so[1].htm.2.drString found in binary or memory: https://docs.google.com/presentation/?usp
Source: so[1].htm.2.drString found in binary or memory: https://docs.google.com/spreadsheets/?usp
Source: cb=gapi[1].js.2.drString found in binary or memory: https://domains.google.com/suggest/flow
Source: so[1].htm.2.drString found in binary or memory: https://drive.google.com/
Source: so[1].htm.2.drString found in binary or memory: https://duo.google.com/?usp
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://e.com/privacyRoot
Source: so[1].htm.2.drString found in binary or memory: https://earth.google.com/web/
Source: 0772XWI7.js.2.drString found in binary or memory: https://ec.europa.eu/consumers/odr/main/index.cfm
Source: 0772XWI7.js.2.drString found in binary or memory: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32011L0083
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://families.google.com/familylink/privacy/child-policy/
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://fi.google.com/about/tos/#project-fi-privacy-notice
Source: 63OBTU3B.js.2.drString found in binary or memory: https://fiber.google.com/
Source: privacy[1].htm.2.drString found in binary or memory: https://fiber.google.com/legal/privacy.html
Source: css[1].css.2.drString found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: viewform[1].htm.2.drString found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlI3K.woff)
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94bt3.woff)
Source: icon[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v77/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvP.woff)
Source: css[2].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/productsans/v12/pxiDypQkot1TnFhsFMOfGShlEw.woff)
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu52xM.woff)
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9vAA.woff)
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmSU5vAA.woff)
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlvAA.woff)
Source: css[1].css.2.drString found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5g.woff)
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?vc=0&
Source: so[1].htm.2.drString found in binary or memory: https://hangouts.google.com/
Source: so[1].htm.2.drString found in binary or memory: https://jamboard.google.com/?usp
Source: so[1].htm.2.drString found in binary or memory: https://keep.google.com
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://kids.youtube.com/privacynotice
Source: viewform[1].htm.2.drString found in binary or memory: https://lh3.googleusercontent.com/JRTGIiCXPgaNAOlxZsj0XFpZvOZ1kv7BgVdHZzEAW3yYFFSjvIHNW-EfMnIBrNkhXv
Source: so[1].htm.2.drString found in binary or memory: https://mail.google.com/mail/
Source: so[1].htm.2.drString found in binary or memory: https://maps.google.co.uk/maps?hl
Source: so[1].htm.2.drString found in binary or memory: https://meet.google.com?hs
Source: privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/
Source: so[1].htm.2.drString found in binary or memory: https://myaccount.google.com/?utm_source
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/activitycontrols?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/dashboard?utm_source=pp
Source: privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/delete-services-or-account?utm_source=pp
Source: privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/deleteaccount?utm_source=pp
Source: privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/deleteservices?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/inactive?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/personal-info?utm_source=pp
Source: privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp&amp;utm_medium=Promo-in-product&amp;utm_ca
Source: 63OBTU3B.js.2.drString found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=p
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/profile?utm_source=pp
Source: terms[1].htm.2.drString found in binary or memory: https://myaccount.google.com/security-checkup
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/security-checkup?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myaccount.google.com/shared-endorsements?utm_source=pp
Source: privacy[1].htm.2.drString found in binary or memory: https://myactivity.google.com/?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myactivity.google.com/myactivity
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://myactivity.google.com/myactivity?utm_source=pp
Source: so[1].htm.2.drString found in binary or memory: https://news.google.com/
Source: so[1].htm.2.drString found in binary or memory: https://ogs.google.com/
Source: so[1].htm.2.drString found in binary or memory: https://ogs.google.com/widget/app/so
Source: base[1].js.2.drString found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: 63OBTU3B.js.2.drString found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=
Source: privacy[1].htm.2.drString found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=en
Source: so[1].htm.2.drString found in binary or memory: https://photos.google.com/?pageId
Source: so[1].htm.2.drString found in binary or memory: https://play.google.com/?hl
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.dr, 0772XWI7.js.2.dr, m=viewer_base[1].js.2.drString found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: cb=gapi[1].js.2.drString found in binary or memory: https://plus.google.com
Source: cb=gapi[1].js.2.drString found in binary or memory: https://plus.googleapis.com
Source: so[1].htm.2.drString found in binary or memory: https://podcasts.google.com/
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://policies.googl
Source: so[1].htm.2.drString found in binary or memory: https://policies.google.com
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/privacy
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/privacyAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/reportabus
Source: {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://policies.google.com/privacyRPrivacy
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/privacyolicies/favicon.ico
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/terms
Source: terms[1].htm.2.drString found in binary or memory: https://policies.google.com/terms/service-specific
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/terms1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/reportabus
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://policies.google.com/termsdGoogle
Source: 63OBTU3B.js.2.drString found in binary or memory: https://privacy.google.com/businesses/affiliates
Source: 63OBTU3B.js.2.drString found in binary or memory: https://readalong.google
Source: privacy[1].htm.2.drString found in binary or memory: https://readalong.google/intl/en_GB/privacy
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://safebrowsing.google.com/?utm_source=pp
Source: 0772XWI7.js.2.drString found in binary or memory: https://safety.google
Source: so[1].htm.2.drString found in binary or memory: https://ssl.gstatic.com
Source: RRZ8IZP3.js.2.drString found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: imagestore.dat.2.drString found in binary or memory: https://ssl.gstatic.com/docs/forms/device_home/android_192.pngJ
Source: viewform[1].htm.2.drString found in binary or memory: https://ssl.gstatic.com/docs/forms/social/social-forms-big-2.png
Source: viewform[1].htm.2.dr, reportabuse[1].htm.2.drString found in binary or memory: https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png
Source: imagestore.dat.1.drString found in binary or memory: https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.pngW
Source: so[1].htm.2.drString found in binary or memory: https://ssl.gstatic.com/gb/images/p1_799229b0.png
Source: so[1].htm.2.drString found in binary or memory: https://ssl.gstatic.com/gb/images/p2_edfc3681.png
Source: m=A4UTCb,sy33,cNHZjb,sy47,VXdfxd,KFVhZe,sy3d,sWGJ4b[1].js.2.drString found in binary or memory: https://ssl.gstatic.com/inproduct_help/guidedhelp/guide_inproduct.js
Source: imagestore.dat.2.drString found in binary or memory: https://ssl.gstatic.com/policies/favicon.ico
Source: imagestore.dat.2.drString found in binary or memory: https://ssl.gstatic.com/policies/favicon.ico~
Source: so[1].htm.2.drString found in binary or memory: https://stadia.google.com/
Source: analytics[1].js.2.drString found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: 63OBTU3B.js.2.drString found in binary or memory: https://support.google.com/
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/a?p=privpol_admin
Source: terms[1].htm.2.drString found in binary or memory: https://support.google.com/accounts/answer/1350409
Source: terms[1].htm.2.drString found in binary or memory: https://support.google.com/accounts/answer/40695
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts/answer/465?authuser=0#auto-delete
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=autocontacts&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_agereq&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_androidloc&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_controlads&amp;hl=en_US
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_endorse
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_location
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_lochistory
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_phone&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_whyad
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/accounts?p=privpol_whyad&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/adwordspolicy?p=privpol_p13nad
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/analytics?p=privpol_data&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/blogger?p=privpol_blog
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/chrome?p=privpol_chrsync
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/googlehome?p=privpol_actions&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/googlehome?p=privpol_homedata
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/googleplay?p=privpol_review
Source: terms[1].htm.2.drString found in binary or memory: https://support.google.com/legal/answer/3110420
Source: terms[1].htm.2.drString found in binary or memory: https://support.google.com/legal/topic/4558877
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/legal?p=privpol_remove
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/mail?p=privpol_signinactivity&amp;hl=en_US
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/photos?p=privpol_manage
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/policies/troubleshooter/7575787
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/policies?p=privpol_privts
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/sites?p=privpol_delete
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://support.google.com/trends?p=privpol_about
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_feed&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_incognito
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_locserp
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_privresults&amp;hl=en_US
Source: privacy[1].htm.2.drString found in binary or memory: https://support.google.com/websearch?p=privpol_searchactivity
Source: base[1].js.2.drString found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.2.drString found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.2.drString found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.2.drString found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.2.drString found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: privacy[1].htm.2.drString found in binary or memory: https://takeout.google.com/?utm_source=pp
Source: 0772XWI7.js.2.drString found in binary or memory: https://takeout.google.com/settings/takeout
Source: 63OBTU3B.js.2.drString found in binary or memory: https://takeout.google.com/settings/takeout?utm_source=pp
Source: so[1].htm.2.drString found in binary or memory: https://translate.google.co.uk/?hl
Source: 0772XWI7.js.2.drString found in binary or memory: https://transparencyreport.google.com
Source: privacy[1].htm.2.drString found in binary or memory: https://transparencyreport.google.com/user-data/overview
Source: m=_b,_tp[1].js.2.dr, m=viewer_base[1].js.2.drString found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: base[1].js.2.drString found in binary or memory: https://viacon.corp.google.com
Source: cb=gapi[1].js.2.drString found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: so[1].htm.2.drString found in binary or memory: https://www.blogger.com/
Source: 0772XWI7.js.2.drString found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.drString found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: 63OBTU3B.js.2.drString found in binary or memory: https://www.google.
Source: analytics[1].js.2.drString found in binary or memory: https://www.google.%/ads/ga-audiences
Source: so[1].htm.2.drString found in binary or memory: https://www.google.co.uk/finance
Source: so[1].htm.2.drString found in binary or memory: https://www.google.co.uk/intl/en/about/products
Source: so[1].htm.2.drString found in binary or memory: https://www.google.co.uk/save
Source: so[1].htm.2.drString found in binary or memory: https://www.google.co.uk/shopping?hl
Source: so[1].htm.2.drString found in binary or memory: https://www.google.co.uk/webhp
Source: terms[1].htm.2.dr, {C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drString found in binary or memory: https://www.google.com
Source: terms[1].htm.2.dr, privacy[1].htm.2.drString found in binary or memory: https://www.google.com/
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.drString found in binary or memory: https://www.google.com/_/og/promos/
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://www.google.com/about/datacenters/inside/locations
Source: terms[1].htm.2.drString found in binary or memory: https://www.google.com/about/philosophy.html
Source: so[1].htm.2.drString found in binary or memory: https://www.google.com/calendar
Source: so[1].htm.2.drString found in binary or memory: https://www.google.com/chrome/?brand
Source: privacy[1].htm.2.drString found in binary or memory: https://www.google.com/chrome/intl/en/privacy.html
Source: terms[1].htm.2.drString found in binary or memory: https://www.google.com/contact
Source: so[1].htm.2.drString found in binary or memory: https://www.google.com/enterprise/marketplace
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=formsdGoog
Source: privacy[1].htm.2.drString found in binary or memory: https://www.google.com/history/optout?utm_source=pp
Source: privacy[1].htm.2.drString found in binary or memory: https://www.google.com/intl/en/safetycenter/
Source: privacy[1].htm.2.drString found in binary or memory: https://www.google.com/landing/2step/?utm_source=pp
Source: 0772XWI7.js.2.dr, m=viewer_base[1].js.2.drString found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: terms[1].htm.2.drString found in binary or memory: https://www.google.com/permissions
Source: terms[1].htm.2.drString found in binary or memory: https://www.google.com/tools/feedback
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://www.google.com/work/apps/terms/education_privacy.html
Source: cb=gapi[1].js.2.drString found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: cb=gapi[1].js.2.drString found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: base[1].js.2.drString found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: analytics[1].js.2.drString found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: 63OBTU3B.js.2.drString found in binary or memory: https://www.gstatic.
Source: so[1].htm.2.drString found in binary or memory: https://www.gstatic.com
Source: viewform[1].htm.2.drString found in binary or memory: https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en_GB.eZyF8I6wdhY.O/d=1/ct=zgms/rs=AMjVe6ihXnQz
Source: terms[1].htm.2.dr, privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdentityPoliciesUi.en_US.t6APRRItk9c.
Source: so[1].htm.2.drString found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.-HaZVVzGarI.
Source: remote[1].js.2.drString found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.drString found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: viewform[1].htm.2.drString found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark_clr_74x24px.svg
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.drString found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.drString found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: terms[1].htm.2.drString found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_black_24dp.png
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/02698a3383765bd3c250471c53a86c5a.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/0d6da8d8c44e7e3ee95c4d56c19f04e1.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/13062c65605335a46d14656c46af3868.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/2951277d4c35389d7d304ed78d4fb6f6.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/3394102be0315326fd760e503b31c7b6.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/4c5ee41d52605ff6f43538d46a1c0d35.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/4f19891c43001db11efc8048f9bc7cdb.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/51cd09d6239edc9652bc05ad1d149a5c.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/546f2b674b407304a2570e71a216e509.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/a8e78fa7fa279aa946fe1a9d6a0508f2.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/acad335ad7ba163209d8c3e671b2c445.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/d1b68e2cd423aba52d74f02573df2d2d.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg
Source: privacy[1].htm.2.drString found in binary or memory: https://www.gstatic.com/policies/privacy/fb61fc4bfc85ad86f11342e699d685e9.svg
Source: m=A4UTCb,sy33,cNHZjb,sy47,VXdfxd,KFVhZe,sy3d,sWGJ4b[1].js.2.drString found in binary or memory: https://www.gstatic.com/support/help/staging/main_frame/help_panel_staging_binary.js
Source: 0772XWI7.js.2.dr, terms[1].htm.2.drString found in binary or memory: https://www.legislation.gov.uk/uksi/2013/3134/regulation/4/made
Source: iframe_api[1].js.2.drString found in binary or memory: https://www.youtube.com
Source: so[1].htm.2.drString found in binary or memory: https://www.youtube.com/?gl
Source: 0772XWI7.js.2.drString found in binary or memory: https://www.youtube.com/embed/
Source: privacy[1].htm.2.drString found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm.2.drString found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm.2.drString found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: ~DFB9A680932579ADEB.TMP.1.drString found in binary or memory: https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://www.youtube.com/feed/history/search_history?utm_source=pp
Source: 63OBTU3B.js.2.dr, privacy[1].htm.2.drString found in binary or memory: https://www.youtube.com/feed/history?utm_source=pp
Source: base[1].js.2.drString found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: 63OBTU3B.js.2.drString found in binary or memory: https://www.youtube.com/iframe_api
Source: 48l-xdS4pXg[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=48l-xdS4pXg
Source: YlmVKT3Zvhw[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=YlmVKT3Zvhw
Source: ZdEIZNg3epQ[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=ZdEIZNg3epQ
Source: ggoJFaE71W8[1].htm.2.drString found in binary or memory: https://www.youtube.com/watch?v=ggoJFaE71W8
Source: base[1].js.2.drString found in binary or memory: https://youtu.be/
Source: base[1].js.2.drString found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: RRZ8IZP3.js.2.drString found in binary or memory: https://youtube.com/embed/
Source: base[1].js.2.drString found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
Source: unknownNetwork traffic detected: HTTP traffic on port 49726 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49725 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49726
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49725
Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
Source: classification engineClassification label: clean0.win@3/104@4/2
Source: C:\Program Files\internet explorer\iexplore.exeFile created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\HighJump to behavior
Source: C:\Program Files\internet explorer\iexplore.exeFile created: C:\Users\user\AppData\Local\Temp\~DF88F3264A04E74963.TMPJump to behavior
Source: C:\Program Files\internet explorer\iexplore.exeFile read: C:\Users\desktop.iniJump to behavior
Source: unknownProcess created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknownProcess created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4892 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exeProcess created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4892 CREDAT:17410 /prefetch:2Jump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exeFile opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dllJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath InterceptionProcess Injection1Masquerading1OS Credential DumpingFile and Directory Discovery1Remote ServicesData from Local SystemExfiltration Over Other Network MediumEncrypted Channel2Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsProcess Injection1LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothNon-Application Layer Protocol1Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
Domain AccountsAt (Linux)Logon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared DriveAutomated ExfiltrationApplication Layer Protocol2Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?vc=0&c=0&w=1&flr=00%Avira URL Cloudsafe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

SourceDetectionScannerLabelLink
https://e.com/privacyRoot0%Avira URL Cloudsafe
http://www.broofa.com0%URL Reputationsafe
http://www.broofa.com0%URL Reputationsafe
http://www.broofa.com0%URL Reputationsafe
http://www.broofa.com0%URL Reputationsafe
https://translate.google.co.uk/?hl0%URL Reputationsafe
https://translate.google.co.uk/?hl0%URL Reputationsafe
https://translate.google.co.uk/?hl0%URL Reputationsafe
https://translate.google.co.uk/?hl0%URL Reputationsafe
https://www.google.co.uk/intl/en/about/products0%VirustotalBrowse
https://www.google.co.uk/intl/en/about/products0%Avira URL Cloudsafe
https://docs.Root0%Avira URL Cloudsafe
https://about.google/intl/en_GB/how-our-business-works0%VirustotalBrowse
https://about.google/intl/en_GB/how-our-business-works0%Avira URL Cloudsafe
https://www.google.co.uk/save0%URL Reputationsafe
https://www.google.co.uk/save0%URL Reputationsafe
https://www.google.co.uk/save0%URL Reputationsafe
https://www.google.co.uk/save0%URL Reputationsafe
https://www.google.co.uk/webhp0%Avira URL Cloudsafe
https://www.google.0%URL Reputationsafe
https://www.google.0%URL Reputationsafe
https://www.google.0%URL Reputationsafe
https://books.google.co.uk/bkshp?hl0%URL Reputationsafe
https://books.google.co.uk/bkshp?hl0%URL Reputationsafe
https://books.google.co.uk/bkshp?hl0%URL Reputationsafe
https://www.legislation.gov.uk/uksi/2013/3134/regulation/4/made0%URL Reputationsafe
https://www.legislation.gov.uk/uksi/2013/3134/regulation/4/made0%URL Reputationsafe
https://www.legislation.gov.uk/uksi/2013/3134/regulation/4/made0%URL Reputationsafe
https://www.gstatic.0%URL Reputationsafe
https://www.gstatic.0%URL Reputationsafe
https://www.gstatic.0%URL Reputationsafe
https://about.google/0%URL Reputationsafe
https://about.google/0%URL Reputationsafe
https://about.google/0%URL Reputationsafe
https://www.google.co.uk/finance0%Avira URL Cloudsafe
http://www.bohemiancoding.com/sketch0%URL Reputationsafe
http://www.bohemiancoding.com/sketch0%URL Reputationsafe
http://www.bohemiancoding.com/sketch0%URL Reputationsafe
https://docs.googRoot0%Avira URL Cloudsafe
http://www.bohemiancoding.com/sketch/ns0%URL Reputationsafe
http://www.bohemiancoding.com/sketch/ns0%URL Reputationsafe
http://www.bohemiancoding.com/sketch/ns0%URL Reputationsafe
https://docs.google.co0%URL Reputationsafe
https://docs.google.co0%URL Reputationsafe
https://docs.google.co0%URL Reputationsafe
https://policies.googl0%URL Reputationsafe
https://policies.googl0%URL Reputationsafe
https://policies.googl0%URL Reputationsafe
https://maps.google.co.uk/maps?hl0%URL Reputationsafe
https://maps.google.co.uk/maps?hl0%URL Reputationsafe
https://maps.google.co.uk/maps?hl0%URL Reputationsafe
https://www.google.co.uk/shopping?hl0%URL Reputationsafe
https://www.google.co.uk/shopping?hl0%URL Reputationsafe
https://www.google.co.uk/shopping?hl0%URL Reputationsafe
https://about.google0%URL Reputationsafe
https://about.google0%URL Reputationsafe
https://about.google0%URL Reputationsafe
https://safety.google0%URL Reputationsafe
https://safety.google0%URL Reputationsafe
https://safety.google0%URL Reputationsafe
https://www.google.%/ads/ga-audiences0%URL Reputationsafe
https://www.google.%/ads/ga-audiences0%URL Reputationsafe
https://www.google.%/ads/ga-audiences0%URL Reputationsafe
https://readalong.google/intl/en_GB/privacy0%Avira URL Cloudsafe
https://readalong.google0%URL Reputationsafe
https://readalong.google0%URL Reputationsafe
https://readalong.google0%URL Reputationsafe

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
pagead46.l.doubleclick.net
172.217.168.66
truefalse
    high
    googlehosted.l.googleusercontent.com
    216.58.215.225
    truefalse
      high
      googleads.g.doubleclick.net
      unknown
      unknownfalse
        high
        www.youtube.com
        unknown
        unknownfalse
          high
          lh3.googleusercontent.com
          unknown
          unknownfalse
            high
            static.doubleclick.net
            unknown
            unknownfalse
              high

              URLs from Memory and Binaries

              NameSourceMaliciousAntivirus DetectionReputation
              https://e.com/privacyRoot{C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drfalse
              • Avira URL Cloud: safe
              unknown
              http://www.broofa.comrs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js.2.drfalse
              • URL Reputation: safe
              • URL Reputation: safe
              • URL Reputation: safe
              • URL Reputation: safe
              unknown
              https://translate.google.co.uk/?hlso[1].htm.2.drfalse
              • URL Reputation: safe
              • URL Reputation: safe
              • URL Reputation: safe
              • URL Reputation: safe
              unknown
              https://www.youtube.com/embed/0772XWI7.js.2.drfalse
                high
                https://www.youtube.com/watch?v=ggoJFaE71W8ggoJFaE71W8[1].htm.2.drfalse
                  high
                  https://youtube.com/embed/RRZ8IZP3.js.2.drfalse
                    high
                    https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=privacy[1].htm.2.drfalse
                      high
                      https://www.google.co.uk/intl/en/about/productsso[1].htm.2.drfalse
                      • 0%, Virustotal, Browse
                      • Avira URL Cloud: safe
                      unknown
                      https://docs.Root{C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drfalse
                      • Avira URL Cloud: safe
                      unknown
                      http://www.youtube.com/watch?v=48l-xdS4pXg48l-xdS4pXg[1].htm.2.drfalse
                        high
                        http://youtube.com/streaming/otf/durations/112015base[1].js.2.drfalse
                          high
                          https://www.youtube.com/feed/history/search_history?utm_source=pp63OBTU3B.js.2.dr, privacy[1].htm.2.drfalse
                            high
                            https://about.google/intl/en_GB/how-our-business-worksterms[1].htm.2.drfalse
                            • 0%, Virustotal, Browse
                            • Avira URL Cloud: safe
                            unknown
                            http://youtube.com/streaming/metadata/segment/102015base[1].js.2.drfalse
                              high
                              https://www.youtube.comiframe_api[1].js.2.drfalse
                                high
                                https://youtu.be/base[1].js.2.drfalse
                                  high
                                  https://www.youtube.com/iframe_api63OBTU3B.js.2.drfalse
                                    high
                                    https://www.google.co.uk/saveso[1].htm.2.drfalse
                                    • URL Reputation: safe
                                    • URL Reputation: safe
                                    • URL Reputation: safe
                                    • URL Reputation: safe
                                    unknown
                                    https://www.google.co.uk/webhpso[1].htm.2.drfalse
                                    • Avira URL Cloud: safe
                                    unknown
                                    https://admin.youtube.combase[1].js.2.drfalse
                                      high
                                      https://www.google.63OBTU3B.js.2.drfalse
                                      • URL Reputation: safe
                                      • URL Reputation: safe
                                      • URL Reputation: safe
                                      unknown
                                      https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=~DFB9A680932579ADEB.TMP.1.drfalse
                                        high
                                        https://www.youtube.com/feed/history?utm_source=pp63OBTU3B.js.2.dr, privacy[1].htm.2.drfalse
                                          high
                                          https://books.google.co.uk/bkshp?hlso[1].htm.2.drfalse
                                          • URL Reputation: safe
                                          • URL Reputation: safe
                                          • URL Reputation: safe
                                          unknown
                                          http://www.youtube.com/watch?v=ggoJFaE71W8ggoJFaE71W8[1].htm.2.drfalse
                                            high
                                            https://stats.g.doubleclick.net/j/collectanalytics[1].js.2.drfalse
                                              high
                                              https://2542116.fls.doubleclick.net/activityi;src=2542116;type=gdrive;cat=googl004;ord=7416266139698~DFB9A680932579ADEB.TMP.1.drfalse
                                                high
                                                https://www.legislation.gov.uk/uksi/2013/3134/regulation/4/made0772XWI7.js.2.dr, terms[1].htm.2.drfalse
                                                • URL Reputation: safe
                                                • URL Reputation: safe
                                                • URL Reputation: safe
                                                unknown
                                                https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=~DFB9A680932579ADEB.TMP.1.drfalse
                                                  high
                                                  https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32011L00830772XWI7.js.2.drfalse
                                                    high
                                                    https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=privacy[1].htm.2.drfalse
                                                      high
                                                      http://www.apache.org/licenses/LICENSE-2.0RRZ8IZP3.js.2.drfalse
                                                        high
                                                        https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=~DFB9A680932579ADEB.TMP.1.drfalse
                                                          high
                                                          https://www.youtube.com/generate_204?cpn=base[1].js.2.drfalse
                                                            high
                                                            https://www.gstatic.63OBTU3B.js.2.drfalse
                                                            • URL Reputation: safe
                                                            • URL Reputation: safe
                                                            • URL Reputation: safe
                                                            unknown
                                                            https://youtube.com/api/drm/fps?ek=uninitializedbase[1].js.2.drfalse
                                                              high
                                                              https://about.google/0772XWI7.js.2.dr, terms[1].htm.2.dr, privacy[1].htm.2.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://www.google.co.uk/financeso[1].htm.2.drfalse
                                                              • Avira URL Cloud: safe
                                                              unknown
                                                              http://www.bohemiancoding.com/sketchqp_sprite136[1].svg.2.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://docs.googRoot{C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drfalse
                                                              • Avira URL Cloud: safe
                                                              unknown
                                                              http://www.bohemiancoding.com/sketch/nsqp_sprite136[1].svg.2.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://docs.google.co{C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://policies.googl{C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat.1.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://maps.google.co.uk/maps?hlso[1].htm.2.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://www.google.co.uk/shopping?hlso[1].htm.2.drfalse
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              • URL Reputation: safe
                                                              unknown
                                                              https://www.youtube.com/watch?v=ZdEIZNg3epQZdEIZNg3epQ[1].htm.2.drfalse
                                                                high
                                                                http://youtube.com/yt/2012/10/10base[1].js.2.drfalse
                                                                  high
                                                                  https://ec.europa.eu/consumers/odr/main/index.cfm0772XWI7.js.2.drfalse
                                                                    high
                                                                    https://about.google0772XWI7.js.2.drfalse
                                                                    • URL Reputation: safe
                                                                    • URL Reputation: safe
                                                                    • URL Reputation: safe
                                                                    unknown
                                                                    https://safety.google0772XWI7.js.2.drfalse
                                                                    • URL Reputation: safe
                                                                    • URL Reputation: safe
                                                                    • URL Reputation: safe
                                                                    unknown
                                                                    http://www.youtube.com/watch?v=ZdEIZNg3epQZdEIZNg3epQ[1].htm.2.drfalse
                                                                      high
                                                                      https://www.google.%/ads/ga-audiencesanalytics[1].js.2.drfalse
                                                                      • URL Reputation: safe
                                                                      • URL Reputation: safe
                                                                      • URL Reputation: safe
                                                                      low
                                                                      https://www.youtube.com/watch?v=48l-xdS4pXg48l-xdS4pXg[1].htm.2.drfalse
                                                                        high
                                                                        http://www.youtube.com/videoplaybackbase[1].js.2.drfalse
                                                                          high
                                                                          https://kids.youtube.com/privacynotice63OBTU3B.js.2.dr, privacy[1].htm.2.drfalse
                                                                            high
                                                                            http://schema.org/CreativeWork/FormObjectviewform[1].htm.2.drfalse
                                                                              high
                                                                              https://www.youtube.com/?glso[1].htm.2.drfalse
                                                                                high
                                                                                https://www.blogger.com/so[1].htm.2.drfalse
                                                                                  high
                                                                                  https://readalong.google/intl/en_GB/privacyprivacy[1].htm.2.drfalse
                                                                                  • Avira URL Cloud: safe
                                                                                  unknown
                                                                                  http://www.youtube.com/watch?v=YlmVKT3ZvhwYlmVKT3Zvhw[1].htm.2.drfalse
                                                                                    high
                                                                                    http://youtube.com/drm/2012/10/10base[1].js.2.drfalse
                                                                                      high
                                                                                      https://readalong.google63OBTU3B.js.2.drfalse
                                                                                      • URL Reputation: safe
                                                                                      • URL Reputation: safe
                                                                                      • URL Reputation: safe
                                                                                      unknown
                                                                                      https://www.youtube.com/watch?v=YlmVKT3ZvhwYlmVKT3Zvhw[1].htm.2.drfalse
                                                                                        high
                                                                                        https://www.youtube.com/embed/48l-xdS4pXg?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=privacy[1].htm.2.drfalse
                                                                                          high
                                                                                          https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=~DFB9A680932579ADEB.TMP.1.drfalse
                                                                                            high

