Play interactive tour

Edit tour

Analysis Report https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/

Overview

General Information

Sample URL:	https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/
Analysis ID:	348698
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 5780 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5060 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Phishing:

Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70f04eb8a5ab5%26domain%3Dhealthimpactnews.com%26origin%3Dhttps%253A%252F%252Fhealthimpactnews.com%252Ff2069dd5a85eaa4%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&layout=box_count&locale=en_US&sdk=joey&send=false&show_faces=false&size=large&size=large
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.bitchute.com/embed/H9GyqoPMvfRa/
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70f04eb8a5ab5%26domain%3Dhealthimpactnews.com%26origin%3Dhttps%253A%252F%252Fhealthimpactnews.com%252Ff2069dd5a85eaa4%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&layout=box_count&locale=en_US&sdk=joey&send=false&show_faces=false&size=large&size=large
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://jetpack.wordpress.com/jetpack-comment/?blogid=77516305&postid=65520&comment_registration=0&require_name_email=1&stc_enabled=1&stb_enabled=1&show_avatars=1&avatar_default=mystery&greeting=Join+the+Discussion&greeting_reply=Leave+a+Reply+to+%25s&color_scheme=transparent&lang=en_US&jetpack_version=7.6&show_cookie_consent=10&has_cookie_consent=0&token_key=%3Bnormal%3B&sig=d34f400a3cc33cd7534dd0e56622df9d04b29f86#parent=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf1kbgUAAAAAEzOOExcyJWRNHb80UqEkWRCjyrW&co=aHR0cHM6Ly9oZWFsdGhpbXBhY3RuZXdzLmNvbTo0NDM.&hl=en&v=2Mfykwl2mlvyQZQ3PEgoH710&size=invisible&cb=zelsqmouig3y
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://api.sharetrackr.com/v1.0/emailsharewidget
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70f04eb8a5ab5%26domain%3Dhealthimpactnews.com%26origin%3Dhttps%253A%252F%252Fhealthimpactnews.com%252Ff2069dd5a85eaa4%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&layout=box_count&locale=en_US&sdk=joey&send=false&show_faces=false&size=large&size=large
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.bitchute.com/embed/H9GyqoPMvfRa/
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.facebook.com/v2.0/plugins/like.php?action=&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70f04eb8a5ab5%26domain%3Dhealthimpactnews.com%26origin%3Dhttps%253A%252F%252Fhealthimpactnews.com%252Ff2069dd5a85eaa4%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&layout=box_count&locale=en_US&sdk=joey&send=false&show_faces=false&size=large&size=large
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://jetpack.wordpress.com/jetpack-comment/?blogid=77516305&postid=65520&comment_registration=0&require_name_email=1&stc_enabled=1&stb_enabled=1&show_avatars=1&avatar_default=mystery&greeting=Join+the+Discussion&greeting_reply=Leave+a+Reply+to+%25s&color_scheme=transparent&lang=en_US&jetpack_version=7.6&show_cookie_consent=10&has_cookie_consent=0&token_key=%3Bnormal%3B&sig=d34f400a3cc33cd7534dd0e56622df9d04b29f86#parent=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf1kbgUAAAAAEzOOExcyJWRNHb80UqEkWRCjyrW&co=aHR0cHM6Ly9oZWFsdGhpbXBhY3RuZXdzLmNvbTo0NDM.&hl=en&v=2Mfykwl2mlvyQZQ3PEgoH710&size=invisible&cb=zelsqmouig3y
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Iframe src: https://api.sharetrackr.com/v1.0/emailsharewidget

Source: https://www.bitchute.com/channel/HealthImpactNews/	HTTP Parser: Title: HealthImpactNews does not match URL
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Title: Doctors Around the World Issue Dire WARNING: DO NOT GET THE COVID VACCINE!! does not match URL
Source: https://www.bitchute.com/channel/HealthImpactNews/	HTTP Parser: Title: HealthImpactNews does not match URL
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: Title: Doctors Around the World Issue Dire WARNING: DO NOT GET THE COVID VACCINE!! does not match URL

Source: https://www.bitchute.com/channel/HealthImpactNews/	HTTP Parser: No <meta name="author".. found
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: No <meta name="author".. found
Source: https://www.bitchute.com/channel/HealthImpactNews/	HTTP Parser: No <meta name="author".. found
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: No <meta name="author".. found

Source: https://www.bitchute.com/channel/HealthImpactNews/	HTTP Parser: No <meta name="copyright".. found
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.bitchute.com/channel/HealthImpactNews/	HTTP Parser: No <meta name="copyright".. found
Source: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Show sources