                                                                                            Contacted IPs

                                                                                            • No. of IPs < 25%
                                                                                            • 25% < No. of IPs < 50%
                                                                                            • 50% < No. of IPs < 75%
                                                                                            • 75% < No. of IPs

                                                                                            Public

                                                                                            IPDomainCountryFlagASNASN NameMalicious
                                                                                            172.217.168.66
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            216.58.215.225
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse

                                                                                            General Information

                                                                                            Joe Sandbox Version:31.0.0 Red Diamond
                                                                                            Analysis ID:324345
                                                                                            Start date:29.11.2020
                                                                                            Start time:11:18:37
                                                                                            Joe Sandbox Product:CloudBasic
                                                                                            Overall analysis duration:0h 6m 18s
                                                                                            Hypervisor based Inspection enabled:false
                                                                                            Report type:full
                                                                                            Cookbook file name:browseurl.jbs
                                                                                            Sample URL:https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?vc=0&c=0&w=1&flr=0
                                                                                            Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
                                                                                            Number of analysed new started processes analysed:24
                                                                                            Number of new started drivers analysed:0
                                                                                            Number of existing processes analysed:0
                                                                                            Number of existing drivers analysed:0
                                                                                            Number of injected processes analysed:0
                                                                                            Technologies:
                                                                                            • HCA enabled
                                                                                            • EGA enabled
                                                                                            • AMSI enabled
                                                                                            Analysis Mode:default
                                                                                            Analysis stop reason:Timeout
                                                                                            Detection:CLEAN
                                                                                            Classification:clean0.win@3/104@4/2
                                                                                            Cookbook Comments:
                                                                                            • Adjust boot time
                                                                                            • Enable AMSI
                                                                                            • Browsing link: https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/reportabuse?source=https://docs.google.com/forms/d/e/1FAIpQLSckGTxfmWeyr5TJ54xuF5mX2ztjdEWjndONvnNjag8DJq7WHA/viewform?vc%3D0%26c%3D0%26w%3D1%26flr%3D0
                                                                                            • Browsing link: https://policies.google.com/terms
                                                                                            • Browsing link: https://policies.google.com/privacy
                                                                                            • Browsing link: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms
                                                                                            Warnings:
                                                                                            Show All
                                                                                            • Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
                                                                                            • Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe
                                                                                            • Excluded IPs from analysis (whitelisted): 40.88.32.150, 104.42.151.234, 104.83.120.32, 172.217.168.46, 216.58.215.234, 216.58.215.227, 172.217.168.3, 51.104.139.180, 172.217.168.68, 172.217.168.78, 216.58.215.238, 172.217.168.14, 152.199.19.161, 104.79.90.110, 172.217.168.70, 104.43.193.48, 2.20.142.210, 2.20.142.209, 92.122.213.247, 92.122.213.194, 52.155.217.156, 20.54.26.129
                                                                                            • Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, docs.google.com, au.download.windowsupdate.com.edgesuite.net, ssl.gstatic.com, arc.msn.com.nsatc.net, policies.google.com, ogs.google.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, skypedataprdcoleus15.cloudapp.net, go.microsoft.com, audownload.windowsupdate.nsatc.net, www.google.com, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, www.gstatic.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, au-bg-shim.trafficmanager.net, www.google-analytics.com, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, fonts.googleapis.com, fs.microsoft.com, plus.l.google.com, www-google-analytics.l.google.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, displaycatalog.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, static-doubleclick-net.l.google.com, skypedataprdcolcus15.cloudapp.net, ris.api.iris.microsoft.com, youtube-ui.l.google.com, www3.l.google.com, play.google.com, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, skypedataprdcolwus16.cloudapp.net, apis.google.com, cs9.wpc.v0cdn.net
                                                                                            • Report size getting too big, too many NtDeviceIoControlFile calls found.

                                                                                            Simulations

                                                                                            Behavior and APIs

                                                                                            No simulations

                                                                                            Joe Sandbox View / Context

                                                                                            IPs

                                                                                            No context

                                                                                            Domains

                                                                                            No context

                                                                                            ASN

                                                                                            No context

                                                                                            JA3 Fingerprints

                                                                                            No context

                                                                                            Dropped Files

                                                                                            No context

                                                                                            Created / dropped Files

                                                                                            C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\TTI0RQ6O\www.youtube[1].xml
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines, with no line terminators
                                                                                            Category:dropped
                                                                                            Size (bytes):3737
                                                                                            Entropy (8bit):5.106516094717587
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:Uw4kV3quxWNM+QFFTbTbTbTLDbTLDbTLDbTLhd:Us
                                                                                            MD5:6F6C126BBEA2B571FFF386C1E0180B48
                                                                                            SHA1:6657F9BA3B153E29A61269AFB7C663365A0C0CB2
                                                                                            SHA-256:4360E61D8B4CE174B5DA8D09A222ADE0DF463D2B06244B2F78580A9D76CE43A9
                                                                                            SHA-512:7AC1DB540AC55B173872B3609A437F87F0193905FC8CE19CB809493CDDEF7709BF83711EF8308FD2E59CDA6BC025053B2989100BE114C641408769CD61074D53
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: <root></root><root></root><root><item name="__sak" value="1" ltime="2636558960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2670598960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2689198960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2712398960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2724278960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2754038960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2760918960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2817958960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2825358960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="2883678960" htime="30852740" /></root><root></root><root><item name="__sak" value="1" ltime="28
                                                                                            C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{C8352C6B-3277-11EB-90E4-ECF4BB862DED}.dat
                                                                                            Process:C:\Program Files\internet explorer\iexplore.exe
                                                                                            File Type:Microsoft Word Document
                                                                                            Category:dropped
                                                                                            Size (bytes):39000
                                                                                            Entropy (8bit):1.9217291750550698
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:rpZaZz2m9WaVtanCfanxYBMahxIaTxmaTcIfaTcS8raTcscfaTcQLraTc8g:rpZaZz2m9Wethf7BMVRifM8rOcfCLrmg
                                                                                            MD5:B9938E0EE180DF4E164F260043A930B0
                                                                                            SHA1:15C4C66141D0EEA6C5C62187024AE97B19FCE035
                                                                                            SHA-256:5482DAEC0B152C4A445CF7CB1D4FE3AE1E1CD817857654955821105B44AA8B46
                                                                                            SHA-512:1DD02AC10820F121249ED1820941AB84B215F2F26B506E52EAB335C11048F5FD80DDB43821161C9C4914B640592F85C03E34E008BBC319A24B7D8B3668DDA6AB
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                            C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C8352C6D-3277-11EB-90E4-ECF4BB862DED}.dat
                                                                                            Process:C:\Program Files\internet explorer\iexplore.exe
                                                                                            File Type:Microsoft Word Document
                                                                                            Category:dropped
                                                                                            Size (bytes):113928
                                                                                            Entropy (8bit):2.781450162942084
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:rGuUpiGhfMsubOyPDpTm4qUKBOUFvTG5oUGjqpupRNm1uwt/M3eZx5AeQuoD9TsL:cRmC+ABjTNwo21rs9mX5qAqY
                                                                                            MD5:5A19C3DC14A04950FBF13439F23884E1
                                                                                            SHA1:34371E03D880E4CBAA4095EA8A8FED288C07DCE2
                                                                                            SHA-256:02FEE197133686B7984543FF86984C36117ADC0DE60DD7D21CAD91DDB0ACFB8E
                                                                                            SHA-512:4943C4654D7ED3768D9F1F07174C9DE8D4D0B9712BB2E544386F1A9FFBB4986A97FF4D4575B5C9A99C46996E86F60B541311C5A799B79B938A8504CB8D615858
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                            C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C8352C6E-3277-11EB-90E4-ECF4BB862DED}.dat
                                                                                            Process:C:\Program Files\internet explorer\iexplore.exe
                                                                                            File Type:Microsoft Word Document
                                                                                            Category:dropped
                                                                                            Size (bytes):19032
                                                                                            Entropy (8bit):1.5833391045795056
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:IwoGcprZGwpaAG4pQcGrapbSGrGQpKgG7HpRVsTGIpX23GApm:rcZTQg6aBSGFA7TV4Fug
                                                                                            MD5:C8AEDA4B44185DB552034629B42CC5CD
                                                                                            SHA1:56286E26E6BB500313BE1BC0CBE9833430853238
                                                                                            SHA-256:9DDB27EF283B8E14D28DAF8B2F75961010115C8503DE7520CB34DBD3B7B16F36
                                                                                            SHA-512:67933D12AE9D8FFE69E64793BC619369B81A811C8189D7C87B0A8BC03B375D47895FA522151F0BD343C20D8C4B7CC021DABB8C05B7A24900B48B1AC6052EE723
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                            C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:data
                                                                                            Category:modified
                                                                                            Size (bytes):8228
                                                                                            Entropy (8bit):5.347485332286812
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:Q/y6x1x1xamSaqX1IJct+I47v+rcqlBPG9u:Qxx1x1x2aqX1I6tPqWceBPG0
                                                                                            MD5:00DEB906747240F0DB2B43EB1FF693E4
                                                                                            SHA1:667B6114275978D58A7B3AE80AC7372B87C9325F
                                                                                            SHA-256:D106447EA2C0F9135C2EA45FCC28779B2C5E2C0AD47E051BA4592AB17D7C75B5
                                                                                            SHA-512:1C288DB67C31E64D1BEE691543AE7D7D37D9802E9C4458B5260A3E584EBB55135E7251CBB0319F9CB98988F141FC9E07887D0D941A05DB38FBAB5A83DAC7DF5F
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: >.h.t.t.p.s.:././.s.s.l...g.s.t.a.t.i.c...c.o.m./.d.o.c.s./.f.o.r.m.s./.d.e.v.i.c.e._.h.o.m.e./.a.n.d.r.o.i.d._.1.9.2...p.n.g.J....PNG........IHDR.............R.l.....sRGB.........IDATx.....u..... ..f*.fdzH[.@.OQ x.[...DR.$=w..R.....oy.J. ...e.$..t;......4......{.iy..;..yw.yf..~...3..?..l9......>...7M.3IHV/k.W....4..I.n.!\L;.3./....l........''V......$.|=...!..KiHN..?zn...............EF,B .@.^.=...B.=.........d....%v..j...G.f....N..:..-..e..&I ....o{$."....6.[...S..2.$....v.<...Q....{\|...DY......u... ...6..../."..@..em..@._.E.... .......... ..@.....m.Q.!@.".(k. .....B..D.Q.&@...E].......M..h........DY......u... ...6..../."..@..em..@._.E.... .......... ..@.....m.Q.!@.".(k. .....B..D.Q.&@...E].......M..h........DY......u... ...6..../."..@..em..@._.E.... .......... ..@.....m.Q.!@.".(k. .....B..D.Q.&@...E].......M..h........DY......u... ...6..../."..@..em..@._.E..#u..s/N..^].6OM......4.~?.......n...TF+B...7.\.v~.x;....m..Tfg....5...A........ej..}+.%."}.d...J....
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\0d6da8d8c44e7e3ee95c4d56c19f04e1[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):2705
                                                                                            Entropy (8bit):5.15375624281808
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:+GzHx4GLZ/W1wHxJCXvGUQj+ek/Ij0jiO0ijy1uo:+G2UEJIj0jH0PH
                                                                                            MD5:0D6DA8D8C44E7E3EE95C4D56C19F04E1
                                                                                            SHA1:9DE1568D596F174CD4646DB5745B58695677B069
                                                                                            SHA-256:FAA35DC181EB792DB0A4BE4E7031EEC86C044E52773CB082652B788D3B838E72
                                                                                            SHA-512:D47689B9681F4D5DFF7FD18B4F76F9FBB372B4EB9ADC3FE7C177ED79D19CF2D912831729C73589C4DA833D3D83746DAD3C593A92A5A81440AAE17874F8DDC70C
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/0d6da8d8c44e7e3ee95c4d56c19f04e1.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="24" y1="77" x2="48" y2="77" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.116" stop-color="#9aa0a6" stop-opacity="0.054"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.201"/>. <stop offset="0.546" stop-color="#9aa0a6" stop-opacity="0.44"/>. <stop offset="0.823" stop-color="#9aa0a6" stop-opacity="0.768"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="48" y1="80" x2="48" y2="16" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="0.043" stop-color="#1967d2" stop-opacity="0.942"/>. <stop offset="0.305" stop-color="#1967d2" stop-opacity="0.611"/>. <stop offset="0.54" stop-color="#1967d2" sto
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\39b031d352a2e1586cf50ac7f2bbc18b[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):12378
                                                                                            Entropy (8bit):5.041888208682257
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+RoMM2anrsHcxjBBN49qDLj5QeUFUDzi3pnDseedgejR7cestQoumbNvR4VBdwH6:PAHZ9q/j2eUqvi+/QNvOVBMwsV8
                                                                                            MD5:39B031D352A2E1586CF50AC7F2BBC18B
                                                                                            SHA1:5F714582443C158EAC42F4A2368E29488A01E365
                                                                                            SHA-256:9EE03AE2943928AEA61E62DA6BD2338CA4B244C756D78B8888C1693731401A21
                                                                                            SHA-512:44C3255DAC07BA0D8A5CA849649515A095AA40BAE13BF1710E009F8E9FFE96BF4EE573B073DC4340DE738CA110653FB48A83C5BE1008C61F3EB41A76FD741789
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="52" y1="49" x2="52" y2="71" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#202124"/>. <stop offset="1" stop-color="#202124" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="52" y1="85" x2="52" y2="157" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#188038"/>. <stop offset="1" stop-color="#188038" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="24" y1="154" x2="44" y2="154" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\4165cd3aa643abb80fe1953668f67551[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):21529
                                                                                            Entropy (8bit):5.054443624807617
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:X60/6I3ppwx5qaqdT0TM2uTQOi4Rsd22Z1CrTqtqj3UGs8GsCv31Y9YUxzfmUY:/3ppwx5ncTBRsd22Z1CrT8u3M3unY
                                                                                            MD5:4165CD3AA643ABB80FE1953668F67551
                                                                                            SHA1:5CB99354ADCF5162232CF6947AEA1423426CF12F
                                                                                            SHA-256:F3FF1A6BB6153FA3F31FC17B1A8E57F835BB0DA7A9EB6430CFF660A02DEE7E54
                                                                                            SHA-512:070292AB655F2879879DF09306E5F57BFFCD075B7CBEA27156DD19D981B6E40F441C5DE05EF40DB0AFDB1D6294B4E02A0C304E5E67C4EC4F9011483C0FF7BD8A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="240" y1="94" x2="316" y2="94" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="272" y1="68" x2="272" y2="72" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6"/>. <stop offset="1" stop-color="#bdc1c6" st
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\48l-xdS4pXg[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):43363
                                                                                            Entropy (8bit):5.920959365134681
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:Q7aC8R6oVfOQ85cct+tJ/mtjNF525JyPrMY8NX:7qAJ/ANhL8R
                                                                                            MD5:D42FEFEF3E852763B9FD3951745886E0
                                                                                            SHA1:134F04B71AEF206A0803249DA13031CECF446F4B
                                                                                            SHA-256:8E205CFB4E73635201B9F635331091EFACF1B40792D2BA3B20C1009541346AFB
                                                                                            SHA-512:05E9EC67B14AEA3B13204FFFE29FBCBBAE1290AFB842021E213C84D4356B6D456D7C8E09EEE456529F222A7FD0C559FA76FEB01D9595AF8D2C369F48B3BA3882
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1
                                                                                            Preview: <!DOCTYPE html> <html lang="en" dir="ltr" data-cast-api-enabled="true">.<head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" >@font-face{font-family:'Roboto';font-style:italic;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOjCnqEu92Fr1Mu51S7ACc6CsI.woff)format('woff');}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzQ.woff)format('woff');}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc-.woff)format('woff');}</style><script name="www-roboto" >if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "");document.fonts.load("500 10pt Roboto", "");}</script> <l
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\546f2b674b407304a2570e71a216e509[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):20864
                                                                                            Entropy (8bit):4.925372381610842
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:7HksMYZuvecIQW8rzTLbzDAEIHN8Ssvopa:7HU12wvopa
                                                                                            MD5:546F2B674B407304A2570E71A216E509
                                                                                            SHA1:0ADEC43FBC9DFC2AB1587FD3F6A673FE227B625B
                                                                                            SHA-256:9D42DE0208263D6D6E7F1A627677B426CCB3E492334293B794CC141F9FA0FB3B
                                                                                            SHA-512:D8CDC2C086A94E00D2D14CED3D87CB17235AC9F541CD2C6A28F438FA8CDFD064D832B53E40D58CAD4C4D5044FDDCF777DF2BBC2C2902874C1B23EF3096FE2C05
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/546f2b674b407304a2570e71a216e509.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="13" y1="105" x2="49" y2="105" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" stop-color="#bdc1c6" stop-opacity="0.021"/>. <stop offset="0.279" stop-color="#bdc1c6" stop-opacity="0.084"/>. <stop offset="0.424" stop-color="#bdc1c6" stop-opacity="0.189"/>. <stop offset="0.57" stop-color="#bdc1c6" stop-opacity="0.336"/>. <stop offset="0.718" stop-color="#bdc1c6" stop-opacity="0.525"/>. <stop offset="0.864" stop-color="#bdc1c6" stop-opacity="0.753"/>. <stop offset="1" stop-color="#bdc1c6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="39" y1="166" x2="75" y2="166" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15"
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\63OBTU3B.js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):442941
                                                                                            Entropy (8bit):5.71790194823665
                                                                                            Encrypted:false
                                                                                            SSDEEP:6144:HuTCU4M4Of7eFgGQ/sU+YmzcbMHVsP4aks:K57eny+9yPj
                                                                                            MD5:B61C45D4520D1D304449E3507DB2B71B
                                                                                            SHA1:7002159D31381E1C1BE54C1189E2D0331FE0575F
                                                                                            SHA-256:8830A125BFAB238EE4FA51AF5972ADA5E2BA612308121521E318E146E1508B7A
                                                                                            SHA-512:1AACCDC28BB2ACDF224F3A084BA8D9C7ED06D860AE6B5DAF07264B4A7A0FEDA3EF70BDBA74C8803F689D81B332415A8CCAE920F45843ED9FBE5A27E5073ADDA2
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=\"snapping\"],.nhh4Ic[data-state=\"cancelled\"]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;-ms-transform:scale(0.7);transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,0.2);transition:opacity 400ms}.nhh4Ic[data-state=\"resting\"] .MGUFnf,.nhh4Ic[data-state=\"cooldown\"] .MGUFnf{-ms-transform:scale(0);transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;-ms-transform:translateZ(1px);transform:translateZ(1px)}.nhh4Ic[data-past-threshold=\"false\"] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWiz
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\C9CX7M2Y.js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):70194
                                                                                            Entropy (8bit):5.6596610058357335
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:4hRIp7aKfSbepLbgc+vjVl42l9cLga9kLc8QZfHH6vCg:3haKfSbepLbgtFa9kI7BavCg
                                                                                            MD5:7EA795532E60D62A5D1C0791C8A296A4
                                                                                            SHA1:BD0BD25196F9625DC78E464F3A249EE4DF536D79
                                                                                            SHA-256:8D5A9E458869575D13697AD5C68441FA88DE373C3FF46013C7B2FA963322E35F
                                                                                            SHA-512:E4F0025B16BE326AB87A2877DBFBAA16A1C307EDB34A91F12A52AB3041479A53FA012A8AF84BE35EBA23EA407970182CCA653DA1C27F96077CBA75AF09592D1E
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_v=this.default_v||{};(function(_){var window=this;.try{.var spa,tpa,upa;_.Ku=function(a,b){a=JSON.parse("["+a.substring(4));return new b(a)};spa=function(a,b){return!!a.H[b]};tpa=function(a,b){if(a.W.has(b))return!0;a=_.Qa(a.V);for(var c=a.next();!c.done;c=a.next())if(tpa(_.go(c.value),b))return!0;return!1};_.Lu=function(a,b){if(null==a.H)return null;a=a.rb();return _.Ku(a,b)};upa=function(a){var b;_.dp(a,function(c){return c.__owner?(b=c.__owner,!0):!1},!0);return b||a};_.m("sy0");.var vpa;_.Mu=function(a,b){if(a["__wizcontext:requests"]&&a["__wizcontext:requests"][b])return a["__wizcontext:requests"][b];var c=new _.Mk,d=void 0;_.dp(a,function(f){f=f.__wizcontext;if(!f)return!1;d=f[b];return void 0!==d?!0:!1},!0);if(void 0!==d)c.callback(d);else{vpa(a,b,c);var e=upa(a);e!=a&&vpa(e,b,c)}return c};.vpa=function(a,b,c){var d=(d=a.getAttribute("jscontext"))?d.split(" "):[];d.push(String(b));0==d.length?a.removeAttribute("jscontext"):a.setAttribute("jscontext",d.j
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOmCnqEu92Fr1Mu4mxM[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 19824, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):19824
                                                                                            Entropy (8bit):7.970306766642997
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:ozNCb8EbW9Wg166uwroOp/taiap3K6MC4fsPPuzt+7NCXzS65XZELt:K4zbWcDVwt230hfs+x+Bb65X2
                                                                                            MD5:BAFB105BAEB22D965C70FE52BA6B49D9
                                                                                            SHA1:934014CC9BBE5883542BE756B3146C05844B254F
                                                                                            SHA-256:1570F866BF6EAE82041E407280894A86AD2B8B275E01908AE156914DC693A4ED
                                                                                            SHA-512:85A91773B0283E3B2400C773527542228478CC1B9E8AD8EA62435D705E98702A40BEDF26CB5B0900DD8FECC79F802B8C1839184E787D9416886DBC73DFF22A64
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff
                                                                                            Preview: wOFF......Mp.......P........................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`tq#.cmap...........L....cvt .......T...T+...fpgm.......5....w.`.gasp...@............glyf...L..:+..j.....hdmx..Fx...g........head..F....6...6.j.zhhea..G........$....hmtx..G8...]......Vlloca..I.........?.#.maxp..Kt... ... ....name..K........t.U9.post..Ld....... .m.dprep..Lx.......I.f..x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..|.|..|..|..|.|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RRZ8IZP3.js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):313726
                                                                                            Entropy (8bit):5.673699762942192
                                                                                            Encrypted:false
                                                                                            SSDEEP:3072:HpFNBva9krppn0fC2waKfSbepLblF0RDC3KJUBmMkfb7NOU2Z:rFvECrlF0R8FkfbBOX
                                                                                            MD5:DE326FBD9224DB077BB16DE089ECD408
                                                                                            SHA1:403630731993FABFDCD2959B677AE3C463BA8CDE
                                                                                            SHA-256:CF684C3F277A8EA895BA350E8C67A4190FFAED1683E7176165D9EFF622239339
                                                                                            SHA-512:7A8AE8B797DA7A6ABC6A1FE577938B226D77D686575C1F6406E1E34A023D37896ECAD83C3512BC90539FF6D4AA14241034E3024D718F6D152C4517EE70728F51
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_v=this.default_v||{};(function(_){var window=this;.try{._.m("NpD4ec");._.go(_.so);.._.p();..}catch(e){_._DumpException(e)}.try{._.m("ws9Tlc");.var s6=function(a){_.Q.call(this,a.Pa);this.H=window};_.v(s6,_.Q);s6.Ea=_.Q.Ea;s6.prototype.get=function(){return this.H};s6.prototype.find=function(a){return(new _.$p(this.H.document.documentElement)).find(a)};_.Xo(_.ro,s6);.._.p();..}catch(e){_._DumpException(e)}.try{.var spa,tpa,upa;_.Ku=function(a,b){a=JSON.parse("["+a.substring(4));return new b(a)};spa=function(a,b){return!!a.H[b]};tpa=function(a,b){if(a.W.has(b))return!0;a=_.Qa(a.V);for(var c=a.next();!c.done;c=a.next())if(tpa(_.go(c.value),b))return!0;return!1};_.Lu=function(a,b){if(null==a.H)return null;a=a.rb();return _.Ku(a,b)};upa=function(a){var b;_.dp(a,function(c){return c.__owner?(b=c.__owner,!0):!1},!0);return b||a};_.m("sy0");.var vpa;_.Mu=function(a,b){if(a["__wizcontext:requests"]&&a["__wizcontext:requests"][b])return a["__wizcontext:requests"][b];var
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\YlmVKT3Zvhw[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):43202
                                                                                            Entropy (8bit):5.913769785879553
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:PCEC8R6oVfOK7ZDJC49E/qIl3a8rwPAaq4mslN5T5uATNJXPyWJAh7uX+jY:tZDJC49E/qIlK8rwPyezh5uA3Xq9UXb
                                                                                            MD5:0640AF7B35E3FEA353FFDBC944855521
                                                                                            SHA1:A2CF4C2773EDC15F3E506E310D89BB093CCF51BB
                                                                                            SHA-256:C5800E3A27F0A2942A5CDFCA4005946C2A632230C7CF4191E2367DEF96D95629
                                                                                            SHA-512:582944022797B8E50BF459C7168D4BED5C7C803DE6D22A66B3A9CC0D9FB20D026E03DFC2DB9F5BE43C09AD142B3CA25B346E7C4FBA4E7C8542E03D958C6997AB
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1
                                                                                            Preview: <!DOCTYPE html> <html lang="en" dir="ltr" data-cast-api-enabled="true">.<head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" >@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzQ.woff)format('woff');}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOjCnqEu92Fr1Mu51S7ACc6CsI.woff)format('woff');}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc-.woff)format('woff');}</style><script name="www-roboto" >if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "");document.fonts.load("500 10pt Roboto", "");}</script> <l
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ZdEIZNg3epQ[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):42973
                                                                                            Entropy (8bit):5.918111906585324
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:YCoCTR6oVfOVPmGC87WT2YmdiqPx1e3X+qsSJ0zI0JgIJ5iKT2s:HGC87WT2YmdLzZL1AoT2s
                                                                                            MD5:016B28216FFFE351789FEA75C8E04494
                                                                                            SHA1:F4EFCEBF64A3314F78D1F6098095105CBC14085A
                                                                                            SHA-256:4A2690AF3452A8F4C12F4825DA3E2B910C012DE6F1CCC84A89FA227078CF6FFB
                                                                                            SHA-512:84E0DD74E47EB93A60064F6B2A51383A8DBBA57558DC9410161234C6D2B7267B565D7F6B156537735BD641AD108BE8C94E5449E22F6921B909131828DB99D00E
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1
                                                                                            Preview: <!DOCTYPE html> <html lang="en" dir="ltr" data-cast-api-enabled="true">.<head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" >@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc-.woff)format('woff');}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzQ.woff)format('woff');}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOjCnqEu92Fr1Mu51S7ACc6CsI.woff)format('woff');}</style><script name="www-roboto" >if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "");document.fonts.load("500 10pt Roboto", "");}</script> <l
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\base[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):1526072
                                                                                            Entropy (8bit):5.5782565333449
                                                                                            Encrypted:false
                                                                                            SSDEEP:12288:yZs4R4+7Pd8NsTego5RUsUUjqGyQS7JdNVvaXk3QkKBj/gCC:yqS4+7Pd8iTegqRUyjqGyQS7HPa03+4p
                                                                                            MD5:78DA2AF0BEF5C784B0363954EE7E863D
                                                                                            SHA1:B9BDF95298A6B858AD569CEC48F9D728F8743314
                                                                                            SHA-256:6FFA4FE49359FE3440554D7A39EC0E3E5CD2F0B28486CD6AF549D0B7B0435498
                                                                                            SHA-512:E2A3CAA752B4872E134855979EFB45EF8C4D66DAD2A5F08476F14836CD854CA62C969479E7AD2D113ED913AC64DF82D6FAAD1BADE2E8B46F2EB2F0081291BE80
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/s/player/77da52cd/player_ias.vflset/en_US/base.js
                                                                                            Preview: var _yt_player={};(function(g){var window=this;/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var ba,da,aaa,ha,ia,ka,oa,pa,ra,sa,ta,ua,va,wa,baa,xa,ya,za,Aa,Ba,Ca,Da,Ea,Fa,Ga,Ia,Ma,Ka,Pa,Qa,eaa,faa,Za,$a,ab,gaa,haa,iaa,bb,jaa,db,eb,kaa,laa,ib,pb,maa,vb,wb,naa,Bb,yb,oaa,zb,paa,qaa,raa,Kb,Nb,Ob,Sb,Ub,Vb,cc,ec,hc,ic,lc,mc,uaa,oc,pc,qc,zc,Ac,Cc,Hc,Nc,Oc,Sc,Qc,yaa,Baa,Caa,Daa,Wc,Xc,Zc,Yc,bd,ed,Eaa,Faa,dd,Gaa,kd,ld,md,pd,rd,sd,Iaa,td,ud,yd,zd,Ad,Bd,Cd,Dd,Ed,Fd,Hd,Jd,Kd,Md,Nd,Qd,Kaa,Rd,Sd,Td,Ud,Vd,Wd,ce,fe,ie,me,ne,se,te,ye,ue,Ae,Ce,Be,Paa,ke,Pe,Ne,Oe,Re,Qe,je,Se,Te,Raa,Xe,Ze,We,af,bf,cf,df,ef,ff,.gf,hf,Saa,rf,lf,Df,Taa,Hf,Jf,Lf,Uaa,Mf,Of,Pf,Qf,Rf,Sf,Tf,Uf,Wf,Vf,Xf,Yf,Xaa,Zaa,$aa,bba,cg,dg,fg,cba,hg,kg,qg,rg,ug,dba,xg,wg,yg,eba,Gg,Hg,Ig,fba,Jg,Kg,Lg,Mg,Ng,Og,Pg,gba,Qg,Rg,Sg,hba,iba,Tg,Vg,Ug,Xg,Yg,ah,Zg,kba,$g,bh,ch,eh,dh,lba,fh,nba,mba,oba,ih,pba,kh,lh,mh,jh,nh,qba,oh,rba,sba,rh,uba,sh,th,uh,vba,wh,yh,Bh,Eh,Gh,Dh,Ch,Kh,wba,Lh,Mh,Nh,Oh,yba,Th,Uh,Vh,Wh,Aba,X
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cb=gapi[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):100406
                                                                                            Entropy (8bit):5.525672610215441
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:pIjKdByen4KOw9McPis5wfmYW23KeCTgXYH1mUQIaJmJdQQOJtTY2O2s+od3E0:pxByen4m23sg41mU1mm7POvY2O9d3E0
                                                                                            MD5:F703AA01FA1649D14950B7E4539DF1C2
                                                                                            SHA1:78314DD487CF0AFD139D085B8873EBE12C3D6E3F
                                                                                            SHA-256:090B52C2D41BE76825F837CF93B9CEA34F43A43D619B5B5EEBDAD5A0D9BA23CC
                                                                                            SHA-512:8859F09D9059A36E6A90CA164F7FDD2BBABD7FA8FDABFF38C36F3156EE56C7BBE6627F1FAF9A7EADDE99916DF4220CCBCCB504412501D80FED67B752F5566B54
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: /* JS */ gapi.loaded_0(function(_){var window=this;./*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var ja,na,ta,xa,Ba,Da,Ia,Ra;_.ea=function(a){return function(){return _.aa[a].apply(this,arguments)}};_._DumpException=function(a){throw a;};_.aa=[];ja=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};na="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};.ta=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};xa=ta(this);Ba=function(a,b){if(b)a:{var c=xa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&na(c,a,{configurable:!0,writable:!0,value:b})}}
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\download[1].jpg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, frames 3
                                                                                            Category:downloaded
                                                                                            Size (bytes):10909
                                                                                            Entropy (8bit):7.956789431172251
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:cIs0GKT7FoBcZW4sPK2AP9n1ThCRpPqgvaD4j2js5vRKDtMJETdnYyPQNHf901Ys:pRnFoBQWB49mvPqgiD4yjWRKDtw6dnYk
                                                                                            MD5:70472AD6A0879B973A0D3585935E82A4
                                                                                            SHA1:26CA25A1942C65E046CA62D1E196D5A68AF70F4B
                                                                                            SHA-256:69CEE2AAD5935BE4DD06C4A31724E85D14021197B7BFCABD4C07D4EA286563A8
                                                                                            SHA-512:811A59C4F717C0ACBBAC52609CDDE3D36084BF2470C9B1A468FA5722F956E9704EA71C4290382F52FA17B7E62D434C436BBE8EED32ADABD4D9EA20B150B179D4
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://lh3.googleusercontent.com/JRTGIiCXPgaNAOlxZsj0XFpZvOZ1kv7BgVdHZzEAW3yYFFSjvIHNW-EfMnIBrNkhXvjf5lx4Y2yWtVKonN4n6VpFz0mLMPQFvrGvq4AXMdL3UnxgnHhExLnDtsC5DQ=w714
                                                                                            Preview: ......JFIF..........................................................................................................................................................."..........................................c........................."..2b...#3BCRr.!1St......$Qas........4ATc.......%dq......5DEeu....U......................................7......................."...2R.1Bb.!....3QSqr.....$A.............?..5YS.D.s.L.X.Ng.q5..#.6|#...G....3.t..:[:.\$].8<x.EA.D:..".O.>....cO.......M..ot.......mh......h........@.`.U..(.Z...Z]~R.q.@.q.YS...}xy.s.H,.r...<h..6..t........R.Q ........J.}......'.....ET.F.V.qP.3....@h.m.&....W.}Y.a....pi..,.<....C.N..l.).O.C[...cu.3\.`D,fJ...P.P......-c2.L...@.:.A.....\..%..38.V.3.....{...tm.=...F`....|..$Ot.....G.m...2.[f.dfUV.|...2.........%..}..z2...)........{.6c.u...J[....zB.\..Mh.m.W..I..../V............;=G..J.W......Z....b.C.Zj..2...C0..K.&/\.gKD.frUiTL%.|.l...+.j.[u7....X...a....O.+..K.l......Fn4.A@.-*..R.......a...E+.x/.|...#8}
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\embed[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):30248
                                                                                            Entropy (8bit):5.554755698575903
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:2unuG5N+YRgyq+e8nwIt/eXBryHa35srGmM3BWZC9cvjxrh3uhC86sZLrRze2/JH:Pw+1nwINekO5sSnoCewNSB7kj5H
                                                                                            MD5:9B0CEE6B61A5BD4688627C7568CB2818
                                                                                            SHA1:2079DB1E66776123533F185A10D7B7533EFC808B
                                                                                            SHA-256:6F7DA72A8998A20D9F91B0C2CCF18043958033273A9C689FB5270B5E0966485E
                                                                                            SHA-512:2037BF54D5388824305E57F5B44E51779E561ECA3AC5859F06D2ACF23D6F63652B10E325676E235F0FF153EBF7433F83D5E45390B00FDC9FBF333BDD4F0863A8
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/s/player/77da52cd/player_ias.vflset/en_US/embed.js
                                                                                            Preview: (function(g){var window=this;var w4=function(a,b){g.jf(a.u,8*b+2);var c=a.u.end();a.C.push(c);a.B+=c.length;c.push(a.B);return c},x4=function(a,b){var c=b.pop();.for(c=a.B+a.u.length()-c;127<c;)b.push(c&127|128),c>>>=7,a.B++;b.push(c);a.B++},fGa=function(a,b,c){null!=c&&(g.jf(a.u,8*b+1),a=a.u,b=c>>>0,c=Math.floor((c-b)/4294967296)>>>0,g.wf=b,g.xf=c,g.kf(a,g.wf),g.kf(a,g.xf))},y4=function(a,b,c){null!=c&&(g.jf(a.u,8*b),a.u.u.push(c?1:0))},z4=function(a,b,c){if(null!=c){b=w4(a,b);.for(var d=a.u,e=0;e<c.length;e++){var f=c.charCodeAt(e);if(128>f)d.u.push(f);else if(2048>f)d.u.push(f>>6|192),d.u.push(f&63|128);else if(65536>f)if(55296<=f&&56319>=f&&e+1<c.length){var h=c.charCodeAt(e+1);56320<=h&&57343>=h&&(f=1024*(f-55296)+h-56320+65536,d.u.push(f>>18|240),d.u.push(f>>12&63|128),d.u.push(f>>6&63|128),d.u.push(f&63|128),e++)}else d.u.push(f>>12|224),d.u.push(f>>6&63|128),d.u.push(f&63|128)}x4(a,b)}},A4=function(a,b,c,d){null!=c&&(b=w4(a,b),d(c,a),x4(a,b))},B4=function(a,b,c,d){if(null!=.c)f
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
                                                                                            Category:downloaded
                                                                                            Size (bytes):5430
                                                                                            Entropy (8bit):3.6534652184263736
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
                                                                                            MD5:F3418A443E7D841097C714D69EC4BCB8
                                                                                            SHA1:49263695F6B0CDD72F45CF1B775E660FDC36C606
                                                                                            SHA-256:6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
                                                                                            SHA-512:82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://ssl.gstatic.com/policies/favicon.ico
                                                                                            Preview: ............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ggoJFaE71W8[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):42955
                                                                                            Entropy (8bit):5.910287654927477
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:YCn7BR6oVfO/8aEyyyTDvt8nPRDk/W1JgEsQwDev:VyyyVapA//l6v
                                                                                            MD5:2C6ADA0B11738F111D17BFFCF89DB8F5
                                                                                            SHA1:3E8B4BED0D240ADF41AF7915C5E0DED477CB5D46
                                                                                            SHA-256:A64AE8DCD6B44CA4052A2C283E81BB1872C777231D0E855B72BF5CC3823FF760
                                                                                            SHA-512:22DACB5FE4F7093F01540E75D831F9C69355023B01962C1A23E05BBBFA741ABCDBDD01B311753B882E9ED739F83B8D07805913283F3B44271A877492C1C0B887
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1
                                                                                            Preview: <!DOCTYPE html> <html lang="en" dir="ltr" data-cast-api-enabled="true">.<head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><style name="www-roboto" >@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc-.woff)format('woff');}@font-face{font-family:'Roboto';font-style:italic;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOjCnqEu92Fr1Mu51S7ACc6CsI.woff)format('woff');}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzQ.woff)format('woff');}</style><script name="www-roboto" >if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "");document.fonts.load("500 10pt Roboto", "");}</script> <l
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\googlelogo_clr_74x24px[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1660
                                                                                            Entropy (8bit):4.301517070642596
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
                                                                                            MD5:554640F465EB3ED903B543DAE0A1BCAC
                                                                                            SHA1:E0E6E2C8939008217EB76A3B3282CA75F3DC401A
                                                                                            SHA-256:99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
                                                                                            SHA-512:462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=A4UTCb,sy33,cNHZjb,sy47,VXdfxd,KFVhZe,sy3d,sWGJ4b[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):41735
                                                                                            Entropy (8bit):5.496778636816908
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:+Fgblevw5LWdMpbYRI+a5VwYGcCZusCp/LEE9azA7lOD9Y:mgc+AJaV57/LEE9aU7lCa
                                                                                            MD5:985D099B21D7ADDB4FA9B3BFC6E28061
                                                                                            SHA1:F0B3A3586239B38B639F7360F21FAE76C3561161
                                                                                            SHA-256:050D89D89D3E5FFE375FA0B16427E074AD9591D177A7751FE3F099047635882C
                                                                                            SHA-512:4F43AA7AF2B9461F80BDBC8EE94C8ABE693CB1DE4FAF34D2A49C8FD79F003C80C5C3A59FCE523843A07D0B36E8BA5DBF96689C5FEC839AE32A961F4D02B660E4
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_v=this.default_v||{};(function(_){var window=this;.try{._.m("A4UTCb");.var NKa,MKa,OKa;_.AO=function(a){this.T=a;this.H=0;this.ha=this.ka=this.W=this.V=null;this.$=!1};._.AO.prototype.start=function(a,b,c){this.H=b;this.V=[_.ip(this.T,"blur",this.Sz,this)];2==b&&(this.V.push(_.ip(this.T,"touchmove",this.PT,this)),this.V.push(_.ip(this.T,"touchend",this.Sz,this)));1==b&&(this.W=[_.km(window,"mousemove",this.LH,void 0,this),_.km(window,"mouseup",this.KH,void 0,this),_.km(document.documentElement,"selectstart",this.QR,void 0,this)]);_.Ua(this.T,_.BO,{Wc:a,Mp:b,event:c},void 0,void 0)};_.CO=function(a){0!=a.H&&a.Sz()};_.h=_.AO.prototype;._.h.LH=function(a){a.preventDefault();MKa(this,a)};_.h.PT=function(a){this.$||!1===a.event.cancelable||a.event.preventDefault();MKa(this,a.event)};_.h.KH=function(a){a.preventDefault();NKa(this);OKa(this,a);this.H=0};_.h.QR=function(a){a.preventDefault()};_.h.Sz=function(a){a&&!1!==a.event.cancelable&&a.event.preventDefault();NKa(
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pxiDypQkot1TnFhsFMOfGShlEw[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 82680, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):82680
                                                                                            Entropy (8bit):7.988687345703779
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:CxIaV5QOaWyiUgRYxMzoT5GbDL6cOVSi7hr5O2+W2GvQh4kuWEDarIp:QV5vU6iMMTY32rNruGvO4kuWEmra
                                                                                            MD5:88AE56679AC4EE3FE1F43D04E7B854CE
                                                                                            SHA1:388FB91785D6904DCEB61E83ECCA9CE16C6800CD
                                                                                            SHA-256:013268183C2DB72E1AC8EDB27AF692E8B3E5AD685A1CEA043330636613A5B0B3
                                                                                            SHA-512:7EC0F8B38D8309013C3C145A11EED31F98E21D6B93AA52B6E21736F25D73F132B6BDD67B4C7A0E045C414DF383F4E162AA47DF82C94D6CFE76F7518E63D5CDD6
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/productsans/v12/pxiDypQkot1TnFhsFMOfGShlEw.woff
                                                                                            Preview: wOFF......B.................................GPOS..........w..;.GSUB...p...T.....Z..OS/2.......Y...`k..cmap... .......htTg.cvt ...,...g...l...wfpgm...........a.A..gasp...............!glyf.......j..a.../.hdmx......c.....xe3.head..,....6...6..N{hhea..,.... ...$....hmtx..,....v...dr&d.loca..2X........k..fmaxp..7.... ... ....name..8........,+.I.post..9$.......{9...prep..B...........oNx.dR.dUa.....vw_[.....l.&.00.I..H....LD........f.1..;f.Z. .a.J.K...x.u.u.{....;.....P.,V.M..E..g+u./../.F...2......-.R..;DK.+..... .D+......36F...8.o.J$...a..)>..X..|.M....^...Z.w.A.4......iw.=w..[....P.%........a..c.G....M.B.sx.......!..-i.....|..r...}p...........sD>. .j.Hv|ADS.K(g...ul.-..M..H......Vi....I...R..10fJt_A.1.6..y...S.K.#f$T;.w..^...\/0Z.\_..+..Z../$ft..b....Vca..Z6.g..>..&....fu..U.!.P...1..a5......S....u1..2f)..M..{$..}...!.c.............^.'......|.{F.....R..X.s.hM.Q.......t+....SN..6...=....Q3.......b.5l...y..?.v..{V...!..a.dw...13U.e.....x.b=..'..z.1"...3s.0
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\reportabuse[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, UTF-8 Unicode text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):70503
                                                                                            Entropy (8bit):5.640677066308529
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:9EXXPvcjcxtLdok9dw/AyFoIOgNexj/d09ZMvWPRJMuC/rY/D8yBq0U9D9XUPFyI:KXPEYTLdOAy+IODdd08WG5stySlt9j
                                                                                            MD5:13EDA9ECD5D213EE79048DC8D5E7A833
                                                                                            SHA1:6AA1142EC4EA72E12DC6F2EB814F06F9FA94A7AE
                                                                                            SHA-256:58BA2D08CC0BA0FF854D9DAEAB60660CD90EA5FCE57460F3765F993CA9CCBE43
                                                                                            SHA-512:A944122080EFD5D1F352CE207475AD4FE13C59B6C2BD0A59A49D2B412A2ABC25E36A02D46D19EC563AE35C867A02AF309D0F2BB278C8AD69492B538E428DEA71
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: <!DOCTYPE html><html><head><link rel="shortcut icon" sizes="16x16" href="https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png"><title>Report Abuse . Google Forms</title><link rel="stylesheet" href="https://www.gstatic.com/_/freebird/_/ss/k=freebird.v.-1miqeftoypae8.L.I11.O/d=1/ct=zgms/rs=AMjVe6iMyGn4uSw8q2RVwco-G02kXILHTA" data-id="_cl"><link href="https://fonts.googleapis.com/css?family=Google+Sans:400,500|Roboto:300,400,400i,500,700&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext" rel="stylesheet" type="text/css"><link href="https://fonts.googleapis.com/css?family=Product+Sans&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext" rel="stylesheet" type="text/css"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="referrer" content="origin"><script type="text/javascript" nonce="0v4x6QdjKeN6YgNE0TLeqQ">window.WIZ_global_data = {'w2btAe': '%.@.null,null,\x22\x22,false,null,null,true,false\x5d'};</script>
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\so[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):46719
                                                                                            Entropy (8bit):5.730589934077891
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:aLF/d9SvRu8sGM0z1cAfnoVuVDU+2HUQPFJ/N48BO/14Ic:YzUMD+nogZU+2Hv1ZBA14Ic
                                                                                            MD5:82135206550B1C50C702B3BFEEA17FA3
                                                                                            SHA1:C7325344B8A17FBDC553AD4A137513BDDE7557CD
                                                                                            SHA-256:813BEE54E6F55FE80225F5A07A40E973FCD3C5831664ED9CE39A3B3A5F8C2E5C
                                                                                            SHA-512:CFDDB072A08D8AED98E45FC90141DA37D523F622BCD9FD1A1E80E3EE09265D5BA582702BB4FEE59C0892B432A8F3357C2156BFFD98BED5E27CC6C0C46FC8CF82
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://ogs.google.com/widget/app/so?origin=https%3A%2F%2Fpolicies.google.com&cn=app&pid=269&spid=545&hl=en
                                                                                            Preview: <!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/app/so"><link rel="preconnect" href="https://www.gstatic.com"><link rel="preconnect" href="https://ssl.gstatic.com"><link rel="preconnect" href="https://apis.google.com"><link rel="prefetch" href="https://apis.google.com/js/api.js"><script data-id="_gd" nonce="le3YJBnyT3q5qzPAXHkNAQ">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"-5396161816004148657","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S1NZmd":false,"Yllh3e":"%.@.1606645188178382,173031300,1259220130]\n","ZwjLXe":545,"cfb2h":"boq_onegooglehttpserver_20201123.05_p1","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[1763433,1772879,1782333,45695529],"gGcLoe":false,"ikfjnc":["https://policies.google.com"],"nQyAE":{"wcLcde":"false","tBSlob":"false"},"qwAQke":"On
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\02698a3383765bd3c250471c53a86c5a[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):6789
                                                                                            Entropy (8bit):4.942475749260986
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:hHSTqdQTHkjKYk7MPEQDgJUf7qC7n+olFhT7n+olVJUf7NTehsY5:9cYk1NIRBHaTs
                                                                                            MD5:02698A3383765BD3C250471C53A86C5A
                                                                                            SHA1:CF1BB1E4F5DAE0C3BB0605B77565BDA2C12D75E5
                                                                                            SHA-256:A1F675A555609FC86E744FA9D86B35F0924803C10D8D3DA2CA01D4171188552E
                                                                                            SHA-512:BFF93C586263EEB0E70CF8FEE862DA65D5B28B5590685FAE05197F8F13C1567C3D8533C4C7E6C15620F8461B432E9A5EC223D98FE598A52030079375613484B6
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/02698a3383765bd3c250471c53a86c5a.svg
                                                                                            Preview: <svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="54.72" y1="89.276" x2="92.089" y2="51.907" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#dfe1e5"/>. <stop offset="0.077" stop-color="#e9eaed"/>. <stop offset="0.227" stop-color="#f6f6f7"/>. <stop offset="0.426" stop-color="#fdfdfd"/>. <stop offset="0.875" stop-color="#fff"/>. </linearGradient>. <clipPath id="clip-path-2">. <rect x="53.811" y="50.998" width="39.187" height="39.187" rx="3.104" ry="3.104" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient-2" x1="29.406" y1="65.093" x2="66.594" y2="27.905" xlink:href="#linear-gradient"/>. <clipPath id="clip-path-3">. <rect x="28.501" y="27" width=
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\0772XWI7.js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):616217
                                                                                            Entropy (8bit):6.041148180195093
                                                                                            Encrypted:false
                                                                                            SSDEEP:6144:HuTC74M4Of7eFgGQ/sU+YmzXH1R4vW46Gb3HsOXixwlQ0z3Qpwlks:p57eny+T4vW46+3VeSQqR
                                                                                            MD5:E64A9617DAD4528EC4FD05F5FEA932D3
                                                                                            SHA1:77BC4E4A69CCE6FEE83B9ECABEFCF8A56D3B80A6
                                                                                            SHA-256:7E3CB0F1CCE2A8E7CCB7845473371E4BC9AAC72F182CDFF5898FC1B655E50E87
                                                                                            SHA-512:2527EBA82CCD1BBE58ABEF3889E90D80C38501A16148B542CEEAE851F157F8887678365595DD3B9665B5D90939614005A52F4E354675C0688DA8559B464E7700
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=\"snapping\"],.nhh4Ic[data-state=\"cancelled\"]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;-ms-transform:scale(0.7);transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,0.2);transition:opacity 400ms}.nhh4Ic[data-state=\"resting\"] .MGUFnf,.nhh4Ic[data-state=\"cooldown\"] .MGUFnf{-ms-transform:scale(0);transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;-ms-transform:translateZ(1px);transform:translateZ(1px)}.nhh4Ic[data-past-threshold=\"false\"] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWiz
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1fa3e4ce8ac456f39ed02a6f9eb49b14[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):6422
                                                                                            Entropy (8bit):5.145755305279271
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:h2Cy4en2j0yQldta1TvQT6oj0cDGXTmg1t0UUIPLynG6+bRP14N/3UmXjMUz:y5cK9DiTFT0UUyynGAbjz
                                                                                            MD5:1FA3E4CE8AC456F39ED02A6F9EB49B14
                                                                                            SHA1:11E1FEC7C61FC6E168E47FA9C2316BA83B2A883F
                                                                                            SHA-256:404919D82E7FCAF8F8B31573F9483B45482988CFD984F0463C9CFD322E58F08A
                                                                                            SHA-512:3DD1B9136CFEB7C1FFF636C7B735CF18F1BFF2C80FC7426113BE2219C2BBCFEF3F37036DF8D8D2BDBE0EA7EE822FA0E9C7EFD45BFD328C7C8FD264ECC0C00945
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg
                                                                                            Preview: <svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="35.79" y1="10.115" x2="49.214" y2="10.115" gradientUnits="userSpaceOnUse">. <stop offset="0.001" stop-color="#23893c"/>. <stop offset="1" stop-color="#34a853"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="50.448" y1="27.536" x2="63.288" y2="19.416" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#e09108"/>. <stop offset="0.021" stop-color="#e19308"/>. <stop offset="0.37" stop-color="#efa906"/>. <stop offset="0.703" stop-color="#f7b605"/>. <stop offset="1" stop-color="#fabb05"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="37.583" y1="34.548" x2="53.68" y2="24.367" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#b7251d"/>. <stop offset="0.126" stop-color="#c32b21"/>. <st
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\4UaGrENHsxJlGDuGo1OIlI3K[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 82300, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):82300
                                                                                            Entropy (8bit):7.993868899885629
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:nG4K6l+BuoexS2Sv1TEThLUb2AQ3i/U7sCV30lbRS5NA7UFloGIN46:nGxkBxS2YEThIb2v3iIsCV2H7UFl9Z6
                                                                                            MD5:78F084CD32CB85327C04655BD20D7135
                                                                                            SHA1:BA8CD3AC9F80EC121C20A4423987BE8B3A706D55
                                                                                            SHA-256:DC662D2DD599D356BAF970A6AE9AACB4477FCC84E39159FE4B49ED82D2ACB4B7
                                                                                            SHA-512:06CF2D6AD91ABF5B8DF8AC54D4345E6560A43C59D013B2170454BA00FBF255B1D5060BD89F34640E0DFFBCB6323B7C4A94AEBEE9A4125286997E17E3606BB5D0
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlI3K.woff
                                                                                            Preview: wOFF......A|................................GDEF...........<e.e.GPOS...D..;.....Qr.'GSUB..=\...<..#X....OS/2..O....U...`kr[.cmap..O........@Y..Dcvt ..V....y........fpgm..V........uo..gasp..^H............glyf..^T...a..x..head.......6...6..'.hhea....... ...$.0..hmtx...........H.v4loca.."........&O..^maxp..+.... ... ....name..+....e...m...+post...D......*N....prep..@....p..... ..x.U..F.q...s.G........jiZ ...DCB...H...BO....ao........{.^......lb>..zCz......O...i..k.......$9-S.m.$..S<. .x.|...}..e.V2Z..g4\p..{.5.....~[}_.X}^.#.`..S..U.T.......;... {....!...._../.....?."-=x..Y.p...}.z.$.......f4.*.w..9.J.033...'.0.p.....^.....:.T...AS.;...^.l.m...@..jD;...h{.C...'....9c.. ...a..(.7v(BY.1Q.rT.{.{'T......34A.B?.gE..B.*Q5...C0....c...Y?.....+~\...IR`.'.4 )B...(.R....7..0...w.>>...O......w.x^Xi.r..:...p8R#..."....t-..p[.].-..v..E.K..5..=y8.. ..9...p._.{.;.3a..,c...6..mw;..5|...5..78.S.&.)v.gr6.p..s!.q1.p9..j.....:Yg......I.`.m.=c..{...9*..Ud..d.Rp|....LI.'\)Y%Y...].O..
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\4UabrENHsxJlGDuGo1OIlLU94bt3[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 82716, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):82716
                                                                                            Entropy (8bit):7.993713530548
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:hijC7nihKxAiyoVOuS+VhAhFO22tkZWEleJ/oItoGIN9:gIgKThK+XPkZ7It9k
                                                                                            MD5:6108B8DFDDDD5F9D46A75347D4D803BE
                                                                                            SHA1:E6A27CF8C983E886B7FBFE3BC8D51E7C797D2F89
                                                                                            SHA-256:F811A1FE35E8D890E072467515DF338DB4CE562E1CEFDCAC5CB8F76E505AE89B
                                                                                            SHA-512:52D04EFDC8F3A9F52F7227CEA3E5E5808C3B8E1C12D9D98EB5BABFE2E7953162FA2E13639CD850D595B15214357FB42340B4494E300EC9E4D25C00A2F577BDE7
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94bt3.woff
                                                                                            Preview: wOFF......C.................................GDEF...........XkvkWGPOS...X..;.........GSUB..=....<..#X....OS/2..P8...U...`k.\.cmap..P........@Y..Dcvt ..V.............fpgm..W8.......uo..gasp.._.............glyf.._.......u.ua.8head.......6...6..'.hhea...T... ...$....hmtx...t.......H.Nq(loca..$........&..8.maxp..-.... ... ....name..-,...m......H.post../.......*N....prep..Ad.......^....x.EO%T@.........{...i..4.4\...t.z...7..mgi....`RR.H.....9...C.I.....).._..h.^C.g...|@,.r........8d.q.......lp.x....p\Lc.sX`...}.p...T...H.DW..N...Q.x......B..H..zI....A..&%P+.R8Vf..UVE]mu.k`O..).9.57h....1tx..Y.t.G...kv%.....1.........0..%v....h..!l.7....1..N........f.~US]..F... ..\5...>.X.=.wC....!g..>.O.p0.#...a..(m0w(BY.9Q.rT...qh'T.}.a..`34A..)gEAN.....p.....|.C........k>....R....i@T.b.QM.ZYu..7..r...;...:~.a....N<!.4B..I....8...P.....3.w-.tw{......r3...>.l.....<..q ....p"......2a..-c...v...P;..5..i.....Y...8G..8....K....+..k...(..:XG.d...{..gm.M.I...h....?.R..!..YH.q..K
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\4f19891c43001db11efc8048f9bc7cdb[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):2184
                                                                                            Entropy (8bit):5.006709078848764
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:t4Lu3K0HxEGSGjGeGxGE+ePCgXP/jN4J9ZQu5x/MTFJv3/ufn7d79C7RudPfdjrf:+GnHx16ZAE+eV/iUZt/iPFGsXJ2kx
                                                                                            MD5:4F19891C43001DB11EFC8048F9BC7CDB
                                                                                            SHA1:FB001AFC35E6B79D7771DD3893102C14718A58CD
                                                                                            SHA-256:4F0D0BECD3F8A0496FA98581492B85F53AAFDF0CD51E5626B5FD0B6AB2DB9379
                                                                                            SHA-512:A59528BAB7A538E4F221BCA27440EB88C873950D1595AA7718FF9613D7CE14CE40CBD29D209B0BCC3C8029360E2BC3740AB723802492E75D13C91A153D7DF457
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/4f19891c43001db11efc8048f9bc7cdb.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="48" y1="71" x2="48" y2="33" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#5f6368"/>. <stop offset="0.232" stop-color="#5f6368" stop-opacity="0.699"/>. <stop offset="0.568" stop-color="#5f6368" stop-opacity="0.32"/>. <stop offset="0.836" stop-color="#5f6368" stop-opacity="0.086"/>. <stop offset="1" stop-color="#5f6368" stop-opacity="0"/>. </linearGradient>. </defs>. <title>site_sec_C_08</title>. <g style="isolation: isolate">. <g id="Content">. <g>. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="#e8eaed"/>. <g>. <path d="M16,33H80a0,0,0,0,1,0,0V68a3,3,0,0,1-3,3H19a3,3,0,0,1-3-3V33A0,0,0,0,1,16,33Z" fill="#fff"/>. <path d="M77,71H19a3,3,0,0,1-3-3V33H80V68A3,3,0,0,1,77,71Z" opacity="0.3" fill="url(#linear-
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\5959e84c2197c8a27da0a717f1cd47d5[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1812
                                                                                            Entropy (8bit):5.137605121069892
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:tDLu3OP/je+R5kHxEG5GCGoGBG8+eiCfP/jNQJQce+vlUDlnlUD5/z6jERC6TlYd:hGO/pWHxYFbw8+er/BIRz6w7rT+
                                                                                            MD5:5959E84C2197C8A27DA0A717F1CD47D5
                                                                                            SHA1:717BD4592135C09EF42DE6767EA4C2D7FE844C1D
                                                                                            SHA-256:EC86659A0D1607B58CF5E3ED06414FA776ED65BC97F9F6B7BDF184EF2D607973
                                                                                            SHA-512:F1D0CB152D197415D55DB3D274941E100257A40453379BF4502CB6AA6C0218D5D5BA29C417B6D3AD925B331248A16AA5B141B0E2541AD4876088FEADDE49DE1D
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg
                                                                                            Preview: <svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="29.091" y1="71.218" x2="66.018" y2="34.291" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#2c66bf"/>. <stop offset="0.201" stop-color="#3572d4"/>. <stop offset="0.446" stop-color="#3c7de6"/>. <stop offset="0.704" stop-color="#4183f1"/>. <stop offset="1" stop-color="#4285f4"/>. </linearGradient>. </defs>. <title>site_sec_C_09</title>. <g>. <g>. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="#e8eaed"/>. <g clip-path="url(#clip-path)">. <path d="M35.543,42.584a10.048,10.048,0,1,0-2.421-19.789,12.572,12.572,0,0,0-22.647,4.788,7.546,7.546,0,0,0,.992,15Z" fill="#fff"/>. </g>. <g>.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\5e7cd445f8861a262a3da876f855a4cc[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1068
                                                                                            Entropy (8bit):5.114357448467999
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:tDLu30ureO+exC/urN9uraurz9dde61Lj1uj+FhlHcsuUCZXHcmD0HWi4I:hG0uN+eOuvuGu4mDjuf3fi
                                                                                            MD5:5E7CD445F8861A262A3DA876F855A4CC
                                                                                            SHA1:B0CBB7191D67F8553B3292D5B721710F1C3994E5
                                                                                            SHA-256:3F4E4B6EDE035C2ACD2917EEE9DB73B3FB4774179D03762E25C945F48C197979
                                                                                            SHA-512:742E9F9D2AE39DAEFECE21516E1EEDAA4B7F531EB86801D8FE44904B49156ADC3B2B5854C519AD6AD92F9DB2FBA3431ECE3B03B8986C2A725573565D291C6954
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg
                                                                                            Preview: <svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <circle cx="48" cy="48" r="41" fill="none"/>. </clipPath>. </defs>. <title>site_sec_C_06</title>. <g>. <g>. <circle cx="48" cy="48" r="41" fill="#e8eaed"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <g clip-path="url(#clip-path)">. <path d="M89.981,22.441,67.05,68.843c-1.63,3.328-5.58,3.008-7.182-.581L51.8,50.168c-1.613-3.616-5.6-3.907-7.208-.526l-6.8,14.3C36.141,67.408,32.029,67,30.5,63.224L25.637,50.7a4.25,4.25,0,0,0-7.675-.708l-9.3,15.345" fill="none" stroke="#fbbc04" stroke-linecap="round" stroke-miterlimit="10" stroke-width="6"/>. </g>. <circle cx="48" cy="47.981" r="11.526" fill="#fff" stroke="#34a853" stroke-miterlimit="10" stroke-width="6"/>. <circle cx="87.5" cy="27.5" r="8.5" fill="#fbbc04"/>.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 21564, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):21564
                                                                                            Entropy (8bit):7.9688026243536
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:bc6bX9TFqgFUvxQi0W1jHYHwnSthN/yiJsMw52R5oBAvhPFx466gfwu5:bcCV4aUlxHSw8ZyixnFP3N6U5
                                                                                            MD5:FFCC050B2D92D4B14A4FCB527EE0BCC8
                                                                                            SHA1:DE3033F27DB6BBDA89A0E6F16EC51E8C877739AB
                                                                                            SHA-256:C8912EBD82B4DF2EB87E37B1F66432FA2186182E08BB8A533BA4C2DF6CE67FBA
                                                                                            SHA-512:7D517BB33DE3D088B8EE4EC9250AB1645CF76B35B25F57C004BF82B5A9A30C15252C865765EFFD4679A68ACDF6EFB89E4B0319283914880935D8D1AC823FE652
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v18/KFOjCnqEu92Fr1Mu51S7ACc6CsI.woff
                                                                                            Preview: wOFF......T<................................GDEF.......G...d....GPOS................GSUB............7b..OS/2.......Q...`t.#ycmap...4.......L....cvt .......\...\1..Mfpgm...@...2......$.gasp...t............glyf......@...p.N..Hhdmx..M(...f........head..M....6...6...vhhea..M...."...$....hmtx..M....k......3.loca..PX........G.*"maxp..R4... ... ....name..RT........!.>gpost..S0....... .a.dprep..SH.......X9..x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x...pfK.G...1.c>..`9..m<+;..m.x...bg.M.T...O............l...XU.../{.[_..W....c.._..72.. ." z.+..F.......&.&...`e..T].....K=..K2S....q..d...xf.$~i..$?.d..dU.....@R-/LMO-J6...[]..Z..O.C_."If..d....fS....$d.G>eL`....Tf1.......9.c>..`1.TR..x./d-........q.........7....{...v.....!.....1.QG=.4.D3-..F;=..1'.'q.rw...9..e!.....Q....f......qV.n.h.V.Z]..B..C.[B...V.......v...o.w.{...w..zRO.i=..._.....-.m....].=...[...(1.(.#.....O0/.0?..04rL.G.9.....i6..l..|.(o.....|$,..{|&|....YJ...x.e8B.#..t;R8.{+....\=.....
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 21528, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):21528
                                                                                            Entropy (8bit):7.973887568128485
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:uy/NCb8EbjU+Fos6gaUFZ3qR474EAqAG3w/Qpt/uxMsucMgwtDw031F:7/4zb7o6XqR4+3QptcuLg0w031F
                                                                                            MD5:9680D5A0C32D2FD084E07BBC4C8B2923
                                                                                            SHA1:8020B21E3DB55FF7A02100FAEBD92C2305E7156E
                                                                                            SHA-256:2CFE69657C55133DAC6EA017B4452EFFF2131422ABD9E90500A072DF7CA5A9C8
                                                                                            SHA-512:E19A498866F69F3D8136A65A5AB4E92CC047170673ED00B506E325165A84216267B9FEF1E5CFD66458E85ED820C12E9C345CEC9BEE4DE48E1C2E2B1A784F179F
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xIIzQ.woff
                                                                                            Preview: wOFF......T.................................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`tq#gcmap...........L....cvt .......R...R..-.fpgm.......4....s...gasp...<............glyf...H..@...o..Na.hdmx..M....g........head..Mp...6...6...ehhea..M...."...$...{hmtx..M....k.....1<.loca..P8........6...maxp..R.... ... ....name..R4..........:.post..S........ .a.dprep..S$.......D..].x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..|.|..|..|..|.|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 20012, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):20012
                                                                                            Entropy (8bit):7.966842359681559
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:Yc6bX9TagDCXKqs4+W5XVgaflKHjsGdZtlh3K/qzWz/scZpuB:YcCVaeCaF4ea9KHYQZtlh3Kgy4B
                                                                                            MD5:DE8B7431B74642E830AF4D4F4B513EC9
                                                                                            SHA1:F549F1FE8A0B86EF3FBDCB8D508440AFF84C385C
                                                                                            SHA-256:3BFE46BB1CA35B205306C5EC664E99E4A816F48A417B6B42E77A1F43F0BC4E7A
                                                                                            SHA-512:57D3D4DE3816307ED954B796C13BFA34AF22A46A2FEA310DF90E966301350AE8ADAC62BCD2ABF7D7768E6BDCBB3DFC5069378A728436173D07ABFA483C1025AC
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc-.woff
                                                                                            Preview: wOFF......N,................................GDEF.......G...d....GPOS................GSUB............7b..OS/2.......R...`t.#.cmap...4.......L....cvt .......\...\1..Kfpgm...@...2......$.gasp...t............glyf......:...j.'..hdmx..G,...f........head..G....6...6...rhhea..G........$....hmtx..G....a......MOloca..JP........\v@zmaxp..L,... ... ....name..LL..........:.post..M(....... .m.dprep..M<.......S...)x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x...pfK.G...1.c>..`9..m<+;..m.x...bg.M.T...O............l...XU.../{.[_..W....c.._..72.. ." z.+..F.......&.&...`e..T].....K=..K2S....q..d...xf.$~i..$?.d..dU.....@R-/LMO-J6...[]..Z..O.C_."If..d....fS....$d.G>eL`....Tf1.......9.c>..`1.TR..x./d-........q.........7....{...v.....!.....1.QG=.4.D3-..F;=..1'.'q.rw...9..e!.....Q....f......qV.n.h.V.Z]..B..C.[B...V.......v...o.w.{...w..zRO.i=..._.....-.m....].=...[...(1.(.#.....O0/.0?..04rL.G.9.....i6..l..|.(o.....|$,..{|&|....YJ...x.e8B.#..t;R8.{+....\=.....
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\android_192[1].png
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
                                                                                            Category:downloaded
                                                                                            Size (bytes):2378
                                                                                            Entropy (8bit):7.532250152256854
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:2QlYdIey71171171nKew74VuXdaq0j2p7aPS3:ny6x1x1xamSaqXL
                                                                                            MD5:B904DCA6C58B7697D8C52955F9820BE7
                                                                                            SHA1:0BFAA252A9F4B2D0821A043E230CC405663C52E1
                                                                                            SHA-256:9AAA32452049EFCD83C72D3019166199B72F83F507E193B68B873D5FDCFD136B
                                                                                            SHA-512:553DFE30319F24E20FE674A415C8D42A7E5165AE53C0D685A506AC51E88F9D31F152EADE17155DAA868510D2D4D3BB9C1AB303A990EAD367DE145590D91A0012
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://ssl.gstatic.com/docs/forms/device_home/android_192.png
                                                                                            Preview: .PNG........IHDR.............R.l.....sRGB.........IDATx.....u..... ..f*.fdzH[.@.OQ x.[...DR.$=w..R.....oy.J. ...e.$..t;......4......{.iy..;..yw.yf..~...3..?..l9......>...7M.3IHV/k.W....4..I.n.!\L;.3./....l........''V......$.|=...!..KiHN..?zn...............EF,B .@.^.=...B.=.........d....%v..j...G.f....N..:..-..e..&I ....o{$."....6.[...S..2.$....v.<...Q....{\|...DY......u... ...6..../."..@..em..@._.E.... .......... ..@.....m.Q.!@.".(k. .....B..D.Q.&@...E].......M..h........DY......u... ...6..../."..@..em..@._.E.... .......... ..@.....m.Q.!@.".(k. .....B..D.Q.&@...E].......M..h........DY......u... ...6..../."..@..em..@._.E.... .......... ..@.....m.Q.!@.".(k. .....B..D.Q.&@...E].......M..h........DY......u... ...6..../."..@..em..@._.E..#u..s/N..^].6OM......4.~?.......n...TF+B...7.\.v~.x;....m..Tfg....5...A........ej..}+.%."}.d...J....qU8rr*L..........#..lp{..5O...zZ.." ..;./;.).....a.....D.....x.,;_^We3..Q....o{.,..........:.,U...^l........T..{...' ....Ue
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\d1b68e2cd423aba52d74f02573df2d2d[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):9849
                                                                                            Entropy (8bit):4.969315565687199
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+d0yV2aITB9sHTzAIyIdeoaqRF+6/wWN7c2RGd8V:CAWyoaqRF+6I8H
                                                                                            MD5:D1B68E2CD423ABA52D74F02573DF2D2D
                                                                                            SHA1:9FAA2F472EEAA4B61BE00B1A0AE2E1DE3082E407
                                                                                            SHA-256:2041BF4F141AC095ABE365C86BB814509EF11DC741BA3B7E70FE60766432110E
                                                                                            SHA-512:B1B798397D00943958E8E00CB73243CF40129921EFFF9DB852891B47711F0B32CB616EC1D24A8CCAFF939CED0F24399649FCF9C7614D8F880899C7152D9D525E
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/d1b68e2cd423aba52d74f02573df2d2d.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="338" y1="92" x2="354" y2="92" gradientTransform="translate(-238)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="1" stop-color="#1967d2" stop-opacity="0"/>. </linearGradient>. <clipPath id="clip-path">. <rect x="97" y="107" width="50" height="51" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient-2" x1="126" y1="147.5" x2="156" y2="147.5" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#188038"/>. <stop offset="1" stop-color="#188038" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="254" y1="165" x2="270" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opac
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\e79ea0ed464fc8952d5b5582f9f9ae53[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):13232
                                                                                            Entropy (8bit):5.004489515608496
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+9luEGZ2aRcZGDTBmQLBnEGRDzQeqzNOo4HFvdRX1ju6RGumD6k9i4AIkwNgFFro:HBBJQeq07fXDIumDf9lAuNgFFrpi
                                                                                            MD5:E79EA0ED464FC8952D5B5582F9F9AE53
                                                                                            SHA1:7C64CD9D283C3E87EC34160A70688A52D6144766
                                                                                            SHA-256:FC432273DBD2B5233238B2BCA3E167CE7DD6BCB5318B3D06DC664ED15F309637
                                                                                            SHA-512:3A5DE44AF0E40C6E226E4AACCE0BB7C9F78FE4DFB301B0FAB28586D7112456CC812F399DE163285CB6B79E1316DC87BF04ADA33A20AF9825417E33C122063A0A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="-56.701" y1="323.063" x2="3.299" y2="323.063" gradientTransform="matrix(0, 1, -1, 0, 614.584, 137.96)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#202124" stop-opacity="0"/>. <stop offset="0.023" stop-color="#202124" stop-opacity="0.079"/>. <stop offset="0.257" stop-color="#202124" stop-opacity="0.751"/>. <stop offset="0.4" stop-color="#202124"/>. <stop offset="0.615" stop-color="#202124" stop-opacity="0.751"/>. <stop offset="0.965" stop-color="#202124" stop-opacity="0.079"/>. <stop offset="1" stop-color="#202124" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="273.911" y1="117.637" x2="297.393" y2="102.387" gradientTransform="translate(333.87 -192.271) rotate(78)" gradientUnits="userSpaceOnUse">. <stop off
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fa9e0e90d1e7ec399dad9f3257a9bb63[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):7010
                                                                                            Entropy (8bit):5.014483393232849
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+52a4F85vujmX+SMHk8GmgDIK2VGpv67Lwy/N7JPDzjUOH:O40uy+SMHk7lDI7spv67LwSN7JPDzgy
                                                                                            MD5:FA9E0E90D1E7EC399DAD9F3257A9BB63
                                                                                            SHA1:7126642DDBF2DED43DC097B3521F3DD6BEF50405
                                                                                            SHA-256:3EB0CFC171D8DFE795A23B5884593227EC11109EE1F9057BED4E48E5E4740604
                                                                                            SHA-512:D6909D7974FCE725A0915F04812DD901010A5D798B93BF943664C254627C4511D44792C27ED4C98E8D6B16890B51CD11E1ADE80300F3101C874914A283F326A4
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="11" y1="165" x2="47" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="233" y1="121" x2="265" y2="121" xlink:href="#linear-gradient"/>. <clipPath id="clip-path">. <rect x="50" y="80" width="116" height="82" fill="none
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fb61fc4bfc85ad86f11342e699d685e9[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):13663
                                                                                            Entropy (8bit):4.850378997553469
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+y2aZrsHBAPC0GDy8gUFnD0alywjj/+TjD66Nt1ygnCL1YsrHwITnrU2TJbIrbon:baH/WMJYaNUyXNIr0n
                                                                                            MD5:FB61FC4BFC85AD86F11342E699D685E9
                                                                                            SHA1:5EA7B864D6A727F9A7CF5023BB556CC221564FEF
                                                                                            SHA-256:92C06932C12A74573114DB6FEAA94C43A980FB7B5DC0014A1AEF32F8C222F849
                                                                                            SHA-512:DD782F29B937B2CB6365C758B246D020BA5B718C797E5208EA0401EE3B599C77826219CE5612F137BADC34F97D59C80A427965F455A56829BEA790D2E756E605
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/fb61fc4bfc85ad86f11342e699d685e9.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="12" y1="143" x2="32" y2="143" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="72" y1="165" x2="144" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" s
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\googlelogo_color_74x24dp[1].png
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:PNG image data, 74 x 24, 8-bit/color RGBA, non-interlaced
                                                                                            Category:downloaded
                                                                                            Size (bytes):1622
                                                                                            Entropy (8bit):7.861147443229629
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:1iZ3jFWCXwymKs5AbKuyp/fvBheQdm+6QmWO:1iZ3ZWKZmKsCb0/fphH6QJO
                                                                                            MD5:DE327BF69212B7255BBB0C8F40F52A3C
                                                                                            SHA1:8C9E7517E6456E13F3F4640E39743B74F98B8F39
                                                                                            SHA-256:0793CEFA320C6C622E8B143B35FAFB577BD7584C26796D3B5E1321463494FE76
                                                                                            SHA-512:FDC82955CCBA3E9310CAC694197C43EB289CE9FFCB2A0784CCBAE0F3CEB5ADCF2F72D40C411290BDB6F3311E23321D13D3C2C6D20DC63E733A291A115E254060
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_74x24dp.png
                                                                                            Preview: .PNG........IHDR...J.........].k.....IDATx....t.h...Y.sww?../$p............../.'-....C...K..{?,m...73d.....|z[..U..L./.....Zp.....<...D.......TZ.....^...a`.E......}@'.i.3.s.|&.......2nty...` .r.A.._H..e.p.-..`.'%.....a..31x>>..h....z.~.............(..6........V^..P...@u.........;..y..FY....J.B>+.....p..R.r.X.......@..V...z.M....y..)..@v..Fe..O.-8.5u9..px.. \.k....@..r..[..Y.*-.}.4E...B..l@..3.G6....j..<.of...a{j..d.L.r....7..a.../.*@...Y.`.l......9A....r..u..9.J..1ryC........HOt.U....b.E..{3iC.-....&!X.,9.*......d..!k6......M4...l..#4............*.&|...c..?OS...*.\~..v.q.A......*.....Q..2...@..G..P.x..@.j....d..@....(..........'.....%....._..Y...k...n<wkE .Wk\.............P<...p......\' d.@..X@...$......z..N)?......S., Q.T:...@..BMZ..Z...Y..@.J/X'.....:.P... ...'..X....`....6L?....3..)+...c.K..~)pF..d..s....B0`)......si.#..J.-...cl...s<.....z$'.#./x......%-...0.-.d.........x...+."."....N.b .....7....@EQ..W.ds....;.8J....^..9@.t.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\iframe_api[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):810
                                                                                            Entropy (8bit):5.292728819504826
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:E1bWYtpqAK/HJ2TAXC5vuHM8aJLtdRWZ4FhQ:E1bdPcSAXC5kaJLzwYhQ
                                                                                            MD5:63D19659F78F51528041883187A85557
                                                                                            SHA1:A3F9D40D962F95785972B24470C232BAE96A44A2
                                                                                            SHA-256:215215E7C7284D3529A3A4D0CB7B70BDB3B5767DDD7C8D652D292DE64B9433D7
                                                                                            SHA-512:C7CDA1709358288E9624A658189848BA3DEC6AC42A3841AC101674CA143AE6D1D087455CADDEAE2F3965D614F9DE103DA43F9CCE4C643FB4D6AE2C87A1FC9D10
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/iframe_api
                                                                                            Preview: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/77da52cd\/www-widgetapi.vflset\/www-widgetapi.js';if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;for(var i=0;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){for(var k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce||c.getAttribute("nonce");if(n)a.setAttribute("nonce",n)}var b=.document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=_b,_tp[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):149059
                                                                                            Entropy (8bit):5.465797550461563
                                                                                            Encrypted:false
                                                                                            SSDEEP:3072:j7XBDu8d2zmpxBrhkEEWGIK+9aKiFFaJBGr6RK3dm2CZRFtODtZBJYZpv15QljUF:j7x2Snkw733
                                                                                            MD5:1CC41E2F54EB2CDAC17242BF88A90B6F
                                                                                            SHA1:7A366565772CCED614B87B9B55C3A83D55ED6553
                                                                                            SHA-256:BDB8F3A5303F21923B9D1098D6C16311B632ACB9102940ED38FE18B0AAB7D85C
                                                                                            SHA-512:68B875DF4B6419CAAAB3077E76361EB0BCF53B096F3B0B69B6266A77F5A63A9F1A1DD51C15968D80A6E6822B553981CDD16DCBB85225CA99963D824525A9D583
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{.var aaa,Ia,baa,caa,daa,eaa,faa,gaa,haa,iaa,eb,oaa,maa,paa,aa,Ab,Bb,qaa,Db,Eb,raa,Hb;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.ca=function(a,b){return aa[a]=b};_.da=function(a){if(Error.captureStackTrace)Error.captureStackTrace(this,_.da);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));this.g=!0};_.ea=function(a){return a[a.length-1]};._.fa=function(a,b,c){for(var d="string"===typeof a?a.split(""):a,e=a.length-1;0<=e;--e)e in d&&b.call(c,d[e],e,a)};_.ia=function(a,b,c){b=_.ha(a,b,c);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};_.ha=function(a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.ka=function(a,b){return 0<=(0,_.ja)(a,b)};_.la=function(a){if(!Array.isArray(a))for(var b=a.length-1;0<=b;b--)delete a[b];a.length=0};._.ma=function(
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=dXoSAc,CbeRWe[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:modified
                                                                                            Size (bytes):1060
                                                                                            Entropy (8bit):5.305319486824716
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:kAyHsys9s8BQBaLJlRWKlm2Mp2AeBsS2xuD1gMgaIMHtJQAfrG:tyHsysC+GatlwK4B/0gMgaIMM8rG
                                                                                            MD5:0F48A13A3A2D7714601DBA994E13F872
                                                                                            SHA1:B79F5C5388E384964280E5FBA17AAE44D3BA892C
                                                                                            SHA-256:539196CC87D0A61C77B0AE5D95ECDDE6D8A9E06149B7622EB25D8EEE85A0DDA0
                                                                                            SHA-512:975D0CC33F069C94B75DB8994BB130D383730201FC9AD266668341235FE117B008A64770E75EEF7B765E94B2C1DEA40EB514C7816A08A5A32F9FFDA563F34B72
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("dXoSAc");.var goa=_.D("dXoSAc");.var $2=function(a){_.V.call(this,a.ma);this.i=null};_.w($2,_.V);$2.T=function(){return{}};$2.prototype.fC=function(a){a:{a=a.data;var b=this.H().v().getElementsByClassName("bCzwPe");b=_.v(b);for(var c=b.next();!c.done;c=b.next())if(c=c.value,c.href&&_.pc(c.href,"#"+a)){a=c;break a}a=null}a&&a!==this.i&&(this.i&&_.hi(this.i,"YySNWc"),(this.i=a)&&_.gi(this.i,"YySNWc"))};_.W($2.prototype,"C1eaHb",function(){return this.fC});_.NK(goa,$2);.._.n();.._.m("CbeRWe");.var foa=_.D("CbeRWe");.var V2=function(a){_.V.call(this,a.ma)};_.w(V2,_.V);V2.T=function(){return{}};V2.prototype.dG=function(){var a=this.Fa("O1htCb").v().value;if(a){var b=new _.Ps(this.getWindow().location);b.g.set("hl",a);_.yd(this.getWindow().location,b.toString())}};_.W(V2.prototype,"msyOCf",function(){return this.dG});_.NK(foa,V2);.._.n();..}catch(e){_._DumpException(e)}.})
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=viewer_base[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):345777
                                                                                            Entropy (8bit):5.548795645975241
                                                                                            Encrypted:false
                                                                                            SSDEEP:3072:oILnXlgxTCupPjIAAxIhgc/++taiFOZ8SDON9JAPQy9K83HtLb4qQvbh:/r2njIAAxIhgb9cOZ8CQyLBGbh
                                                                                            MD5:BBA612701DD9A701C1A8F0CFEFFB9315
                                                                                            SHA1:58D6A97A7C9FE4A381FD4B09B0C6215FA6AF0D7E
                                                                                            SHA-256:67ACDA6D4CFF27279087F27DEC534948A859E9DDD4303616D55D4CCD6C4885EB
                                                                                            SHA-512:AC6252382099A9C19A0D21E5BCD25CEA43283F8D6381CAF5FF2AC84C3E49001D8AA196CCBDC4AA3B98E321F576CE39E896E58F06B91A3BDF27FD5B6658BC11C3
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en_GB.eZyF8I6wdhY.O/d=1/ct=zgms/rs=AMjVe6ihXnQzo8KHOjWAgGOP4LqoE8uG1A/m=viewer_base
                                                                                            Preview: "use strict";this.default_v=this.default_v||{};(function(_){var window=this;.try{.var aaa,daa,eaa,Oa,faa,jaa,kaa,laa,maa,naa,oaa,vaa,xaa,yaa,kb,zaa,lb,mb,Aaa,Ra,Baa,nb;_.aa=function(a){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));this.H=!0};_.ca=function(a){return a[a.length-1]};_.da=function(a,b,c){for(var d="string"===typeof a?a.split(""):a,e=a.length-1;0<=e;--e)e in d&&b.call(c,d[e],e,a)};_.fa=function(a,b){b=_.ea(a,b,void 0);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};._.ea=function(a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.ha=function(a,b){for(var c="string"===typeof a?a.split(""):a,d=a.length-1;0<=d;d--)if(d in c&&b.call(void 0,c[d],d,a))return d;return-1};_.ja=function(a,b){return 0<=(0,_.ia)(a,b)};_.ka=function(a){if(!Array.isArray(a))for(var b=a.length-1;0<=b;b--)delete a[b];a.length=0};_.la=functio
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\m=wmlPKb[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):757
                                                                                            Entropy (8bit):5.3067418072756265
                                                                                            Encrypted:false
                                                                                            SSDEEP:12:kgEAgSyFPVEb8VEvt/iSZV//0h0GTd6r2vcTcGCRe30uU+kbRNeQ0:kAy5Vs8udiSZt/0hXh/qCuUfrG
                                                                                            MD5:B5A4ABA14F6E469F0802F2F6D4E2E21D
                                                                                            SHA1:4666E84C3A7A554077B249C292D8D2EA010E1E45
                                                                                            SHA-256:377DC396FCD5515C6B497971A7CAC038E809534BD0DB8A21D26E3189C1139B6B
                                                                                            SHA-512:FCFA04D4D4AD32B6C612DC1FA93A5F9F7520307B4EB7115C49C6F91153EAE6FC320470A00A562F4AC7AB6EEBA998D824B3BA2E039243C1BFB5D1E26E3AD3855D
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("wmlPKb");.var Y1=function(a){_.V.call(this,a.ma);this.i=a.W.Sj;this.o=a.W.view;this.j=this.getData("trackerId").Qa(void 0)};_.w(Y1,_.V);Y1.T=function(){return{W:{Sj:_.V1,view:_.CK}}};Y1.prototype.EF=function(){var a=this.i,b=this.o.getCurrentView().g.j,c=this.j,d=void 0,e=void 0;d=void 0===d?a.i.location.href:d;b=void 0===b?a.g.title:b;e=void 0===e?a.g.referrer:e;_.X1(a,"location",d,c);_.X1(a,"title",b,c);_.X1(a,"referrer",e,c);_.W1(a,"send",["pageview"],c)};_.W(Y1.prototype,"wKZqRb",function(){return this.EF});._.NK(_.Jda,Y1);.._.n();..}catch(e){_._DumpException(e)}.}).call(this,this.default_IdentityPoliciesUi);.// Google Inc..
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\qp_sprite136[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:XML 1.0 document text
                                                                                            Category:downloaded
                                                                                            Size (bytes):106831
                                                                                            Entropy (8bit):4.995675334827135
                                                                                            Encrypted:false
                                                                                            SSDEEP:3072:fAhQzVUOUtUDRo89w22lY9YpYf3qm12k68fTg0gfzFtCWjFBi8+IDGDpDs0/J+/5:k
                                                                                            MD5:0BE382BD41F9867BC74294AF00C20268
                                                                                            SHA1:E97234F7241BF5B0FA01039C8DBDB4AAA073EB0A
                                                                                            SHA-256:73B1A3A4653A6699F1669B4E0D279F7B7F730A77E191C31FF8D2E42D3C42AF8F
                                                                                            SHA-512:15485FA524E8CE94FE0567713E101B880C91049B1610130DA17357142A1D6098826D7DB80881746E3CB0B709712EC59588B707BF097D5CEFAD0A66CAEDAC8CD8
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://ssl.gstatic.com/docs/forms/qp_sprite136.svg
                                                                                            Preview: <?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns:xlink="http://www.w3.org/1999/xlink" xmlns="http://www.w3.org/2000/svg" version="1.1" x="0" y="0" width="26px" height="7982px" viewBox="0 0 26 7982" preserveAspectRatio="none"><g transform="translate(0,3874)"><path d="M0 0h24v24H0z" fill="none"/>. <path d="M19 3H5c-1.11 0-2 .9-2 2v14c0 1.1.89 2 2 2h14c1.11 0 2-.9 2-2V5c0-1.1-.89-2-2-2zm-9 14l-5-5 1.41-1.41L10 14.17l7.59-7.59L19 8l-9 9z"/>.</g><g transform="translate(0,390)"> Generator: Sketch 44.1 (41455) - http://www.bohemiancoding.com/sketch -->. <title>Checkbox Grid Icon</title>. <desc>Created with Sketch.</desc>. <defs/>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Checkbox-Grid-Icon" fill="#000000">. <rect id="Rectangle-18" x="1" y="1" width="6" height="6"/>. <rect id="Rectangle-18-Copy" x="9" y="
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rs=AA2YrTur8uQVb0PS_fZQNu3wmpDiwcWuQQ[1].css
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines, with no line terminators
                                                                                            Category:dropped
                                                                                            Size (bytes):301
                                                                                            Entropy (8bit):5.1920370610104065
                                                                                            Encrypted:false
                                                                                            SSDEEP:6:ea+ZwTcqcA2n6gt9VvKcZWbnRVIM6RoeSjIUVY2f2H2gs8Y2HEIzY/:eZZfqcA26gAcZWfp6SVYqoY/
                                                                                            MD5:2122313E26FFB1184EB213EE9A780DB9
                                                                                            SHA1:04A851AFAA376415EC562ED675B4B1157F86B799
                                                                                            SHA-256:2DB4ADD54D1C078CC5F8DC084365314868C10FA279EABC67AFD187F47D08C59F
                                                                                            SHA-512:004F6E615FDB7A06986733FBACD4847FAD3BA7487DBA95A72922E18BA72F13ADC15B44AA6B2259F8AA7C53A748A0E5D8393FCF7CE9E1DB1481F654DFEB18504E
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: .gb_3e{background:rgba(60,64,67,0.90);border-radius:4px;color:#ffffff;font:500 12px 'Roboto',arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000}.gb_Lc .gb_Hc{overflow:hidden}.gb_Lc .gb_Hc:hover{overflow-y:auto}sentinel{}
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\rs=AA2YrTvt_FChtzGjr4wKVQY3jzJEAyfceg[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):95484
                                                                                            Entropy (8bit):5.56707799490618
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:2aCeBYGw2mpgkkbea/lEHvwUM0XIHQ+1+l3Tv3wXOd8Yg:fUkHEHTXIT+l3Tv3wXj
                                                                                            MD5:35DA1E5321FA1E99350E4133A5BF848F
                                                                                            SHA1:B91458F25690923E968983E4078D1FC5870CBA50
                                                                                            SHA-256:653A14AF74CAF5E019AF9FE3E211984A16727B75EE6CB0BEE5E3C36563BF77D3
                                                                                            SHA-512:011B0F778F5D81928D0DC4AEC9045CA07C6C34518BA2B21A2F13D9A903D02DD9CB832D4F53BA650D7D58433D7E16D679F8F3A88F9DCDE908A7323C08A297946A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: this.gbar_=this.gbar_||{};(function(_){var window=this;.try{./*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/._.Pj=function(a){switch(a){case 200:case 201:case 202:case 204:case 206:case 304:case 1223:return!0;default:return!1}};._.Qj=function(){};_.Qj.prototype.o=null;.var Sj;Sj=function(){};_.v(Sj,_.Qj);Sj.prototype.j=function(){var a=Tj(this);return a?new ActiveXObject(a):new XMLHttpRequest};Sj.prototype.B=function(){var a={};Tj(this)&&(a[0]=!0,a[1]=!0);return a};var Tj=function(a){if(!a.A&&"undefined"==typeof XMLHttpRequest&&"undefined"!=typeof ActiveXObject){for(var b=["MSXML2.XMLHTTP.6.0","MSXML2.XMLHTTP.3.0","MSXML2.XMLHTTP","Microsoft.XMLHTTP"],c=0;c<b.length;c++){var d=b[c];try{return new ActiveXObject(d),a.A=d}catch(e){}}throw Error("U");}return a.A};._.Rj=new Sj;..}catch(e){_._DumpException(e)}.try{./*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/._.Uj=function(a,b,c){a.j||(a.j={});if(!a.j[c]){for(var d=_.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\terms[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, UTF-8 Unicode text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):444463
                                                                                            Entropy (8bit):6.070798928147865
                                                                                            Encrypted:false
                                                                                            SSDEEP:6144:F8VPFt4vB46Gb3IsO7iT0qf63QACzc+Zc:F8hj4vB46+3mMbfyd
                                                                                            MD5:0EB06F45DA1894C75BAA2B3F7B229584
                                                                                            SHA1:B99AED495835DDD0CA39339C76CF3810C0EF5C6F
                                                                                            SHA-256:D55AD0D8C7F2351DCF3F9F2973D6EFC6F02BBC52DF6AEDC443354BD9562CEF8F
                                                                                            SHA-512:FCC0268A19FC74B248B8FC6E83001CDCEC21C60769F093D76C29DFA0F3F5B367127F73F0048D081D8D3A07747862280A9CF4D0E8CB75CCFC836E800DDF02391A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: <!doctype html><html lang="en" dir="ltr"><head><base href="https://policies.google.com/"><meta name="referrer" content="origin"><meta name="viewport" content="initial-scale=1, maximum-scale=5, width=device-width"><meta name="mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="application-name" content="Privacy &amp; Terms . Google"><meta name="apple-mobile-web-app-title" content="Privacy &amp; Terms . Google"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="msapplication-tap-highlight" content="no"><link rel="manifest" crossorigin="use-credentials" href="_/IdentityPoliciesUi/manifest.json"><link rel="home" href="/?lfhs=2"><link rel="msapplication-starturl" href="/?lfhs=2"><link rel="icon" href="//ssl.gstatic.com/policies/favicon.ico" sizes="32x32"><link rel="apple-touch-icon-precomposed" href="//ssl.gstatic.com/policies/favicon.ico" sizes="32x32"><link rel="msapplication-square32x32logo" href="//ssl
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 26412, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):26412
                                                                                            Entropy (8bit):7.982191465892414
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:BXFxTA19K8CdHMT6KHQO8LWhHCWN1ekhzLS:9f29ZYMTwO8qh1nm
                                                                                            MD5:142CAD8531B3C073B7A3CA9C5D6A1422
                                                                                            SHA1:A33B906ECF28D62EFE4941521FDA567C2B417E4E
                                                                                            SHA-256:F8F2046A2847F22383616CF8A53620E6CECDD29CF2B6044A72688C11370B2FF8
                                                                                            SHA-512:ED9C3EEBE1807447529B7E45B4ACE3F0890C45695BA04CCCB8A83C3063C033B4B52FA62B0621C06EA781BBEA20BC004E83D82C42F04BB68FD6314945339DF24A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwA.woff
                                                                                            Preview: wOFF......g,................................GDEF.......q........GPOS.......%..+...RGSUB.......y......m.OS/2.......U...`i`..cmap...........~n...cvt ................fpgm...@.......uo..gasp................glyf......>F..m>Q..head..[\...6...6..'.hhea..[.... ...$...3hmtx..[..........<'3loca..^l...{...._.{.maxp..`.... ... ....name..a........V..4.post..a..........i]\prep..et.......^....x.D...Q...3..IX=D.@@....@....."...}......`.%.....x.........umW...g.WwO.....J..^?.Jci^N{.Nr..Jw@.n(.....t4....g...x.....6.E..8..........affff.0.B..&.L...B.Nzy..n.T.t~w&..%[.dYzzz.Oe" ..lE.........m..7[s}...[l..)..)...(H.A.@q.57..S.@.._..].*.j.-^N.R...'...]v.0..2n.6...~....X..xN.DN.T..b..*Q5.E.).,QI.....M....6.P."..|..*.tI5.......t..r.(...{M..T}..@.kbNP.I*.9-...=E.U'.{.....p|.t..qJE.9...'...*...z...L./.....rnXQ.6.|.....n.V.....K.?.G...<..<..Q.....C..K(s.PR.x\(..P@.P..z.DL.1.$*../.8A.8Q.r.Pr[e.Rt+~.}9.)E.'.U..z.G..G..OH/H...L.../..{S...EP.%........o.................uN...'.}%..9.F
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4UabrENHsxJlGDuGo1OIlLV154tzCwA[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 26164, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):26164
                                                                                            Entropy (8bit):7.983292364847896
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:L9QwjnXN11zY7+dePzz5Othh7STtySTygbOg9zp:L9pjz1kCePzQthJSYgbRp
                                                                                            MD5:CCDA7B53E281A638F36ED62514815268
                                                                                            SHA1:CF6D39BAB2A012D008EC9EDF95F4F4BDACF93770
                                                                                            SHA-256:673F112749C21E5BE0D1338E1709A1D981053E239E98CE09D0BB849BB34FCD98
                                                                                            SHA-512:20645A09B2FF157E50C71D862AA4FE6729FFD8BE18FB3D390B3714DEEC4F4FFF49FAC16EC509F8D620E476DC1942C67C95A95ABF14A06585F5B504FB4BE89F58
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLV154tzCwA.woff
                                                                                            Preview: wOFF......f4.......|........................GDEF.......q.......~GPOS.......#..+...UGSUB.......y......m.OS/2.......U...`j(..cmap...........~n...cvt ............(...fpgm...`.......uo..gasp...(............glyf...4..=...k....head..Z<...6...6.x'.hhea..Zt... ...$....hmtx..Z...........%.loca..] ...y......%.maxp.._.... ... ....name.._........Z.L3.post..`d.........i]\prep..d$........t...x.E......E.}&$a......A.. ....,....`..}....q....+o...9 ....B.J..WS..w2.{...o.D~!X.D:..Muq...[1 ..[.I...]..#-..0...x....+..E.pg....bfffffffff.0.+ef.5..N.0..K..r....Y...@..V.t.~.......[q....h+..y...1s.#.>.%....CX.,@.F..t.H..t..{.q.c.>..\?..J.".J.+.M.L...:l%..I\....<......._....M..-....7.BP.J.d2*.T..,G...*E?.Z.p..].w..=z....9.p{..<._O+*..r._...]U.]..?.r.JoQi..k..P...*.....=.X.:U.....\.....h.....r....L....J..Sn..<9..V..=.x=:x..x..yCr.#e.._..o.>...s.<!M.......!..o....!....j.#$.:A..Bn.2.$..,..E...{...G_.....L............jw..P.]!..wE.R..a..rK4...k.._.W24^...cuh..fTIH.Z.TJ....&.x
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\4c5ee41d52605ff6f43538d46a1c0d35[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):12773
                                                                                            Entropy (8bit):5.021780026284317
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:s/HeqPFaqW9UXuhX85+dkoEe3jO+HKFvO:0He2K9UMX8563jn
                                                                                            MD5:4C5EE41D52605FF6F43538D46A1C0D35
                                                                                            SHA1:5432F87B16A63087A22EDFA0AF1C5ECA4FADE3C4
                                                                                            SHA-256:89BBCE254FCE9A0F06C8A2C4E491E4811418E25EE92183EE42C5CD6154778C1D
                                                                                            SHA-512:7F655C5ADE13D276CF4CE6BEDAAF58F8E1A215018A39529B121B64284B1AE54031858CA4907B0715518BC01B146561F00BA4FDE6B1229CA2CDC3256EF44DCD61
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/4c5ee41d52605ff6f43538d46a1c0d35.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="16" y1="165" x2="40" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="200" x2="228" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="158" y1="137" x2="186" y2="137" gradientUnits="userSpaceOnUse
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\51cd09d6239edc9652bc05ad1d149a5c[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):13177
                                                                                            Entropy (8bit):4.927867691017123
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+RHGRrrsHa2aDBUKdU1Q7dXphVsVjVArUaNqvqurfGFDJDfQaUZuZyWF2gSM4wEz:4G6HiNq14FvrUaNqvqiGJJjJUE8wnI
                                                                                            MD5:51CD09D6239EDC9652BC05AD1D149A5C
                                                                                            SHA1:6C88C92D1C01A8ADDDA86322DEB1487CDA763C8E
                                                                                            SHA-256:96B628232FE1459C56ADFC5E7877CE0AEC28E17D3B137408B7A2EC278181BDDF
                                                                                            SHA-512:DA5F756FBFBA4EE0540B651D2DA1A5664A2689E55EC3F7124F284C3B2EC7288E447D7CEB5A54CC372E7E782D8DA0DBCB320E68F71D1A3E675F4085BB88BFB812
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/51cd09d6239edc9652bc05ad1d149a5c.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="293.155" y1="108.155" x2="321.845" y2="79.466" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6"/>. <stop offset="1" stop-color="#bdc1c6" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="46" y1="93" x2="74" y2="93" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" stop-color="#bdc1c6" stop-opacity="0.021"/>. <stop offset="0.279" stop-color="#bdc1c6" stop-opacity="0.084"/>. <stop offset="0.424" stop-color="#bdc1c6" stop-opacity="0.189"/>. <stop offset="0.57" stop-color="#bdc1c6" stop-opacity="0.336"/>. <stop offset="0.718" stop-color="#bdc1c6" stop-opacity="0.525"/>. <stop offset="0.864" stop-color="#bdc1c6" stop-opacity="0.753"/>. <sto
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\900a793eae04f4bddd675f8d95c4a794[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):4391
                                                                                            Entropy (8bit):5.07432704633403
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:+GO/YWHx4GLZ/W12HxDWj6V7QlWHxjUW+ev/3jZVV8gFOiawwEMqjJ79oqFCB2IK:+Hp2ShN4Q3ji9w8qj1C/JBWgWV
                                                                                            MD5:900A793EAE04F4BDDD675F8D95C4A794
                                                                                            SHA1:D79FE87CC4B220245AB72251DCF3AE4C71108544
                                                                                            SHA-256:166EAB00B3516B5AEB1BB114FA70D57E0F4E021D4C06735C6969B08C5B7E1FDB
                                                                                            SHA-512:E18FC18597424E69987E13E8F4E6E174A56B46C2D1616E203AC9C02EFBEFB47CCABB39ED999B0DF1784CEFC0D7444C19E2DDACA30022F45864554F999587DE13
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <path d="M48,7A41,41,0,1,0,89,48,40.989,40.989,0,0,0,48,7Z" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="12" y1="68" x2="24" y2="68" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.116" stop-color="#9aa0a6" stop-opacity="0.054"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.201"/>. <stop offset="0.546" stop-color="#9aa0a6" stop-opacity="0.44"/>. <stop offset="0.823" stop-color="#9aa0a6" stop-opacity="0.768"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="46" y1="71" x2="46" y2="25" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#f29900"/>. <stop offset="0.138" stop-color="#f29900" stop-opacity="0.81
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOkCnqEu92Fr1Mu52xM[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 70252, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):70252
                                                                                            Entropy (8bit):7.991632922372932
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:YTt6ZsFuN81CE0CsCo/Og4GzjPuZZ2+9jKqYREbNybjKX+fErcUq1ZF:YR6DEC2sTOgtuCYjKqYU2jKX+fZ1ZF
                                                                                            MD5:C762D850E2E8D0E29047608715196736
                                                                                            SHA1:180008B4E27877CACFD75F650C030604ECD39A76
                                                                                            SHA-256:B67FE6ACDAD82B2DBD3BFAEA0AD436E997466D6D2FA8839C13B52FCE6892DDA4
                                                                                            SHA-512:4C7E31F639CA8469E371462EB5C6678D9817DB7EAB085E06681291C509FA2C752331867EED28A6988C2189256051655E218CF5F5C07654957CB03776619E7F95
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu52xM.woff
                                                                                            Preview: wOFF.......l................................GDEF.......,....pjm.GPOS......"...N..sk.GSUB..%P.........x..OS/2..*....Q...`...Rcmap..*h...U...FP...cvt ..3....R...R..-.fpgm..4....4....s...gasp..5H............glyf..5T......yF... hdmx...,...M.......head...|...6...6...ehhea.......#...$...nhmtx....... .....8..loca.......p.....Bqrmaxp...h... ... ....name..............:.post...`....... .a.dprep...x.......D..].x......P.....;+.6.l..-...<.v.m....g.._..u........P...;.&8...N,sb...Yo7...u. ..r..g.E'.;q..N.u.>..#..N.....w'~...%.f;.+!EE[H.m)...T.VQ5[C5....H...6US.J.m.u.....R.;@..`..c4.N.D;Y..tM.35...\;_....!....E?.~..(..{.p.^.w.....mJH.i!.E.h..".X\k7..vs.b...vg.c........Q...;.......j#..^.qLg..?mV.x...d.a.....6.2.4.[..4.w.}&.[.......f..ZE...5C..........a. ..8UQp.j`..=...E..O.{.....;d..B.C......k(..XYEi...u...}.......u...E.>.4..!s.-.f..~....;._rb..]..F....P.._..../C......=....:.sm.9....J..k.^~N[..R..g..A>..'.._zsy.JP./.j....T2...{.{.gq.xX......ce..'C.N..h.-z....YW.s...*.jM.O
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOlCnqEu92Fr1MmEU9vAA[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 66456, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):66456
                                                                                            Entropy (8bit):7.991041370753205
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:9I6x2fDNupGaMI7Tvq41VficHnry4R61SowFUXKO1wWQ2:9I6xSDA7H7Lq41VficHGm6EvUX71pX
                                                                                            MD5:851A2B5A8394EB1B868678BFD31A1A8A
                                                                                            SHA1:0F633AE8F8836076EA5AE369FBBC58D1733156AC
                                                                                            SHA-256:9915A79AFE8C10196DD8FC8A666E89D9E416C738020AE87D1B14051D891C848D
                                                                                            SHA-512:479033FD3B228C974076D077DCE43CC55CB04B0CBA30D2B9B3242F2888884737BCA6E14521A80B8BDE6B8180FB3BD9753391442F053E15E4D4D49DE405ECB754
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9vAA.woff
                                                                                            Preview: wOFF........................................GDEF.......,....pjm.GPOS......'...V...%.GSUB..)..........x..OS/2.......S...`..cmap.......U...FP...cvt ..88...\...\1..Kfpgm..8....2......$.gasp..9.............glyf..9.......m`|@.qhdmx...\...N........head......6...6...rhhea....... ...$....hmtx...............hloca...$...r....=T.maxp....... ... ....name..............:.post........... .m.dprep...........S...)x......P.....;+.6.l..-...<.v.m....g.._..u........P...;.&8...N,sb...Yo7...u. ..r..g.E'.;q..N.u.>..#..N.....w'~...%.f;.+!EE[H.m)...T.VQ5[C5....H...6US.J.m.u.....R.;@..`..c4.N.D;Y..tM.35...\;_....!....E?.~..(..{.p.^.w.....mJH.i!.E.h..".X\k7..vs.b...vg.c........Q...;.......j#..^.qLg..?mV.x..C..A....m...c.m..q.z.p...[.6..Y.....;..{.....J..x.i...^8k...5v2.O.9g..'...O|..&..5.|.............n.."...O?..H.:.3.%J...y....?.....9z.(..>.pN5`...=.0....A......N...#VP.5......)&.l.].6-.G.S.*.5....c.>.....LpO.Mh.. .=iCJ..B..23Ey.<..X......V....*hR...N\,..+...G.,.....b^U.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOlCnqEu92Fr1MmSU5vAA[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 65784, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):65784
                                                                                            Entropy (8bit):7.992010135494805
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:QTt6ZsJuBO5VxwqcPodv6NSnuIahnHS9Azx9FONcvc:QR6jYUodvSVIEy9O9FONic
                                                                                            MD5:C46434D46A72919EB141228DD0144B6C
                                                                                            SHA1:6FA52CC7EC50E845F4140ED52C97EFEE0F15689A
                                                                                            SHA-256:B229BABDF21248E71A85A52F5993778109589E63AB8640AEA58549CD1AA3BF2E
                                                                                            SHA-512:37CDDBB1857E7FE1A92F93964C50DA3FBA7CFE958D5322DC9939B2F6410185EE73DFB2FD5C9015D74C0428BC3E5592953117D1370E02ED61A034F3FA267AF443
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmSU5vAA.woff
                                                                                            Preview: wOFF...............P........................GDEF.......,....pjm.GPOS......"...N..sk.GSUB..%P.........x..OS/2..*....R...`....cmap..*h...U...FP...cvt ..3....X...X/...fpgm..4....4......".gasp..5L............glyf..5X...m..o*.XaUhdmx.......O........head.......6...6.Y.ihhea...P... ...$...ihmtx...p...-......O.loca.......q....s!Omaxp....... ... ...\name...4.......|..9.post........... .m.dprep...........:z/.Wx......P.....;+.6.l..-...<.v.m....g.._..u........P...;.&8...N,sb...Yo7...u. ..r..g.E'.;q..N.u.>..#..N.....w'~...%.f;.+!EE[H.m)...T.VQ5[C5....H...6US.J.m.u.....R.;@..`..c4.N.D;Y..tM.35...\;_....!....E?.~..(..{.p.^.w.....mJH.i!.E.h..".X\k7..vs.b...vg.c........Q...;.......j#..^.qLg..?mV.x...d.a.....6.2.4.[..4.w.}&.[.......f..ZE...5C..........a. ..8UQp.j`..=...E..O.{.....;d..B.C......k(..XYEi...u...}.......u...E.>.4..!s.-.f..~....;._rb..]..F....P.._..../C......=....:.sm.9....J..k.^~N[..R..g..A>..'.._zsy.JP./.j....T2...{.{.gq.xX......ce..'C.N..h.-z....YW.s...*.jM.O
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 19888, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):19888
                                                                                            Entropy (8bit):7.96899630573477
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:0c6bX9TSzYzCrQH+qXM6C0ouF0xcYye+5x/U3S0X5v+obEgm:0cCV8GuPVyzx/MS0X5v+oI/
                                                                                            MD5:CF6613D1ADF490972C557A8E318E0868
                                                                                            SHA1:B2198C3FC1C72646D372F63E135E70BA2C9FED8E
                                                                                            SHA-256:468E579FE1210FA55525B1C470ED2D1958404512A2DD4FB972CAC5CE0FF00B1F
                                                                                            SHA-512:1866D890987B1E56E1337EC1E975906EE8202FCC517620C30E9D3BE0A9E8EAF3105147B178DEB81FA0604745DFE3FB79B3B20D5F2FF2912B66856C38A28C07EE
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc-.woff
                                                                                            Preview: wOFF......M.................................GDEF.......G...d....GPOS................GSUB............7b..OS/2.......P...`u.#.cmap...0.......L....cvt .......H...H+~..fpgm...(...3...._...gasp...\............glyf...h..:q..i..+ Ohdmx..F....f........head..GD...6...6...\hhea..G|.......$.&..hmtx..G....d.....E#loca..J.........\s@.maxp..K.... ... ....name..K........~..9.post..L........ .m.dprep..L........)*v60x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x...pfK.G...1.c>..`9..m<+;..m.x...bg.M.T...O............l...XU.../{.[_..W....c.._..72.. ." z.+..F.......&.&...`e..T].....K=..K2S....q..d...xf.$~i..$?.d..dU.....@R-/LMO-J6...[]..Z..O.C_."If..d....fS....$d.G>eL`....Tf1.......9.c>..`1.TR..x./d-........q.........7....{...v.....!.....1.QG=.4.D3-..F;=..1'.'q.rw...9..e!.....Q....f......qV.n.h.V.Z]..B..C.[B...V.......v...o.w.{...w..zRO.i=..._.....-.m....].=...[...(1.(.#.....O0/.0?..04rL.G.9.....i6..l..|.(o.....|$,..{|&|....YJ...x.e8B.#..t;R8.{+....\=.....
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOlCnqEu92Fr1MmWUlvAA[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 66260, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):66260
                                                                                            Entropy (8bit):7.992196249486755
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:0I6x2fD3uDU3JePdYLL1QV4ax+dFUhRAYaMjNxtqdwF:0I6xSDxJePdC5QVTQdFuR7aS7tqy
                                                                                            MD5:CF654DE4C5D988526828F731F299D30A
                                                                                            SHA1:EE89196449651C44BEBFBC973490ABBAC78B8EAA
                                                                                            SHA-256:11F45ED38DFDC6CA1748192279CF084BBD8D66B3DA9FAC47DDF4D0DB664A7D27
                                                                                            SHA-512:1FB5E751E74DD9B63AA95B57DC0E004388C4B0C8B3F76D5BDD0321D21BDF3E15CF1C66ED31218D9EE9FE1BC1C02F2EE3324A91F64BE557A971310C0E0CBD11EB
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlvAA.woff
                                                                                            Preview: wOFF........................................GDEF.......,....pjm.GPOS......'...V...%.GSUB..)..........x..OS/2.......Q...`....cmap.......U...FP...cvt ..88...H...H+~..fpgm..8....3...._...gasp..9.............glyf..9.......iV..!.hdmx.......G........head.......6...6...\hhea...L... ...$.&..hmtx...l... .....&.loca.......o....~s .maxp....... ... ....name...........~..9.post........... .m.dprep...........)*v60x......P.....;+.6.l..-...<.v.m....g.._..u........P...;.&8...N,sb...Yo7...u. ..r..g.E'.;q..N.u.>..#..N.....w'~...%.f;.+!EE[H.m)...T.VQ5[C5....H...6US.J.m.u.....R.;@..`..c4.N.D;Y..tM.35...\;_....!....E?.~..(..{.p.^.w.....mJH.i!.E.h..".X\k7..vs.b...vg.c........Q...;.......j#..^.qLg..?mV.x..C..A....m...c.m..q.z.p...[.6..Y.....;..{.....J..x.i...^8k...5v2.O.9g..'...O|..&..5.|.............n.."...O?..H.:.3.%J...y....?.....9z.(..>.pN5`...=.0....A......N...#VP.5......)&.l.].6-.G.S.*.5....c.>.....LpO.Mh.. .=iCJ..B..23Ey.<..X......V....*hR...N\,..+...G.,.....b^U.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\KFOmCnqEu92Fr1Me5g[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 66044, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):66044
                                                                                            Entropy (8bit):7.99257726789333
                                                                                            Encrypted:true
                                                                                            SSDEEP:1536:PTt6Zseur7QcUm9m5f2Uq/lw8P01SClflkKz4JpZKzDdxyw:PR6s8cU2moUq/lw8OSCl0pAzDdxyw
                                                                                            MD5:A91AD097D24828AF724D4FEE36A063ED
                                                                                            SHA1:1C76A4CB77FA559AE0B445413FF54E169546BFAD
                                                                                            SHA-256:71AA99E21C708E5DE2FF54F2E6D6BB4E4D462AF3DE5B9ABB071FCD5C6D42FC48
                                                                                            SHA-512:190B3C893F358ABE055064550B08C72BE47324341D547687D0A327FFEFD069A80373AE93B1419895BA02F4FDEADA6EF2E3E758B84C7DB03686D1325E24F93374
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5g.woff
                                                                                            Preview: wOFF...............L........................GDEF.......,....pjm.GPOS......"...N..sk.GSUB..%P.........x..OS/2..*....R...`....cmap..*h...U...FP...cvt ..3....T...T+...fpgm..4....5....w.`.gasp..5L............glyf..5X...T..t$Z..Nhdmx......L........head.......6...6.j.zhhea...0... ...$....hmtx...P...2....g..aloca.......|.....&.maxp....... ... ....name... .......t.U9.post........... .m.dprep...........I.f..x......P.....;+.6.l..-...<.v.m....g.._..u........P...;.&8...N,sb...Yo7...u. ..r..g.E'.;q..N.u.>..#..N.....w'~...%.f;.+!EE[H.m)...T.VQ5[C5....H...6US.J.m.u.....R.;@..`..c4.N.D;Y..tM.35...\;_....!....E?.~..(..{.p.^.w.....mJH.i!.E.h..".X\k7..vs.b...vg.c........Q...;.......j#..^.qLg..?mV.x...d.a.....6.2.4.[..4.w.}&.[.......f..ZE...5C..........a. ..8UQp.j`..=...E..O.{.....;d..B.C......k(..XYEi...u...}.......u...E.>.4..!s.-.f..~....;._rb..]..F....P.._..../C......=....:.sm.9....J..k.^~N[..R..g..A>..'.._zsy.JP./.j....T2...{.{.gq.xX......ce..'C.N..h.-z....YW.s...*.jM.O
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\a8e78fa7fa279aa946fe1a9d6a0508f2[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):20225
                                                                                            Entropy (8bit):5.08641328988594
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:Uzm9EDtDWs9GYb2o0qRn1ZIxdf8x2I+NJCVMZSh8iV11MS9xEWEbXZQOaLvED5:c9p2o0qn1ZIxdEx2zGvm8pLvEN
                                                                                            MD5:A8E78FA7FA279AA946FE1A9D6A0508F2
                                                                                            SHA1:F9F8EB782246A6C7BC79B043B66C1F3B3BF4B42B
                                                                                            SHA-256:2196B3304BAA87751FD4EF3F62B307566487CD03199284BAA1E674E27E2FFA5E
                                                                                            SHA-512:CE6AD1FFD1E76B916259989F8757B8489A13FDFFE30D37A8C8B6F1F5581D9896EAABD842AF38C8E370D0638AD4BE2963D627D89747EA800D6C1DB1391EC016AB
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/a8e78fa7fa279aa946fe1a9d6a0508f2.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="180" y1="26" x2="180" y2="170" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#e8eaed"/>. <stop offset="0.124" stop-color="#e8eaed" stop-opacity="0.835"/>. <stop offset="0.364" stop-color="#e8eaed" stop-opacity="0.542"/>. <stop offset="0.58" stop-color="#e8eaed" stop-opacity="0.309"/>. <stop offset="0.764" stop-color="#e8eaed" stop-opacity="0.141"/>. <stop offset="0.91" stop-color="#e8eaed" stop-opacity="0.038"/>. <stop offset="1" stop-color="#e8eaed" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="32" y1="165" x2="108" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\acad335ad7ba163209d8c3e671b2c445[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):9346
                                                                                            Entropy (8bit):4.909678911846309
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+12aGkB/pvtjRn5EC9QeOgyCVWV3h4yx2WFt1PMXdDWCkgiQAJ9FnPDbs/A2i:6jt9nGCG4SxMhkyAJfnPD4ti
                                                                                            MD5:ACAD335AD7BA163209D8C3E671B2C445
                                                                                            SHA1:6FFD6741AE59ED5B7AAA33505EF2F57F86A1D082
                                                                                            SHA-256:BBD9E8EDDB8A9888E40E0CF19EA2E0898D7C2FA534B4E70F3922B7A1A20A584D
                                                                                            SHA-512:C96EAF974A77B8D17723F02F84A4C28DC9B9A34C7DB0867CE7674C51A5772667152EE9057C137EA639DAA1728C23C22917DB05758BE7A56588D10D744A52C991
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/acad335ad7ba163209d8c3e671b2c445.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="119" y1="165" x2="147" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="67" y1="165" x2="115" y2="165" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="107.557" y1="61.557" x2="119.557" y2="49.5
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\b18d13e9ea8a362642b7d25bce665039[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):16764
                                                                                            Entropy (8bit):5.015659059704473
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+7oy39iUOhxSoUhWBIBGNdByrJZeGyHObsjXDRKRpQ7wvkoln1WIGeDNc6ei52Ki:6vQ6JZoRKRa05Z9GImZAJgwEWZBYF
                                                                                            MD5:B18D13E9EA8A362642B7D25BCE665039
                                                                                            SHA1:928BE33E3ABE8071A068BE98084F406D5F4C07E2
                                                                                            SHA-256:10F69DBA0842572682B65444464A1F8879BF29B201E730D5F824BB6636536555
                                                                                            SHA-512:651CB5E1435A1E72392D425E73487413EF0A035574E84F738D775D29668CA7222AFA56C5AE77AB3A0AF15ECF94467C7070727EF10C0F38820545D5C81ABE2255
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="180" y1="77.807" x2="144.01" y2="77.807" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="0.133" stop-color="#1967d2" stop-opacity="0.98"/>. <stop offset="0.271" stop-color="#1967d2" stop-opacity="0.921"/>. <stop offset="0.411" stop-color="#1967d2" stop-opacity="0.822"/>. <stop offset="0.553" stop-color="#1967d2" stop-opacity="0.683"/>. <stop offset="0.696" stop-color="#1967d2" stop-opacity="0.505"/>. <stop offset="0.84" stop-color="#1967d2" stop-opacity="0.287"/>. <stop offset="0.983" stop-color="#1967d2" stop-opacity="0.033"/>. <stop offset="1" stop-color="#1967d2" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="191.997" y1="77.804" x2="168.003" y2="77.804" gradientUnits="userSpac
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\c1b97d74dace7e43a9ccb26841a7cae4[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):6217
                                                                                            Entropy (8bit):5.12197916092655
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:hmpCgaDaIvQiJgZMDRzvrphOqqzfHm0TCgGT908uB75T:xPuB75T
                                                                                            MD5:C1B97D74DACE7E43A9CCB26841A7CAE4
                                                                                            SHA1:83F78C8D77BF9499B7E839345BB94C22A89616AF
                                                                                            SHA-256:D9DE9633583A448CAD1268D42FFDF48D0B3C60D2693600B843A7EBE43AD06908
                                                                                            SHA-512:B3986AF15A3FFB3AB35B8E3C120BC9BA8BECD5892CB7C1DE0BA5AD08A83499ACEC288B20708EE834EA43BFE446FD01ADA8CA55E0893EEBE766241913DB11A88B
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg
                                                                                            Preview: <svg id="Content" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="41.178" y1="24.308" x2="41.368" y2="32.801" gradientUnits="userSpaceOnUse">. <stop offset="0.004" stop-color="#cdd0d5"/>. <stop offset="0.466" stop-color="#b1b6bd"/>. <stop offset="1" stop-color="#959ca5"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="29.696" y1="67.461" x2="68.387" y2="28.77" gradientUnits="userSpaceOnUse">. <stop offset="0.001" stop-color="#fff"/>. <stop offset="0.131" stop-color="#fff"/>. <stop offset="1" stop-color="#fff"/>. </linearGradient>. <clipPath id="clip-path">. <circle cx="27.84" cy="50.69" r="6.427" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient-3" x1="50.224" y1="35.554" x2="50.224" y2="31.004" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#cdd0d5"/>.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\keyboard_arrow_up_24px[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):147
                                                                                            Entropy (8bit):4.9621270003690565
                                                                                            Encrypted:false
                                                                                            SSDEEP:3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHgDXFUVLUJRVFiAdFUvuIIb:tI9mc4slzXdhC/O4gSVLU9FRF0ulb
                                                                                            MD5:1F5DC0C5F607EC3BF9E3089FEBD9C373
                                                                                            SHA1:1D8D1276A56A42B3EA7393767A8674CD45C43439
                                                                                            SHA-256:00D8F7123BB5EF3F7FAD786905F5407CC5FB8B4C55E1B0511803F6C8C01E3903
                                                                                            SHA-512:98C5C969A12B196176ADDD9C7DD8234C9D81EC513DE453F116E766DFA32E5B99AD2AEB68609353B349A65F7B26E68166C42337668B2BF1C8513FF4C77200271D
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/images/icons/material/system/svg/keyboard_arrow_up_24px.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"/></svg>
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\m=Wt6vjf,_latency,FCpbqb,WhJNk[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):5612
                                                                                            Entropy (8bit):5.5292180595356974
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:tyQycWe11xlu8FVBWzrxHUalvW6mSz9EC1ww+Ai7ABWtUG:tacW29T+rx95BRqAsR
                                                                                            MD5:050DC462CE2FCDFFCA51E145D1B74FC9
                                                                                            SHA1:B4CF115E66DEB8D0E471F7B93D50A1BD5F65F75C
                                                                                            SHA-256:547957007C65885B1822E56E26F94E999DCE53C5BC003AD3B3AAF19B2350C257
                                                                                            SHA-512:92539BD4B8ED70CEDDF7695DE4A481490103ECFD0993906E415AA39F8D607211A7DAF8305B09FE37042FBB7E94C9FE22E4A0B8C5AE58595159B887C459B150C2
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("Wt6vjf");.var vL=function(a){_.A(this,a,"f.bo",-1,null,null)};_.z(vL,_.p);vL.Bd="f.bo";vL.prototype.vb=function(){return _.yg(this,1)};.var wL=function(){_.xh.call(this)};_.w(wL,_.xh);wL.prototype.Cb=function(){this.Vp=!1;xL(this);_.xh.prototype.Cb.call(this)};wL.prototype.g=function(){yL(this);if(this.Ij)return zL(this),!1;if(!this.Wq)return AL(this),!0;this.Gb("p");if(!this.jq)return AL(this),!0;this.Km?(this.Gb("r"),AL(this)):zL(this);return!1};var BL=function(a){var b=new _.Ps(a.Mx);null!=a.No&&b.g.set("authuser",a.No);return b},zL=function(a){a.Ij=!0;var b=BL(a),c="rt=r&f_uid="+_.zd(a.jq);_.vk(b,(0,_.x)(a.i,a),"POST",c)};.wL.prototype.i=function(a){a=a.target;yL(this);if(_.Ck(a)){this.Ul=0;if(this.Km)this.Ij=!1,this.Gb("r");else if(this.Wq)this.Gb("s");else{try{var b=_.Dk(a),c=JSON.parse(b.substring(b.indexOf("\n")));var d=(new vL(c[0])).vb()}catch(e){_.Ja(null,
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\m=Wt6vjf,_latency,FCpbqb,WhJNk[2].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):5612
                                                                                            Entropy (8bit):5.5292180595356974
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:tyQycWe11xlu8FVBWzrxHUalvW6mSz9EC1ww+Ai7ABWtUG:tacW29T+rx95BRqAsR
                                                                                            MD5:050DC462CE2FCDFFCA51E145D1B74FC9
                                                                                            SHA1:B4CF115E66DEB8D0E471F7B93D50A1BD5F65F75C
                                                                                            SHA-256:547957007C65885B1822E56E26F94E999DCE53C5BC003AD3B3AAF19B2350C257
                                                                                            SHA-512:92539BD4B8ED70CEDDF7695DE4A481490103ECFD0993906E415AA39F8D607211A7DAF8305B09FE37042FBB7E94C9FE22E4A0B8C5AE58595159B887C459B150C2
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("Wt6vjf");.var vL=function(a){_.A(this,a,"f.bo",-1,null,null)};_.z(vL,_.p);vL.Bd="f.bo";vL.prototype.vb=function(){return _.yg(this,1)};.var wL=function(){_.xh.call(this)};_.w(wL,_.xh);wL.prototype.Cb=function(){this.Vp=!1;xL(this);_.xh.prototype.Cb.call(this)};wL.prototype.g=function(){yL(this);if(this.Ij)return zL(this),!1;if(!this.Wq)return AL(this),!0;this.Gb("p");if(!this.jq)return AL(this),!0;this.Km?(this.Gb("r"),AL(this)):zL(this);return!1};var BL=function(a){var b=new _.Ps(a.Mx);null!=a.No&&b.g.set("authuser",a.No);return b},zL=function(a){a.Ij=!0;var b=BL(a),c="rt=r&f_uid="+_.zd(a.jq);_.vk(b,(0,_.x)(a.i,a),"POST",c)};.wL.prototype.i=function(a){a=a.target;yL(this);if(_.Ck(a)){this.Ul=0;if(this.Km)this.Ij=!1,this.Gb("r");else if(this.Wq)this.Gb("s");else{try{var b=_.Dk(a),c=JSON.parse(b.substring(b.indexOf("\n")));var d=(new vL(c[0])).vb()}catch(e){_.Ja(null,
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\m=_b,_tp[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):149059
                                                                                            Entropy (8bit):5.465797550461563
                                                                                            Encrypted:false
                                                                                            SSDEEP:3072:j7XBDu8d2zmpxBrhkEEWGIK+9aKiFFaJBGr6RK3dm2CZRFtODtZBJYZpv15QljUF:j7x2Snkw733
                                                                                            MD5:1CC41E2F54EB2CDAC17242BF88A90B6F
                                                                                            SHA1:7A366565772CCED614B87B9B55C3A83D55ED6553
                                                                                            SHA-256:BDB8F3A5303F21923B9D1098D6C16311B632ACB9102940ED38FE18B0AAB7D85C
                                                                                            SHA-512:68B875DF4B6419CAAAB3077E76361EB0BCF53B096F3B0B69B6266A77F5A63A9F1A1DD51C15968D80A6E6822B553981CDD16DCBB85225CA99963D824525A9D583
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{.var aaa,Ia,baa,caa,daa,eaa,faa,gaa,haa,iaa,eb,oaa,maa,paa,aa,Ab,Bb,qaa,Db,Eb,raa,Hb;_.ba=function(a){return function(){return aa[a].apply(this,arguments)}};_.ca=function(a,b){return aa[a]=b};_.da=function(a){if(Error.captureStackTrace)Error.captureStackTrace(this,_.da);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));this.g=!0};_.ea=function(a){return a[a.length-1]};._.fa=function(a,b,c){for(var d="string"===typeof a?a.split(""):a,e=a.length-1;0<=e;--e)e in d&&b.call(c,d[e],e,a)};_.ia=function(a,b,c){b=_.ha(a,b,c);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};_.ha=function(a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return-1};_.ka=function(a,b){return 0<=(0,_.ja)(a,b)};_.la=function(a){if(!Array.isArray(a))for(var b=a.length-1;0<=b;b--)delete a[b];a.length=0};._.ma=function(
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\privacy[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, UTF-8 Unicode text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):300695
                                                                                            Entropy (8bit):5.753729542093768
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:JdkEpZnooXAyIr7dd08WG5thtnWe9MtX5+CH4OGhZNaJV0YJ0DaiTIwN0+TJDQl9:tw4l0crH4OAZwDgF0SJjCbj2nGTqrc
                                                                                            MD5:0298464F0E4EF1152293AFFB192EE013
                                                                                            SHA1:F60453974B02DD8FD06A3480C8ED6463482A52BB
                                                                                            SHA-256:E2043D0C6F2F0DF5BB192EFBECC76809151913D519574664D05E94A6E2B9F6A2
                                                                                            SHA-512:2A2C109895AEFB1227F9CD41E787A0FDDA48B22C8CA92EE4E1653F0678C8708CD6099B8415E5466C8972653FB622E8852F3706CB554256B9191A3ED7DABB557A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: <!doctype html><html lang="en" dir="ltr"><head><base href="https://policies.google.com/"><meta name="referrer" content="origin"><meta name="viewport" content="initial-scale=1, maximum-scale=5, width=device-width"><meta name="mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="application-name" content="Privacy &amp; Terms . Google"><meta name="apple-mobile-web-app-title" content="Privacy &amp; Terms . Google"><meta name="apple-mobile-web-app-status-bar-style" content="black"><meta name="msapplication-tap-highlight" content="no"><link rel="manifest" crossorigin="use-credentials" href="_/IdentityPoliciesUi/manifest.json"><link rel="home" href="/?lfhs=2"><link rel="msapplication-starturl" href="/?lfhs=2"><link rel="icon" href="//ssl.gstatic.com/policies/favicon.ico" sizes="32x32"><link rel="apple-touch-icon-precomposed" href="//ssl.gstatic.com/policies/favicon.ico" sizes="32x32"><link rel="msapplication-square32x32logo" href="//ssl
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\remote[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):93357
                                                                                            Entropy (8bit):5.454188345895456
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:lkNwxX2+ROa/8l/3dKViSFqCCYqE9Su/488OCSOirtBiwAROeDn1HnD10y43ToY:H0+ROM8x3dKVVFkwSu/z8OCSOirtBiwJ
                                                                                            MD5:44E416A99571709598024158B370B489
                                                                                            SHA1:4D0C2D5FE48B8CA651EC31A1A7DC50DEA8550BA5
                                                                                            SHA-256:3AEE60C4B479BB3D3E728901C2F8E65C35AD4A1390089185258B7AA8290B5228
                                                                                            SHA-512:DB2F190C0CA6AA2573D8C96F40F6E0A46352BB2A6EEB7879DB6C6FFFA240702AFCDC68DF1C8EE067A56F1D05B72B153FD1C9EE1EF18E2AAA5B11AC9E01942A71
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/s/player/77da52cd/player_ias.vflset/en_US/remote.js
                                                                                            Preview: (function(g){var window=this;var AHa=function(a,b){return g.Tb(a,b)},Z5=function(a,b,c){a.C.set(b,c)},$5=function(a){Z5(a,"zx",Math.floor(2147483648*Math.random()).toString(36)+Math.abs(Math.floor(2147483648*Math.random())^g.A()).toString(36));.return a},a6=function(a,b,c){Array.isArray(c)||(c=[String(c)]);.g.Pm(a.C,b,c)},BHa=function(a,b){var c=[];.g.$i(b,function(d){try{var e=g.Dn.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.Cn(e)&&c.push(d)},a);.return c},CHa=function(a,b){var c=BHa(a,b);.g.Fb(c,function(d){g.Dn.prototype.remove.call(this,d)},a)},DHa=function(a){if(a.be){if(a.be.locationOverrideToken)return{locationOverrideToken:a.be.locationOverrideToken};.if(null!=a.be.latitudeE7&&null!=a.be.longitudeE7)return{latitudeE7:a.be.latitudeE7,longitudeE7:a.be.longitudeE7}}return null},EHa=function(a,b){g.nb(a,b)||a.push(b)},b6=function(a){var b=0,c;.for(c in a)b++;return b},FHa=function(a,b){var c=b instanceof
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\www-embed-player[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):156978
                                                                                            Entropy (8bit):5.569743008450228
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:rwPL2ahZsxZYqrCYg9Q+mECkiCbEToZafVLX9wnoT/6cXOpcCCyXLSIw3JjvyhtS:onXGlk9a/tOpchULSfIVdl2sqEw5r
                                                                                            MD5:4C230A26DA02B3F1339EB60800934619
                                                                                            SHA1:B1CF4E1C265A096EAE677A0FB405C986D05CB38C
                                                                                            SHA-256:DA2DFD28395D419C73E1ADDF581E64F22ACAF360D4CD594AB264CCF27652F602
                                                                                            SHA-512:DEC9472B34AC97119E77D2E2C5D584EF382546B05D30FB81BB63CFA37333F70533F4B1CDB8A2ED034432D625A1BF87D65CF282372DAA9A80C0A3766639663F12
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/s/player/77da52cd/www-embed-player.vflset/www-embed-player.js
                                                                                            Preview: (function(){/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype||a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function t(a,b){if(b)a:{for(var c=da,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}d=d[d.length-1];e=c[d];f=b(e);f!=e&&null!=f&&ba(c,d,{configurable:!0,writable:!0,value:f})}}.t("Symbol",function(a){function b(e){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c("jscomp_symbol_"+(e||"")+"_"+d++,
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\www-player[1].css
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):341778
                                                                                            Entropy (8bit):5.235641593890655
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:X6u/Cd+RNRDQI03rpHrpY/fn8MZv8M5q4ayPOPfRrDJciMfByr5G0TwecZecoXkV:X6u/n+OXdZPv2QgAl
                                                                                            MD5:410EBA5E63F3F9081CD5FB70A4AE1279
                                                                                            SHA1:591AFCE9F3A97FC4F4D0C2108B0F6F5021D2B9B6
                                                                                            SHA-256:87A02E8559B99D410EE4D2F500894EB6C3CCC575C9ACF118FD92B10713E856D6
                                                                                            SHA-512:84D3EE6437EC9A87F31D128DFADBCC714A5171B3631940B6543DC673496E2FDCB1C74BB6212C84B7463C69F79FED2467B5F12B4E9B228B889A1E37549BE4465E
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/s/player/77da52cd/www-player.css
                                                                                            Preview: .html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-moz-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);-webkit-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);transition:color .1s cubic-bezier(0.0,0.0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-moz-transition:color .1s cubic-bezier(0.4,0.0,1,1);-webkit-transition:color .1s cubic-bezier(0.4,0.0,1,1);transition:co
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\02f8664b95445de6f27ba682f3c5f9ab[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):4026
                                                                                            Entropy (8bit):5.165425025048119
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+O2aTjjawLtBx0tdmK9YYlfBWX5oM4rLEa:DTj+wVeY0S4r7
                                                                                            MD5:02F8664B95445DE6F27BA682F3C5F9AB
                                                                                            SHA1:EFF0C42E5C642D81EF76995CE6B6C059CB38DCB6
                                                                                            SHA-256:343B575C37BF08A1FDC972D0D86BCFAFF9C405DE625516C8656B60D37DCBA927
                                                                                            SHA-512:2F58F0E0D46B9DE2F47CA8EC41B15E4B78A02EF9C7172B7C673CF85A3FD8D8870F00AF04C82768893A86B3F787B64464DF5613C801B6D85F1FC16A614F25CCF6
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="108" y1="165" x2="180" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="242" y1="149" x2="284" y2="149" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="34" y1="149" x2="76" y2="149" xlink:href=
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\13062c65605335a46d14656c46af3868[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):12178
                                                                                            Entropy (8bit):5.047868477962458
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:hC5CW/p5sraARO646QfW62lBHTKqB7BIh6k4o:cx/ptB9WLlBHVB7Btg
                                                                                            MD5:13062C65605335A46D14656C46AF3868
                                                                                            SHA1:E9F0C2B7DDA37E448C75EDA6B6A57188ECC59F55
                                                                                            SHA-256:70472A3B23DDA5B98B7A887D12AE8D7979EA8A53EC1955C237F62D6A86A14780
                                                                                            SHA-512:B3340EE18D7C067D11B9806605CE214E1907CFDEFD3D2B5A3B6829A83D2859CAF35FDB884E033DA423C30A1FB4F7733464D9847E025F5929A67FF92A68109823
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/13062c65605335a46d14656c46af3868.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="30" y1="165" x2="56" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.15" stop-color="#9aa0a6" stop-opacity="0.025"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.1"/>. <stop offset="0.464" stop-color="#9aa0a6" stop-opacity="0.225"/>. <stop offset="0.624" stop-color="#9aa0a6" stop-opacity="0.4"/>. <stop offset="0.786" stop-color="#9aa0a6" stop-opacity="0.626"/>. <stop offset="0.946" stop-color="#9aa0a6" stop-opacity="0.898"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="815.315" y1="-230.563" x2="857.315" y2="-230.563" gradientTransform="translate(-664.532 550.377) rotate(-15)" gradientUnits="userSpaceOnUse">. <stop
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\2951277d4c35389d7d304ed78d4fb6f6[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):3437
                                                                                            Entropy (8bit):5.159691776325374
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:+GzHx4GLZ/W1wHxJCXvGUQoHxno+e//Ij0jiO0ijy1uHldlzvgYx:+G2UCv0Ij0jH0P+ldlzvgYx
                                                                                            MD5:2951277D4C35389D7D304ED78D4FB6F6
                                                                                            SHA1:936A9062B6E78E198BA1CD7ACDB42DEA29920890
                                                                                            SHA-256:F3E55293686B1A4BCB8095896F8ADA506D3CE3E8BAD1DE89EAB56AFBEF3AD793
                                                                                            SHA-512:8A9B5F0DAE9DFBD5C1FC7FCBEE51FD9A40302856C2F305FF0343DB2BA46D9C05B5F25A6F90AAE4AAFCEB6ACEFF7813157617773E2147954928B1E9227B581415
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/2951277d4c35389d7d304ed78d4fb6f6.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="24" y1="77" x2="48" y2="77" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6" stop-opacity="0"/>. <stop offset="0.116" stop-color="#9aa0a6" stop-opacity="0.054"/>. <stop offset="0.306" stop-color="#9aa0a6" stop-opacity="0.201"/>. <stop offset="0.546" stop-color="#9aa0a6" stop-opacity="0.44"/>. <stop offset="0.823" stop-color="#9aa0a6" stop-opacity="0.768"/>. <stop offset="1" stop-color="#9aa0a6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="48" y1="80" x2="48" y2="16" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#1967d2"/>. <stop offset="0.043" stop-color="#1967d2" stop-opacity="0.942"/>. <stop offset="0.305" stop-color="#1967d2" stop-opacity="0.611"/>. <stop offset="0.54" stop-color="#1967d2" sto
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\3394102be0315326fd760e503b31c7b6[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1997
                                                                                            Entropy (8bit):4.972761923159453
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:+G0uMHxFi+eeunuGuQmDjuf3XU8MtUPFWl:+3vHxAr8Cn4tgWl
                                                                                            MD5:3394102BE0315326FD760E503B31C7B6
                                                                                            SHA1:8D80ABE58002CB8CF2A9C05EC5CE61F6A528AA6C
                                                                                            SHA-256:FD266CACD5FD6FACBA81DEB7274AD226D7916B8883F23480A86F6F9C015913C8
                                                                                            SHA-512:769DDC47AAA142961A8E00CDE3566DE62A6A6CA28D6EF568D5ECF67A0A5D8EF8806CF2428B653D58B9313E86161B6099D73362E6CEA6097D0B48DF4846253FE8
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/3394102be0315326fd760e503b31c7b6.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <clipPath id="clip-path">. <circle cx="48" cy="48" r="41" fill="none"/>. </clipPath>. <linearGradient id="linear-gradient" x1="51" y1="78" x2="93" y2="78" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#9aa0a6"/>. <stop offset="1" stop-color="#9aa0a6" stop-opacity="0"/>. </linearGradient>. </defs>. <title>site_sec_C_01</title>. <g style="isolation: isolate">. <g id="Content">. <g>. <g>. <g>. <circle cx="48" cy="48" r="41" fill="#e8eaed"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <circle cx="48" cy="48" r="41" fill="none"/>. <g clip-path="url(#clip-path)">. <path d="M89.981,22.441,67.05,68.843c-1.63,3.328-5.58,3.008-7.182-.581L51.8,50.168c-1.613-3.616-5.6-3.907-7.208-.526l-6.8,14.3C36.141,67.408,32.029,67,30.5,63.224L25.63
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 26180, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):26180
                                                                                            Entropy (8bit):7.9847487601205405
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:axmLo3N7711ZHlB8N6yt/DvXjXjmDNzv6:bLodN78Ii7jKJv6
                                                                                            MD5:4F2E00FBE567FA5C5BE4AB02089AE5F7
                                                                                            SHA1:5EB9054972461D93427ECAB39FA13AE59A2A19D5
                                                                                            SHA-256:1F75065DFB36706BA3DC0019397FCA1A3A435C9A0437DB038DAAADD3459335D7
                                                                                            SHA-512:775404B50D295DBD9ABC85EDBD43AED4057EF3CF6DFCCA50734B8C4FA2FD05B85CF9E5D6DEB01D0D1F4F1053D80D4200CBCB8247C8B24ACD60DEBF3D739A4CF0
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owpg.woff
                                                                                            Preview: wOFF......fD................................GDEF.......\.......QGPOS.......#..+...QGSUB.......y......m.OS/2...|...U...`h...cmap...........~n...cvt .......y........fpgm...........uo..gasp................glyf......=...m...5head..Z....6...6..'.hhea..Z.... ...$.0.5hmtx..[...........).loca..]....y.....K.6maxp..`H... ... .=..name..`h.......r.i6Ppost..a..........i]\prep..d....p..... ..x.U....Q.F..=#.0ZD.@@<..... "...Zp....+.c.f...).>Z.bm.Om..?...\\.zi.f.^b...[y/.........x..Z..+..=Z...~.................0.8....r.|...=s&oG....q.Fg...Y...:Wc..>..p..p....)......{.aX..}.?.k... .......N.=.c.Do.....~2.=.i$....0..>..!.'v.....q....>>.....o....30..0.w..|hR&mrf....,.Y..........%<..0.#.~...._a.c......K.z...H1..u.2.Y_..0.9..`.,.:.=(.N~..*.a.<.D=....*.V....\..>./.B.`iE..A9.S.|?.g).Rj..8Q...h.y.G.^.kx.o.....(...#....9...,4I8...7..o.I|@x..1.>'...H.m..$.yp..f..%..F$0.0.I.1...WR...E..8?a..|"................A.(...ZJ.q.K|...S.1..ht.ck....e...T.Zs,W..0..%.i.R...Ku.K.y.....j.RD..~..dpsh.fc.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\6RYML-AXwgKXIEhuMiV2AYgQkEUD0Ei6B6ms7b7P0Jk[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):22030
                                                                                            Entropy (8bit):5.607219130091125
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:Fxj+RhI3EKo9yStGTtfdv4hnitKGMyInoFK8rPoM:FR+RC3EKokSwui+kFl
                                                                                            MD5:0E32A494C72100AFA8320DCF728DDE81
                                                                                            SHA1:F59CA0C93AA27387A59CBC8905A89F12F670E7FD
                                                                                            SHA-256:E9160C2FE017C2029720486E322576018810904503D048BA07A9ACEDBECFD099
                                                                                            SHA-512:B3E406AF3FCD50BB9501D2F993886E9D08F55BEE3F5BE778E5AE68B6B65052072158ED11BC98E1707256A88DB868FB48D35238DEA5A15C9C7D40BF37792F58CA
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.google.com/js/bg/6RYML-AXwgKXIEhuMiV2AYgQkEUD0Ei6B6ms7b7P0Jk.js
                                                                                            Preview: (function(){var Q=this||self,r=function(T,W){if(W=(T=null,Q).trustedTypes,!W||!W.createPolicy)return T;try{T=W.createPolicy("bg",{createHTML:K,createScript:K,createScriptURL:K})}catch(O){Q.console&&Q.console.error(O.message)}return T},K=function(T){return T};(0,eval)(function(T){return(T=r())&&1===eval(T.createScript("1"))?function(W){return T.createScript(W)}:function(W){return""+W}}()(Array(7824*Math.random()|0).join("\n")+'(function(){var T0=function(T){return T},t=this||self,q={},U,Wv=function(T,W,K,O,m){for(K=(O=[],0),W=0;K<T.length;K++)m=T.charCodeAt(K),128>m?O[W++]=m:(2048>m?O[W++]=m>>6|192:(55296==(m&64512)&&K+1<T.length&&56320==(T.charCodeAt(K+1)&64512)?(m=65536+((m&1023)<<10)+(T.charCodeAt(++K)&1023),O[W++]=m>>18|240,O[W++]=m>>12&63|128):O[W++]=m>>12|224,O[W++]=m>>6&63|128),O[W++]=m&63|128);return O},f={},QG=function(T,W){return T<W?-1:T>W?1:0},iy,Kh=function(T){return/^[\\s\\xa0]*([\\s\\S]*?)[\\s\\xa0]*$/.exec(T)[1]},OZ=function(T,W){function K(){}T.Xg=((T.prototype=((K.prot
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 19916, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):19916
                                                                                            Entropy (8bit):7.96782347282656
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:JiNCb8EbT1rG/3rjJmQ8uLc5ZiRE5HWSiPTI45tKVr6+F7gLLdz:k4zbM3rjEQ8uQPiRERWSGIWtKVrWJ
                                                                                            MD5:A1471D1D6431C893582A5F6A250DB3F9
                                                                                            SHA1:FF5673D89E6C2893D24C87BC9786C632290E150E
                                                                                            SHA-256:3AB30E780C8B0BCC4998B838A5B30C3BFE28EDEAD312906DC3C12271FAE0699A
                                                                                            SHA-512:37B9B97549FE24A9390BA540BE065D7E5985E0FBFBE1636E894B224880E64203CB0DDE1213AC72D44EBC65CDC4F78B80BD7B952FF9951A349F7704631B903C63
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fBBc-.woff
                                                                                            Preview: wOFF......M.................................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`t.#.cmap...........L....cvt .......X...X/...fpgm.......4......".gasp...@............glyf...L..:...j...w.hdmx..F....d........head..GD...6...6.Y.ihhea..G|.......$...vhmtx..G....k.....\].loca..J.........g.L.maxp..K.... ... ...\name..L........|..9.post..L........ .m.dprep..L........:z/.Wx...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..|.|..|..|..|.|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ad_status[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text
                                                                                            Category:downloaded
                                                                                            Size (bytes):29
                                                                                            Entropy (8bit):4.142295219190901
                                                                                            Encrypted:false
                                                                                            SSDEEP:3:lZOwFQvn:lQw6n
                                                                                            MD5:1FA71744DB23D0F8DF9CCE6719DEFCB7
                                                                                            SHA1:E4BE9B7136697942A036F97CF26EBAF703AD2067
                                                                                            SHA-256:EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
                                                                                            SHA-512:17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://static.doubleclick.net/instream/ad_status.js
                                                                                            Preview: window.google_ad_status = 1;.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\analytics[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):47051
                                                                                            Entropy (8bit):5.516264124030958
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:ryOveCSBZfsnt5XqY/yPndFTkoWY3SoavqVy2rlebYUDTJC6g0stZm:ryJNDfs5hYdFTwY3SorSg0su
                                                                                            MD5:53EE95B384D866E8692BB1AEF923B763
                                                                                            SHA1:A82812B87B667D32A8E51514C578A5175EDD94B4
                                                                                            SHA-256:E441C3E2771625BA05630AB464275136A82C99650EE2145CA5AA9853BEDEB01B
                                                                                            SHA-512:C1F98A09A102BB1E87BFDF825A725B0E2CC1DBEDB613D1BD9E8FD9D8FD8B145104D5F4CACA44D96DB14AC20F2F51B4C653278BFC87556E7F00E48A5FA6231FAD
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.google-analytics.com/analytics.js
                                                                                            Preview: (function(){/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var l=this||self,m=function(a,b){a=a.split(".");var c=l;a[0]in c||"undefined"==typeof c.execScript||c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length||void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},r=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var t=/^(?:(?:https?|mailto|ftp):|[^:/?#]*(?:[/?#]|$))/i;var u=window,v=document,w=function(a,b){v.addEventListener?v.addEventListener(a,b,!1):v.attachEvent&&v.attachEvent("on"+a,b)};var x={},y=function(){x.TAGGING=x.TAGGING||[];x.TAGGING[1]=!0};var z=/:[0-9]+$/,A=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},D=function(a,b){b&&(b=String(b).toLowerCase());if("p
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\css[1].css
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text
                                                                                            Category:dropped
                                                                                            Size (bytes):1324
                                                                                            Entropy (8bit):5.174970812638954
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:G9X3OYsRqU3OYXRK/iY3QYsNxAA/iOYNNxBP/iOYsNxQ+/iOYXNxX/iOYN7NxLK:IOLRqoOgRNY3QLNmTOWNGOLN4OgNIOCi
                                                                                            MD5:3A0A55244109930443248B4DD865608D
                                                                                            SHA1:BAE711E2A1547017C4E7F2A60FE447D75BCA6A42
                                                                                            SHA-256:B9E733DD4B131033CB31612B8C18FD693B3768A8CECD4C9881399E461E6DC15E
                                                                                            SHA-512:8116CB1F40E290AADC45D899A198919C806E2B7065B803D23D760E2BE6B97B83BBB7328C673BEB819C12C3D7FFA9B0DFEF07E5DD634E6833499F600CFC849C0E
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: /*. * See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlI3K.woff) format('woff');.}.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 500;. src: url(https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94bt3.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu52xM.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmSU5vAA.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5g.woff) format('woff');.}.@font-face {. font-family: 'R
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\css[2].css
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text
                                                                                            Category:dropped
                                                                                            Size (bytes):257
                                                                                            Entropy (8bit):5.043807587338325
                                                                                            Encrypted:false
                                                                                            SSDEEP:6:U+4OUr940FFJTfz+56ZRWHTizlpdiRWE2e0r3JnNin:UJO6940FD7O6ZRoT6pYwEmr3JnY
                                                                                            MD5:2876B72D2562FCFB0062E10A93BFF42E
                                                                                            SHA1:F1F0CB3DCD062B29E9095733D4BE8A4D14256403
                                                                                            SHA-256:7EFB76FDB17A8A156CFFE5975374E4A875BD11204E94B7965DEAD67AB9CFE6D3
                                                                                            SHA-512:E642E4F9CBF479B4C574BE086297775920EDEC3D8083F9402D6906D32487D09A701B6AB908F19ABB825683D0CA8B3C08244A0418B57280AE32F142FD4A1881C3
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: /*. * See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Product Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/productsans/v12/pxiDypQkot1TnFhsFMOfGShlEw.woff) format('woff');.}.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\e28714c71f217892f72b2698ea5cefef[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):4134
                                                                                            Entropy (8bit):5.054285765130248
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:+GOHx16ZAvHxDg+eJ/eux4tBeLDNdBeLSlBeLLpZdrzTPr+UkVr3H2c:+r1XSDQBe7BeeBeBeUkl2c
                                                                                            MD5:E28714C71F217892F72B2698EA5CEFEF
                                                                                            SHA1:E4257063DB9DF43DCDE90920CC3F34978BAEA51D
                                                                                            SHA-256:65845E7CECBF4E88691BFF290F72B427B70887E23879F523BBC5B2B032C7609F
                                                                                            SHA-512:C693B70D3EDCB32DAEA8BEC867BDF34AC2ED491F9CBC4A57A5433F462DC6EF2D0F01A0C17D7DFD457064D13D45207659ABF116B09191DFDDF38E706FC72A59BD
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="96" height="96" viewBox="0 0 96 96">. <defs>. <linearGradient id="linear-gradient" x1="48" y1="71" x2="48" y2="25" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#5f6368"/>. <stop offset="0.232" stop-color="#5f6368" stop-opacity="0.699"/>. <stop offset="0.568" stop-color="#5f6368" stop-opacity="0.32"/>. <stop offset="0.836" stop-color="#5f6368" stop-opacity="0.086"/>. <stop offset="1" stop-color="#5f6368" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="76" y1="48" x2="86" y2="48" gradientTransform="translate(129 -33) rotate(90)" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#f29900"/>. <stop offset="1" stop-color="#f29900" stop-opacity="0"/>. </linearGradient>. <linearGradient id="linear-gradient-3" x1="76" y1="15" x2="86" y2="15" gradientTransform="matrix(1, 0, 0, 1, 0, 0)" xlink:hr
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\e60586c0029adec0bacd3e48470ca6c6[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):15934
                                                                                            Entropy (8bit):5.044031692686615
                                                                                            Encrypted:false
                                                                                            SSDEEP:96:+5rsHBQMyBNWB85GfnAWlkVzLIV2amGj31zBJqDb5PiStUseyXDhMln9UTfQLUQo:LHEQmGb1wgWX1CGkbjf+LJnx
                                                                                            MD5:E60586C0029ADEC0BACD3E48470CA6C6
                                                                                            SHA1:2660A543EDC31CC35115F37CFF36CC4DA7B95151
                                                                                            SHA-256:DA83F15D25A23E295CBA8AF285B22F5AEB46394C6B13DFCD29EA3B6415F90DF7
                                                                                            SHA-512:2FA00B15E609C22D343901BE202D66ED071A5E9989827DE3F3E486DBC33D62CDA296B66BB30875A905AA3BCC97A068F5ECA62FBD4B10EE5CC60CE2C0AFF37A00
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="360" height="204" viewBox="0 0 360 204">. <defs>. <linearGradient id="linear-gradient" x1="264" y1="165" x2="328" y2="165" gradientUnits="userSpaceOnUse">. <stop offset="0" stop-color="#bdc1c6" stop-opacity="0"/>. <stop offset="0.137" stop-color="#bdc1c6" stop-opacity="0.021"/>. <stop offset="0.279" stop-color="#bdc1c6" stop-opacity="0.084"/>. <stop offset="0.424" stop-color="#bdc1c6" stop-opacity="0.189"/>. <stop offset="0.57" stop-color="#bdc1c6" stop-opacity="0.336"/>. <stop offset="0.718" stop-color="#bdc1c6" stop-opacity="0.525"/>. <stop offset="0.864" stop-color="#bdc1c6" stop-opacity="0.753"/>. <stop offset="1" stop-color="#bdc1c6"/>. </linearGradient>. <linearGradient id="linear-gradient-2" x1="175" x2="199" xlink:href="#linear-gradient"/>. <linearGradient id="linear-gradient-3" x1="196" y1="165" x2="252" y2="165" gradientUnits="userSpac
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fetch-polyfill[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Pascal source, ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):8543
                                                                                            Entropy (8bit):5.238064281324506
                                                                                            Encrypted:false
                                                                                            SSDEEP:192:oQHdiEslZc0rsNYNU5mSJHqI03aej6tZoaMLQO/x5/P80+HcW:ocHslLsP5muHqI0Jj6tZcUO/x5+V
                                                                                            MD5:04E3CC8A9641B3F9F9C9370F4E9B5BDD
                                                                                            SHA1:9602A891F583094BB04FD407B253ABCAFFB8C8D0
                                                                                            SHA-256:DE6C4FFA2BD9FD283610E28D0DB2EC48607AAB39D213A51AEF248673A0A7E980
                                                                                            SHA-512:58942BCC0F39D620A475B65C1AEB4F18872F68F22C89DEC076906A0DB8BC2B7CCA9357710A7824A0FA7404FF73F41013AECA34609CAACD2187414F7BD0D490D6
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.youtube.com/yts/jsbin/fetch-polyfill-vfl6MZH8P/fetch-polyfill.js
                                                                                            Preview: /*.. Copyright (c) 2014-2016 GitHub, Inc... Permission is hereby granted, free of charge, to any person obtaining. a copy of this software and associated documentation files (the. "Software"), to deal in the Software without restriction, including. without limitation the rights to use, copy, modify, merge, publish,. distribute, sublicense, and/or sell copies of the Software, and to. permit persons to whom the Software is furnished to do so, subject to. the following conditions:.. The above copyright notice and this permission notice shall be. included in all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF. MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND. NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE. LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION. OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\googlelogo_dark_clr_74x24px[1].svg
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1510
                                                                                            Entropy (8bit):4.0355432662902455
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:t4qU/S93QRhYj45kRHDu9+u1lUetmCmifvqbbLaHu9HGn1u1lIdUWA/jTq9Km2zQ:A/S9rU5I1YdtmMqPLmum1YUUZ/jTq9J
                                                                                            MD5:CECA603BD198568DAB00E6DFC3120706
                                                                                            SHA1:871C637521103DCE8F6DF9AAC0D1B62900D511B8
                                                                                            SHA-256:F4AF84EFE90891185D9B29A841181CA9D26D7560864EA47B6CD709D3B964AEE3
                                                                                            SHA-512:D3F4A52AEADEA52FDAC82C8B9A7427897359B43C3FBCF3E79AACBF30571B3482C991C5346069CC5DDD474C3814CF6507065C4914369C1236FDE641A934A08706
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark_clr_74x24px.svg
                                                                                            Preview: <svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24zm15.76-2c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52zm28.58-8.03h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3.52 1.74 0 3.1 1.5 3.1 3.54.01 2.03-1.36 3.5-3.1 3.5zM38 6.19c-3.21 0
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\icon[1].css
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text
                                                                                            Category:downloaded
                                                                                            Size (bytes):551
                                                                                            Entropy (8bit):4.9892890535604595
                                                                                            Encrypted:false
                                                                                            SSDEEP:12:jFPrZO6ZRoT6pHAcVO3a8ppzrZ6ZmOHc9n+5cMK00k14enEsTeq:5tOYsKpO3xdYmOOk4TfenEsTL
                                                                                            MD5:8C90F2FDF6A9D9FC2CD4EBF4183CB0E5
                                                                                            SHA1:D6AEC216B1CA5ADC1DF7C34AEFFF77B0F191EBDA
                                                                                            SHA-256:38EC8A60ABF09E4486FE6C35EEE5BA853DBE8AF67D3B1C567A4E084A7C126275
                                                                                            SHA-512:0351A645DD49DB522517260A0631E05D816A2BDE39F3F48876570B3A9FEDEFF0BADE4ABE0A1988CC5E1EB925DF54DBEC58957601D4F64CCF804EE7E549CA83BF
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.googleapis.com/icon?family=Material+Icons+Extended
                                                                                            Preview: @font-face {. font-family: 'Material Icons Extended';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialiconsextended/v77/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvP.woff) format('woff');.}...material-icons-extended {. font-family: 'Material Icons Extended';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. font-feature-settings: 'liga';.}.
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\log[1].txt
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):131
                                                                                            Entropy (8bit):4.717258688575079
                                                                                            Encrypted:false
                                                                                            SSDEEP:3:4IRKHi8+wNcwHxr2xfGx627THcb1/SM7w0QHWMVK:4Ib8RRrWux627TNMkDHWUK
                                                                                            MD5:CA0B7E866005F6774D284B9F438EBFD2
                                                                                            SHA1:53644F5EE3640189BDB223473BA6A2D46606C556
                                                                                            SHA-256:502E9680CFA78FA8BE779CBF4F1947C8EAA3D43BF8C7464800EC772B2DDEA358
                                                                                            SHA-512:939C4526C623DB033AD40BFDC6C8848A1DCD0CA797F17FBBD89FBEC1B49DEDEDC16E89084B3759E62FA0FFC8FE896980B10A1FF8DAEE22736A70B08F1EE13E2F
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://play.google.com/log?hasfast=true&authuser=0&format=base64json&p=W1sxLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFtudWxsLG51bGwsbnVsbCxudWxsLCJlbiJdXSw1NTgsW1siMTYwNjY3NzU4ODAwMCIsbnVsbCxbXSxudWxsLG51bGwsbnVsbCxudWxsLCJbW251bGwsWzEsXCJwb2xpY2llcy5nb29nbGUuY29tL3Rlcm1zXCIsbnVsbCxbXCJcIl0sZmFsc2VdXSxcIjQyNTY5MjgxNzk2ODIyNTMyNzhcIiwyXSIsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMjg4MDAsbnVsbCxudWxsLG51bGwsbnVsbCxbXSwxLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxbXV1dLCIxNjA2Njc3NTg4OTIxIixbXV0.
                                                                                            Preview: ["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=EcW08c[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:downloaded
                                                                                            Size (bytes):2493
                                                                                            Entropy (8bit):5.242960304650841
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:qz7e4DRyW5cKp+32qD/p+0y/oyUZgPvjYtRIjYJNCX8l8r5Fsr1a:qHe4DRyEp+GQ/p+0y/ZjY3WYJNCX8y5R
                                                                                            MD5:76292C25C91A7AB28A230A23AEB62755
                                                                                            SHA1:61A3ED4CC41B260A8D1CEB3CAE2D253A801B6B3B
                                                                                            SHA-256:35AABF9654AD739BEEEF64C1CEDE34085A1DAD74CE8611D02FB8383DC2A756F7
                                                                                            SHA-512:49A262DAFC34D452D878955F2D41EFECF800D73F7DC24AE07CEEDBF2F56EF7A1CC4DA492E8A01C16B612741086AD265841A0582FE06C3D2618BBA03C59D19A3A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en_GB.eZyF8I6wdhY.O/d=0/ct=zgms/rs=AMjVe6ihXnQzo8KHOjWAgGOP4LqoE8uG1A/m=EcW08c
                                                                                            Preview: "use strict";this.default_v=this.default_v||{};(function(_){var window=this;.try{.var anb=function(a,b,c){var d=[_.rq];if(a){var e="";d&&d.length&&(e="; track:"+d.join(",").trim());d="";c&&c.length&&(d="; "+c.join("; ").trim());a.setAttribute("jslog",b+e+d);a.__ve=void 0}};_.m("EcW08c");._.p4=function(a){_.FO.call(this,a.Pa);this.nf=_.cq(this.Ca(),"isIndeterminate")?null:_.cq(this.Ca(),"isChecked");this.ha=!this.nf;this.H=this.getData("toggles").Jb(!0);this.ma=!1;this.$=this.getData("checkedVeid").rb(null);this.va=this.getData("uncheckedVeid").rb(null)};_.v(_.p4,_.FO);_.p4.Ea=_.FO.Ea;_.h=_.p4.prototype;_.h.Ti=function(a){"class"===a.data.name&&(this.nf=_.cq(this.Ca(),"isIndeterminate")?null:_.cq(this.Ca(),"isChecked"),this.ha=!this.nf)};_.h.Hc=function(){return!!this.nf};_.h.xM=function(){return this.nf};._.h.Np=function(){return null===this.nf};_.h.rm=function(){this.nf=!this.nf;this.V()};_.h.yc=function(a){this.nf=null===a?null:!!a;this.V()};_.h.dK=function(){return this.H};_.h.Bg=fu
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=byfTOb,lsjVmc,LEikZe[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):35769
                                                                                            Entropy (8bit):5.455083813030829
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:D4UnIUNQ3NymCjcL49HSNwivcSzT6lt/uxi/jHZZkwb3vCzItK:DC8lSNw+c6Glt/uI7ZZGj
                                                                                            MD5:82104E6EEC3FD20E469783C662E58645
                                                                                            SHA1:81A5F525C35B30AEC0FAD4CA6F8EBD0B66639F71
                                                                                            SHA-256:22D2DA8805CB515F3947FF18125A4FED2D4E44C1538B31715889D5C32D27A74D
                                                                                            SHA-512:5F602F9BC27F5076C9FDE36D396E42BF6EBEE878948214C40B9D156689B04F1BE45826818F83B9FBB62D76BB4001CA58F978FB1EA4A95816DE37ADFE599CB346
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("sy4x");.._.n();.._.Ns=function(a,b){a.sort(b||_.za)};_.Os=function(a,b){return(b||document).getElementsByTagName(String(a))};_.m("syy");./*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var Vs,Xs,rea,Ys,nea,mea,qea,oea;_.Ps=function(a,b){this.j=this.ya=this.o="";this.S=null;this.s=this.i="";this.u=!1;var c;a instanceof _.Ps?(this.u=void 0!==b?b:a.u,_.Qs(this,a.o),this.ya=a.ya,this.j=a.j,_.Rs(this,a.S),this.i=a.i,_.Ss(this,Ts(a.g)),_.Us(this,a.s)):a&&(c=String(a).match(_.bk))?(this.u=!!b,_.Qs(this,c[1]||"",!0),this.ya=Vs(c[2]||""),this.j=Vs(c[3]||"",!0),_.Rs(this,c[4]),this.i=Vs(c[5]||"",!0),_.Ss(this,c[6]||"",!0),_.Us(this,c[7]||"",!0)):(this.u=!!b,this.g=new _.Ws(null,this.u))};._.Ps.prototype.toString=function(){var a=[],b=this.o;b&&a.push(Xs(b,Ys,!0),":");var c=this.j;if(c||"file"==b)a.push("//"),(b=this.ya)&&a.push(Xs(b,Ys,!0),"
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=byfTOb,lsjVmc,LEikZe[2].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):35769
                                                                                            Entropy (8bit):5.455083813030829
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:D4UnIUNQ3NymCjcL49HSNwivcSzT6lt/uxi/jHZZkwb3vCzItK:DC8lSNw+c6Glt/uI7ZZGj
                                                                                            MD5:82104E6EEC3FD20E469783C662E58645
                                                                                            SHA1:81A5F525C35B30AEC0FAD4CA6F8EBD0B66639F71
                                                                                            SHA-256:22D2DA8805CB515F3947FF18125A4FED2D4E44C1538B31715889D5C32D27A74D
                                                                                            SHA-512:5F602F9BC27F5076C9FDE36D396E42BF6EBEE878948214C40B9D156689B04F1BE45826818F83B9FBB62D76BB4001CA58F978FB1EA4A95816DE37ADFE599CB346
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("sy4x");.._.n();.._.Ns=function(a,b){a.sort(b||_.za)};_.Os=function(a,b){return(b||document).getElementsByTagName(String(a))};_.m("syy");./*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var Vs,Xs,rea,Ys,nea,mea,qea,oea;_.Ps=function(a,b){this.j=this.ya=this.o="";this.S=null;this.s=this.i="";this.u=!1;var c;a instanceof _.Ps?(this.u=void 0!==b?b:a.u,_.Qs(this,a.o),this.ya=a.ya,this.j=a.j,_.Rs(this,a.S),this.i=a.i,_.Ss(this,Ts(a.g)),_.Us(this,a.s)):a&&(c=String(a).match(_.bk))?(this.u=!!b,_.Qs(this,c[1]||"",!0),this.ya=Vs(c[2]||""),this.j=Vs(c[3]||"",!0),_.Rs(this,c[4]),this.i=Vs(c[5]||"",!0),_.Ss(this,c[6]||"",!0),_.Us(this,c[7]||"",!0)):(this.u=!!b,this.g=new _.Ws(null,this.u))};._.Ps.prototype.toString=function(){var a=[],b=this.o;b&&a.push(Xs(b,Ys,!0),":");var c=this.j;if(c||"file"==b)a.push("//"),(b=this.ya)&&a.push(Xs(b,Ys,!0),"
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\m=dXoSAc,CbeRWe,wmlPKb[1].js
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):1608
                                                                                            Entropy (8bit):5.3674432305841
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:tyHsysC+GatlwK4B/0gMgaIMMRKbp10nqjUfrG:tyMVziK4jaIdRhqjUTG
                                                                                            MD5:5385E000D5ADF1C351B9E47C19891BA0
                                                                                            SHA1:0CA2C77221FBF48440A7D01CB7CDE324D877040D
                                                                                            SHA-256:69388FBB61FBD9421217EB3E181F6D9461BAE5327F3196529FE2D0E40EF60426
                                                                                            SHA-512:431366CBCCA3B331394A4DE53C45989EA0DB88082359AC1FFAABCCE74049F043B5ADDF27CE844A10D10648A31D73529D8980173755A44C8D2B768C9C5FABE09A
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: "use strict";this.default_IdentityPoliciesUi=this.default_IdentityPoliciesUi||{};(function(_){var window=this;.try{._.m("dXoSAc");.var goa=_.D("dXoSAc");.var $2=function(a){_.V.call(this,a.ma);this.i=null};_.w($2,_.V);$2.T=function(){return{}};$2.prototype.fC=function(a){a:{a=a.data;var b=this.H().v().getElementsByClassName("bCzwPe");b=_.v(b);for(var c=b.next();!c.done;c=b.next())if(c=c.value,c.href&&_.pc(c.href,"#"+a)){a=c;break a}a=null}a&&a!==this.i&&(this.i&&_.hi(this.i,"YySNWc"),(this.i=a)&&_.gi(this.i,"YySNWc"))};_.W($2.prototype,"C1eaHb",function(){return this.fC});_.NK(goa,$2);.._.n();.._.m("CbeRWe");.var foa=_.D("CbeRWe");.var V2=function(a){_.V.call(this,a.ma)};_.w(V2,_.V);V2.T=function(){return{}};V2.prototype.dG=function(){var a=this.Fa("O1htCb").v().value;if(a){var b=new _.Ps(this.getWindow().location);b.g.set("hl",a);_.yd(this.getWindow().location,b.toString())}};_.W(V2.prototype,"msyOCf",function(){return this.dG});_.NK(foa,V2);.._.n();.._.m("wmlPKb");.var Y1=function(a)
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\pxiDypQkot1TnFhsFMOfGShVF9eI[1].woff
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 38064, version 1.1
                                                                                            Category:downloaded
                                                                                            Size (bytes):38064
                                                                                            Entropy (8bit):7.985282250659124
                                                                                            Encrypted:false
                                                                                            SSDEEP:768:FmLfShvXTNLstzb6V8QZ3+ibkkftFHdur7Lh9JVIzdMIWRirfqiW5Pm9WmX:FmzSdXOhOOA5uDzHIz3WUrPYtmX
                                                                                            MD5:E7BBF7E9E89975E144CBC167F2293FDE
                                                                                            SHA1:0CB43D4E0ECF79C8AF6629CA1C386EA23FA02C02
                                                                                            SHA-256:A87A298223B431522629F284F2D237773F8257B2DB427904CA95EC20DFC34CDD
                                                                                            SHA-512:75AD4EF05603116A2C0D16E9C7F793D47602044611F369A83A6AED4D14279809064C43B6EA3BEA28F889F3CE65199DA67CF0685819A8F0C01F5DFC0C97969A7F
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eI.woff
                                                                                            Preview: wOFF..............G.........................GPOS.......K..:X....GSUB............!?-.OS/2.......Y...`k..cmap...(... ....)9.8cvt ...H...g...l...wfpgm...........a.A..gasp...............!glyf......TD...$...yhdmx..c...'m..Kha`98head...h...6...6..N{hhea....... ...$...Chmtx.......^...l}.*.loca... ...8...8...Pmaxp...X... ... .8..name...x........ P<.post...L...|...{#_.sprep..............oNx.d.%@E1....w*Vpw......]z$S...HT.L&.L.g8.M.....ib....&.......]..${..i..<..A..Y............+.... .[..x...pL.=L.]`.mv...+..x.J.1..G<.$.B&..r..5.zs.q..W..... ?./.1.i.....?...?..uk.&~.I..\YF.6...|<!.:..Jxg.|...0.bb..|..=.=.=G....&!&!CB...Y"............)ij.....*r.....ku.j.9q"....hs...D"._.........X.+02.{*>...";>.....3.([a.'y.L.&."..2.O....*....`..L~.l}....h>x .J...V.8u<..."..Wh......FF"#.8...........=#Q.K..........!.S}...9........bv..V......W.."/....9U}.....5....g.{"..{.....Y.v...T..o..i.s.....|V.Hs..8d..N=..lg..g.HV...E.{;W.w6...R3&.mV..Q"%.<.3tlE.i.3yB62.....>K...l....s.(.....
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\rs=AMjVe6iMyGn4uSw8q2RVwco-G02kXILHTA[1].css
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:ASCII text, with very long lines, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):361934
                                                                                            Entropy (8bit):5.216182302512245
                                                                                            Encrypted:false
                                                                                            SSDEEP:6144:3KptkA4y2RgTZKMexsw4dqxHSNXW1WXzU3J:7xswn
                                                                                            MD5:C4B95B16ADFECE64103457607CE5C005
                                                                                            SHA1:125091D980D5A4BBD2D7742A8C4C19BDEBBB62BF
                                                                                            SHA-256:8769672CF2EE4FE761ADD357E20048D2F0EC903B7227A53640D082EEB1B23B9C
                                                                                            SHA-512:3859DF0E77DE0F506185CFD4983514ED265B2235404F7BAAA5F2900C85F0AEDD9E3166222693E46BBED12B796FB47F0D77BD9DFCC023497908945FEC3F518651
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            IE Cache URL:https://www.gstatic.com/_/freebird/_/ss/k=freebird.v.-1miqeftoypae8.L.I11.O/d=1/ct=zgms/rs=AMjVe6iMyGn4uSw8q2RVwco-G02kXILHTA
                                                                                            Preview: .jfk-butterBar{border-radius:2px;box-shadow:0 2px 4px rgba(0,0,0,0.2);transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.jfk-butterBar-info{background-color:#f9edbe;border-color:#f0c36d;color:#333}.jfk-butterBar-error{background-color:#484848;border-color:#202020;color:#fff}.jfk-butterBar-promo{background-color:#d6e9f8;border-color:#4d90f0;color:#333}.jfk-butterBar-warning{background-color:#dd4b39;border-color:#602019;color:#fff}.jfk-butterBar-shown{transition:opacity .218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.jfk-butterBar-mini.jfk-butterBar-shown{padding:2px 16px}.docs-butterbar-container{font-weight:700;height:0;position:absolute;text-align:center;top:23px;width:100%;z-index:999}.docs-hub-butterbar{top:57px}.docs-gm .docs-butterbar-container{font-weight:normal;font-weight:var(--docs-material-font-weight-normal,n
                                                                                            C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\viewform[1].htm
                                                                                            Process:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            File Type:HTML document, UTF-8 Unicode text, with very long lines
                                                                                            Category:dropped
                                                                                            Size (bytes):92738
                                                                                            Entropy (8bit):5.669903486998468
                                                                                            Encrypted:false
                                                                                            SSDEEP:1536:a9icCPClc1X5+Ayz6Ddd08WG5u8eXyWHUeXyaH3eXyXHVMZEd8:I/25d8lOc5HUc9H3cOHV98
                                                                                            MD5:C1713D4C365483D8ED8DBFCA395CF859
                                                                                            SHA1:2FCEFADA047587BC9A8E65299D87B66A39DE98F3
                                                                                            SHA-256:24257AAA484A6FA4988C86A0064725C49EF186173F9797F0C4534C7AA8087E91
                                                                                            SHA-512:9267A84FCBBB1F50E4A65B0D7B0535AD621B2BFFF75E462078A42561F420409A1A6611E23997AAEF30ECA8C6277A306066B643A47FD3CCE7EBD56C1FCA15C785
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: <!DOCTYPE html><html lang="en" class="m2"><head><link rel="shortcut icon" sizes="16x16" href="https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png"><link href="https://fonts.googleapis.com/icon?family=Material+Icons+Extended" rel="stylesheet"><title>........ ........ ..... ....... ........ .......</title><link rel="stylesheet" href="https://www.gstatic.com/_/freebird/_/ss/k=freebird.v.-1miqeftoypae8.L.I11.O/d=1/ct=zgms/rs=AMjVe6iMyGn4uSw8q2RVwco-G02kXILHTA" data-id="_cl"><link href="https://fonts.googleapis.com/css?family=Google+Sans:400,500|Roboto:300,400,400i,500,700&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext" rel="stylesheet" type="text/css"><link href="https://fonts.googleapis.com/css?family=Product+Sans&subset=latin,vietnamese,latin-ext,cyrillic,greek,cyrillic-ext,greek-ext" rel="stylesheet" type="text/css"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="referrer" con
                                                                                            C:\Users\user\AppData\Local\Temp\~DF85FFA6A592738BA2.TMP
                                                                                            Process:C:\Program Files\internet explorer\iexplore.exe
                                                                                            File Type:data
                                                                                            Category:dropped
                                                                                            Size (bytes):29745
                                                                                            Entropy (8bit):0.4088411714474062
                                                                                            Encrypted:false
                                                                                            SSDEEP:48:kBqoxxJhHWSVSEabgPdPBsjF+D2bppgaQ2y:kBqoxDhHWSVSE+ysi2bpQ9
                                                                                            MD5:219F4F862BC11D38CA006ED21DE47476
                                                                                            SHA1:954B664260C4B1D8D5000CC9EE4DC9F675ED8755
                                                                                            SHA-256:2B04C4015C3A9AFBBCB792523B1A05EA96737AF36F597EBB488D63AC91C29FB6
                                                                                            SHA-512:6920B2694CB4DC504AE2CB14201EABCF79E570E47CE375732BF2FA0D327B5EA0C49817D2AF505A17523074BBE6982ECAF4E32F82B2619B63A2788821FE26B30D
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: .............................*%..H..M..{y..+.0...(................... ...............................................*%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                            C:\Users\user\AppData\Local\Temp\~DF88F3264A04E74963.TMP
                                                                                            Process:C:\Program Files\internet explorer\iexplore.exe
                                                                                            File Type:data
                                                                                            Category:dropped
                                                                                            Size (bytes):13077
                                                                                            Entropy (8bit):0.515698467661034
                                                                                            Encrypted:false
                                                                                            SSDEEP:24:c9lLh9lLh9lIn9lIn9lolF9lo/9lW6sJuPShd:kBqoIg+6Yu+
                                                                                            MD5:265A60F4BA2BC872A2DEA7B22101BB6E
                                                                                            SHA1:E47694F164FC3AC61A3088E55535451F2EF504B0
                                                                                            SHA-256:C5334D242A278763A6E8732A602B4771EFB0819829BA656E753088F4268DDAEA
                                                                                            SHA-512:68884BE3FFA904D98F26B17BFEC28C03D6F8032D8672C4A8F60A96A0D305AA6A2BF6F78D3A3B9A8CDB5E210E0A5E44EB99A4BD4A129A0C8523691C242438CB91
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: .............................*%..H..M..{y..+.0...(................... ...............................................*%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
                                                                                            C:\Users\user\AppData\Local\Temp\~DFB9A680932579ADEB.TMP
                                                                                            Process:C:\Program Files\internet explorer\iexplore.exe
                                                                                            File Type:data
                                                                                            Category:dropped
                                                                                            Size (bytes):114122
                                                                                            Entropy (8bit):1.2785117259435668
                                                                                            Encrypted:false
                                                                                            SSDEEP:384:kBqoxKAuqR+fBjKROPI5m8maWIyLLuONo0832uoD9TvIwUEELZsvX5qAq:xhsot0ZmX5qAq
                                                                                            MD5:0A12FB4C6EC3AE2499B56131B00E6372
                                                                                            SHA1:40BC58CD01EFC4C4F3E73D596596537195D2608C
                                                                                            SHA-256:17E8EDF01121FF4AA27B8C6CCDA3E88AB4AA2879DE5F5D4D663C015A1193C8C9
                                                                                            SHA-512:5DDA8FD723AE4030997E68340072A96E7C118734CBC68BEB229110FC4C9F15EC9C4D2694C55D4114805CDBBB38B92C67A4AEF430C596636EDBAF0256479E0639
                                                                                            Malicious:false
                                                                                            Reputation:low
                                                                                            Preview: .............................*%..H..M..{y..+.0...(................... ...............................................*%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                            Static File Info

                                                                                            No static file info

                                                                                            Network Behavior

                                                                                            Network Port Distribution

                                                                                            TCP Packets

                                                                                            TimestampSource PortDest PortSource IPDest IP
                                                                                            Nov 29, 2020 11:19:23.595181942 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.595200062 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.616233110 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.616277933 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.616364956 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.616405964 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.617006063 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.617731094 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.638034105 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.638832092 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.650604963 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.650649071 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.650686979 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.650726080 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.650732994 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.650814056 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.650823116 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.650827885 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.651321888 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.651365042 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.651402950 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.651407003 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.651427031 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.651439905 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.651458025 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.651495934 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.660783052 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.662050962 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.662415981 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.662609100 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.662868977 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.682100058 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.682145119 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.682275057 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.682326078 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.682944059 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.683370113 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.683402061 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.683429003 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.683449984 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.683552980 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.683597088 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.683873892 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.683945894 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.684392929 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.688060045 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.703886986 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.710838079 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.834036112 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.834115982 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.834155083 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.834193945 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.834266901 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.834316969 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.834332943 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.834341049 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.834928989 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.834990025 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.835000992 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.835036993 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.835998058 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.836046934 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.836077929 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.836101055 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.837038040 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.837078094 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.837109089 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.837140083 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.837713957 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.837788105 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.852809906 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:19:23.873985052 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.420222044 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.421006918 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.451225042 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.451370955 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.451914072 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.452025890 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.477853060 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.478619099 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.508914948 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.509541035 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521035910 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521087885 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521110058 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521223068 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.521279097 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.521684885 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521734953 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521765947 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.521790981 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.521837950 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:56.521845102 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.145291090 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.145329952 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.146294117 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.146523952 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.146609068 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.176628113 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.176670074 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.176709890 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.176729918 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.176742077 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.176748991 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.176783085 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.176801920 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.177359104 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.177417994 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.177439928 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.177541018 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.181783915 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.191340923 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.191451073 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.202989101 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.208807945 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.208858013 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.210947037 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.238821983 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.239917040 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.246809959 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.255300045 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.255333900 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.255374908 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.255402088 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.255567074 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.255631924 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.255682945 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.255740881 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.350219965 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:57.385775089 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.148066044 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.179532051 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.193602085 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.193645954 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.193723917 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.193754911 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.193785906 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.193814993 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.193846941 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.193859100 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.194099903 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.229968071 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.377051115 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.408144951 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.422288895 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.422333002 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.422360897 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.422440052 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.422497988 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.422542095 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.422553062 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.422874928 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.457828999 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.512511015 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.543596983 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.557687044 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.557733059 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.557825089 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.557826042 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.557847977 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.557859898 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:19:58.557883024 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.557903051 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.558173895 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:19:58.593931913 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:21:12.338778019 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:21:12.338879108 CET49755443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:21:12.340019941 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:21:12.340086937 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:21:12.360898018 CET44349726216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:21:12.360984087 CET49726443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:21:12.361072063 CET44349725216.58.215.225192.168.2.3
                                                                                            Nov 29, 2020 11:21:12.361160040 CET49725443192.168.2.3216.58.215.225
                                                                                            Nov 29, 2020 11:21:12.369591951 CET44349756172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:21:12.369617939 CET44349755172.217.168.66192.168.2.3
                                                                                            Nov 29, 2020 11:21:12.369680882 CET49756443192.168.2.3172.217.168.66
                                                                                            Nov 29, 2020 11:21:12.369712114 CET49755443192.168.2.3172.217.168.66

                                                                                            UDP Packets

                                                                                            TimestampSource PortDest PortSource IPDest IP
                                                                                            Nov 29, 2020 11:19:16.835906029 CET6418553192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:16.863276958 CET53641858.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:17.487582922 CET6511053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:17.514885902 CET53651108.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:18.119339943 CET5836153192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:18.155086994 CET53583618.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:18.952589989 CET6349253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:18.980118990 CET53634928.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:19.672286987 CET6083153192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:19.707801104 CET53608318.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:20.469604015 CET6010053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:20.496994019 CET53601008.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:21.258992910 CET5319553192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:21.286286116 CET53531958.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:21.678004026 CET5014153192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:21.715349913 CET53501418.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:22.688302994 CET5302353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:22.707479954 CET4956353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:22.715648890 CET53530238.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:22.750897884 CET53495638.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.388487101 CET5135253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:23.391880035 CET5934953192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:23.434197903 CET53513528.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.435051918 CET53593498.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.529298067 CET5708453192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:23.572945118 CET53570848.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:23.673820972 CET5882353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:23.730021954 CET53588238.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:24.365786076 CET5756853192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:24.409229040 CET53575688.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:40.242228031 CET5054053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:40.298495054 CET53505408.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:45.884947062 CET5436653192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:45.894088984 CET5303453192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:45.921195984 CET53530348.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:45.941586018 CET53543668.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:46.243247032 CET5776253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:46.278671980 CET53577628.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:46.892093897 CET5543553192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:46.936140060 CET53554358.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:48.054187059 CET5071353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:48.097984076 CET53507138.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:48.684571028 CET5613253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:48.728034973 CET53561328.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:48.809031010 CET5898753192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:48.852370977 CET53589878.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:49.302469015 CET5657953192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:49.337903023 CET53565798.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:51.672947884 CET6063353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:51.711935997 CET53606338.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:52.297909975 CET6129253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:52.333692074 CET53612928.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:52.764497995 CET6063353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:52.803456068 CET53606338.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:53.438133001 CET6129253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:53.473720074 CET53612928.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:53.836543083 CET6063353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:53.872539997 CET53606338.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:54.488080025 CET6129253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:54.523857117 CET53612928.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.140615940 CET6063353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:56.178673029 CET53606338.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:56.381864071 CET6361953192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:56.417581081 CET53636198.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.127465010 CET6493853192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:57.134299994 CET6129253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:57.167298079 CET53649388.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.168534040 CET6194653192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:57.172251940 CET53612928.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.212266922 CET53619468.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:19:57.778377056 CET6491053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:19:57.805742979 CET53649108.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:00.256637096 CET6063353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:00.294528961 CET53606338.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:01.143254042 CET6129253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:01.179047108 CET53612928.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:06.201443911 CET5212353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:06.238759041 CET53521238.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:08.939619064 CET5613053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:08.966780901 CET53561308.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:09.748011112 CET5633853192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:09.783749104 CET53563388.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:10.705243111 CET5942053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:10.741262913 CET53594208.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:42.253371954 CET5878453192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:42.290297985 CET53587848.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:46.767338037 CET6397853192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:46.820976973 CET53639788.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:47.422211885 CET6293853192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:47.457716942 CET53629388.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:49.369530916 CET5570853192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:49.405306101 CET53557088.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:49.844027996 CET5680353192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:49.908984900 CET53568038.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:50.262595892 CET5714553192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:50.300297022 CET53571458.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:50.983516932 CET5535953192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:51.019210100 CET53553598.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:51.245071888 CET5830653192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:51.291332960 CET53583068.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:51.449410915 CET6412453192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:51.485174894 CET53641248.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:52.701508999 CET4936153192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:52.728667974 CET53493618.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:54.471410990 CET6315053192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:54.507071972 CET53631508.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:20:55.055587053 CET5327953192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:20:55.091203928 CET53532798.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:21:11.228096962 CET5688153192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:21:11.255389929 CET53568818.8.8.8192.168.2.3
                                                                                            Nov 29, 2020 11:21:12.090631962 CET5364253192.168.2.38.8.8.8
                                                                                            Nov 29, 2020 11:21:12.126470089 CET53536428.8.8.8192.168.2.3

                                                                                            DNS Queries

                                                                                            TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
                                                                                            Nov 29, 2020 11:19:23.529298067 CET192.168.2.38.8.8.80x590fStandard query (0)lh3.googleusercontent.comA (IP address)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:49.302469015 CET192.168.2.38.8.8.80x28ecStandard query (0)www.youtube.comA (IP address)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:56.381864071 CET192.168.2.38.8.8.80x832bStandard query (0)googleads.g.doubleclick.netA (IP address)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:57.168534040 CET192.168.2.38.8.8.80xe3c0Standard query (0)static.doubleclick.netA (IP address)IN (0x0001)

                                                                                            DNS Answers

                                                                                            TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClass
                                                                                            Nov 29, 2020 11:19:23.572945118 CET8.8.8.8192.168.2.30x590fNo error (0)lh3.googleusercontent.comgooglehosted.l.googleusercontent.comCNAME (Canonical name)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:23.572945118 CET8.8.8.8192.168.2.30x590fNo error (0)googlehosted.l.googleusercontent.com216.58.215.225A (IP address)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:49.337903023 CET8.8.8.8192.168.2.30x28ecNo error (0)www.youtube.comyoutube-ui.l.google.comCNAME (Canonical name)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:56.417581081 CET8.8.8.8192.168.2.30x832bNo error (0)googleads.g.doubleclick.netpagead46.l.doubleclick.netCNAME (Canonical name)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:56.417581081 CET8.8.8.8192.168.2.30x832bNo error (0)pagead46.l.doubleclick.net172.217.168.66A (IP address)IN (0x0001)
                                                                                            Nov 29, 2020 11:19:57.212266922 CET8.8.8.8192.168.2.30xe3c0No error (0)static.doubleclick.netstatic-doubleclick-net.l.google.comCNAME (Canonical name)IN (0x0001)

                                                                                            HTTPS Packets

                                                                                            TimestampSource IPSource PortDest IPDest PortSubjectIssuerNot BeforeNot AfterJA3 SSL Client FingerprintJA3 SSL Client Digest
                                                                                            Nov 29, 2020 11:19:23.650726080 CET216.58.215.225443192.168.2.349726CN=*.googleusercontent.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Tue Nov 03 08:37:44 CET 2020 Thu Jun 15 02:00:42 CEST 2017Tue Jan 26 08:37:44 CET 2021 Wed Dec 15 01:00:42 CET 2021771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                                                                                            CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Thu Jun 15 02:00:42 CEST 2017Wed Dec 15 01:00:42 CET 2021
                                                                                            Nov 29, 2020 11:19:23.651439905 CET216.58.215.225443192.168.2.349725CN=*.googleusercontent.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Tue Nov 03 08:37:44 CET 2020 Thu Jun 15 02:00:42 CEST 2017Tue Jan 26 08:37:44 CET 2021 Wed Dec 15 01:00:42 CET 2021771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                                                                                            CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Thu Jun 15 02:00:42 CEST 2017Wed Dec 15 01:00:42 CET 2021
                                                                                            Nov 29, 2020 11:19:56.521087885 CET172.217.168.66443192.168.2.349755CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Tue Nov 03 08:33:42 CET 2020 Thu Jun 15 02:00:42 CEST 2017Tue Jan 26 08:33:42 CET 2021 Wed Dec 15 01:00:42 CET 2021771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                                                                                            CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Thu Jun 15 02:00:42 CEST 2017Wed Dec 15 01:00:42 CET 2021
                                                                                            Nov 29, 2020 11:19:56.521734953 CET172.217.168.66443192.168.2.349756CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Tue Nov 03 08:33:42 CET 2020 Thu Jun 15 02:00:42 CEST 2017Tue Jan 26 08:33:42 CET 2021 Wed Dec 15 01:00:42 CET 2021771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,09e10692f1b7f78228b2d4e424db3a98c
                                                                                            CN=GTS CA 1O1, O=Google Trust Services, C=USCN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2Thu Jun 15 02:00:42 CEST 2017Wed Dec 15 01:00:42 CET 2021

                                                                                            Code Manipulations

                                                                                            Statistics

                                                                                            CPU Usage

                                                                                            Click to jump to process

                                                                                            Memory Usage

                                                                                            Click to jump to process

                                                                                            Behavior

                                                                                            Click to jump to process

                                                                                            System Behavior

                                                                                            General

                                                                                            Start time:11:19:21
                                                                                            Start date:29/11/2020
                                                                                            Path:C:\Program Files\internet explorer\iexplore.exe
                                                                                            Wow64 process (32bit):false
                                                                                            Commandline:'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
                                                                                            Imagebase:0x7ff6b7f80000
                                                                                            File size:823560 bytes
                                                                                            MD5 hash:6465CB92B25A7BC1DF8E01D8AC5E7596
                                                                                            Has elevated privileges:true
                                                                                            Has administrator privileges:true
                                                                                            Programmed in:C, C++ or other language
                                                                                            Reputation:low

                                                                                            General

                                                                                            Start time:11:19:21
                                                                                            Start date:29/11/2020
                                                                                            Path:C:\Program Files (x86)\Internet Explorer\iexplore.exe
                                                                                            Wow64 process (32bit):true
                                                                                            Commandline:'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4892 CREDAT:17410 /prefetch:2
                                                                                            Imagebase:0xd90000
                                                                                            File size:822536 bytes
                                                                                            MD5 hash:071277CC2E3DF41EEEA8013E2AB58D5A
                                                                                            Has elevated privileges:true
                                                                                            Has administrator privileges:true
                                                                                            Programmed in:C, C++ or other language
                                                                                            Reputation:low

                                                                                            Disassembly

                                                                                            Reset < >