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.32:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.32:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.26.29.255:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.26.29.255:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.15.156:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.15.156:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.238.30:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.238.30:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.50:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.50:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.196.106.79:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.196.106.79:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.35:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.35:443 -> 192.168.2.3:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.180.5:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.180.5:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.32:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.32:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.59.220.196:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.59.220.196:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.187.126.2:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.187.126.2:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.72.191:443 -> 192.168.2.3:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.72.191:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.23:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.23:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.51:443 -> 192.168.2.3:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.51:443 -> 192.168.2.3:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.35:443 -> 192.168.2.3:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.35:443 -> 192.168.2.3:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.35:443 -> 192.168.2.3:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.122.96:443 -> 192.168.2.3:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.122.96:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.232.233.228:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.232.233.228:443 -> 192.168.2.3:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.116:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.116:443 -> 192.168.2.3:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.116:443 -> 192.168.2.3:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.22:443 -> 192.168.2.3:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.22:443 -> 192.168.2.3:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.37.62:443 -> 192.168.2.3:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.37.62:443 -> 192.168.2.3:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.132.64:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.132.64:443 -> 192.168.2.3:49845 version: TLS 1.2

Networking:

Source: global traffic

HTTP traffic detected: GET /feed/ HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: healthimpactnews.comConnection: Keep-AliveCookie: apbct_timestamp=1612433695; apbct_site_landing_ts=1612433695; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%2522ac3e17bb38088dc259d84ee767ad38ff%2522%257D; ct_checkjs=2097541742; _ga=GA1.2.1934871870.1612479109; _gid=GA1.2.382038630.1612479109; _gat=1; ct_ps_timestamp=1612479109; ct_fkp_timestamp=0; ct_pointer_data=%5B%5D; ct_timezone=-8; __unam=7639673-1776f3e9c31-4ee2bb92-2; OAID=01000111010001000101000001010010; outbrain_cid_fetch=true; _sm_nl_isStart=1; apbct_visible_fields=%7B%220%22%3A%7B%22visible_fields%22%3A%22%22%2C%22visible_fields_count%22%3A0%7D%2C%221%22%3A%7B%22visible_fields%22%3A%22%22%2C%22visible_fields_count%22%3A0%7D%2C%222%22%3A%7B%22visible_fields%22%3A%22%22%2C%22visible_fields_count%22%3A0%7D%2C%223%22%3A%7B%22visible_fields%22%3A%22%22%2C%22visible_fields_count%22%3A0%7D%2C%224%22%3A%7B%22visible_fields%22%3A%22%22%2C%22visible_fields_count%22%3A0%7D%2C%225%22%3A%7B%22visible_fields%22%3A%22%22%2C%22visible_fields_count%22%3A0%7D%7D

Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: <div class="fusion-social-networks"><a class="fusion-social-network-icon fusion-tooltip fusion-facebook icon-facebook" style="color:#bebdbd;" href="http://www.facebook.com/sharer.php?m2w&s=100&p[url]=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&p[images][0]=http://www.gravatar.com/avatar/2f8ec4a9ad7a39534f764d749e001046.png&p[title]=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Facebook" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-twitter icon-twitter" style="color:#bebdbd;" href="http://twitter.com/intent/tweet?text=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21 https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" target="_blank" data-placement="top" data-title="Twitter" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-tumblr icon-tumblr" style="color:#bebdbd;" href="http://www.tumblr.com/share/link?url=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&name=Doctors%2520Around%2520the%2520World%2520Issue%2520Dire%2520WARNING%253A%2520DO%2520NOT%2520GET%2520THE%2520COVID%2520VACCINE%2521%2521&description=Doctors+Around+the+World+Issue+Dire+WARNING%3A+DO+NOT+GET+THE+COVID+VACCINE%21%21" target="_blank" data-placement="top" data-title="Tumblr" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-linkedin icon-linkedin" style="color:#bebdbd;" href="http://linkedin.com/shareArticle?mini=true&url=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&title=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Linkedin" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-reddit icon-reddit" style="color:#bebdbd;" href="http://reddit.com/submit?url=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&title=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Reddit" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-mail icon-mail" style="color:#bebdbd;" href="mailto:?subject=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21&body=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" target="_blank" data-placement="top" data-title="
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: <div class="fusion-social-networks"><a class="fusion-social-network-icon fusion-tooltip fusion-facebook icon-facebook" style="color:#bebdbd;" href="http://www.facebook.com/sharer.php?m2w&s=100&p[url]=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&p[images][0]=http://www.gravatar.com/avatar/2f8ec4a9ad7a39534f764d749e001046.png&p[title]=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Facebook" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-twitter icon-twitter" style="color:#bebdbd;" href="http://twitter.com/intent/tweet?text=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21 https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" target="_blank" data-placement="top" data-title="Twitter" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-tumblr icon-tumblr" style="color:#bebdbd;" href="http://www.tumblr.com/share/link?url=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&name=Doctors%2520Around%2520the%2520World%2520Issue%2520Dire%2520WARNING%253A%2520DO%2520NOT%2520GET%2520THE%2520COVID%2520VACCINE%2521%2521&description=Doctors+Around+the+World+Issue+Dire+WARNING%3A+DO+NOT+GET+THE+COVID+VACCINE%21%21" target="_blank" data-placement="top" data-title="Tumblr" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-linkedin icon-linkedin" style="color:#bebdbd;" href="http://linkedin.com/shareArticle?mini=true&url=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&title=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Linkedin" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-reddit icon-reddit" style="color:#bebdbd;" href="http://reddit.com/submit?url=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&title=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Reddit" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-mail icon-mail" style="color:#bebdbd;" href="mailto:?subject=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21&body=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" target="_blank" data-placement="top" data-title="
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: <div class="fusion-social-networks"><a class="fusion-social-network-icon fusion-tooltip fusion-facebook icon-facebook" style="color:#bebdbd;" href="http://www.facebook.com/sharer.php?m2w&s=100&p[url]=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&p[images][0]=http://www.gravatar.com/avatar/2f8ec4a9ad7a39534f764d749e001046.png&p[title]=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Facebook" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-twitter icon-twitter" style="color:#bebdbd;" href="http://twitter.com/intent/tweet?text=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21 https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" target="_blank" data-placement="top" data-title="Twitter" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-tumblr icon-tumblr" style="color:#bebdbd;" href="http://www.tumblr.com/share/link?url=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&name=Doctors%2520Around%2520the%2520World%2520Issue%2520Dire%2520WARNING%253A%2520DO%2520NOT%2520GET%2520THE%2520COVID%2520VACCINE%2521%2521&description=Doctors+Around+the+World+Issue+Dire+WARNING%3A+DO+NOT+GET+THE+COVID+VACCINE%21%21" target="_blank" data-placement="top" data-title="Tumblr" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-linkedin icon-linkedin" style="color:#bebdbd;" href="http://linkedin.com/shareArticle?mini=true&url=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&title=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Linkedin" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-reddit icon-reddit" style="color:#bebdbd;" href="http://reddit.com/submit?url=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/&title=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21" target="_blank" data-placement="top" data-title="Reddit" data-toggle="tooltip"></a><a class="fusion-social-network-icon fusion-tooltip fusion-mail icon-mail" style="color:#bebdbd;" href="mailto:?subject=Doctors%20Around%20the%20World%20Issue%20Dire%20WARNING%3A%20DO%20NOT%20GET%20THE%20COVID%20VACCINE%21%21&body=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" target="_blank" data-placement="top" data-title="
Source: main[1].js.2.dr	String found in binary or memory: tag.src = window.location.protocol + "//www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: like[1].htm.2.dr	String found in binary or memory: 12.7434661,13.2 L6.54470232,13.2 Z"></path></svg><img class="_1pbs inlineBlock img" src="https://www.facebook.com/rsrc.php/v3/y5/r/OqOE21UvWe3.png" alt="" width="16" height="16" /></span></span><span class="_49vh _2pi7">Like</span></div></button><input type="hidden" autocomplete="off" name="action" value="like" /><input type="hidden" autocomplete="off" name="iframe_referer" value="https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" /><input type="hidden" autocomplete="off" name="r_ts" value="1612446715" /><input type="hidden" autocomplete="off" name="ref" /><input type="hidden" autocomplete="off" name="xfbml" value="1" /><input type="hidden" autocomplete="off" name="version" value="v3.2" /></form></div></div></td></tr></tbody></table><script nonce="n0Y0fDnk">(function(width, height, id, callback, origin, domain) { if(id){var e=document.getElementById(id);if(width!==-1)e.style.width=width+"px";else{width=e.offsetWidth;if(window.getComputedStyle){var computed=getComputedStyle(e);computed&&(width=Math.ceil(parseFloat(computed.width))\|\|e.offsetWidth)}}height===-1&&(height=e.offsetHeight)}var message="type=resize&cb="+callback+"&width="+width+"&height="+height;; (function(){var a=window.parent;window.opener!=null&&typeof window.opener.postMessage==="function"&&(relation==="opener.parent"?a=window.opener.parent:a=window.opener);var b=!0;function c(a,b){a=window.location.hostname.match(/\.(facebook\.sg\|facebookcorewwwi\.(?:test)?onion)$/);a=a?a[1]:"facebook.com";new Image().src="https://www."+a+"/common/scribe_endpoint.php?c=jssdk_error&m="+encodeURIComponent(JSON.stringify(b))}function d(){if(a===window)window.close(),window.open("","_self",""),window.close(),!window.closed&&closeURI&&window.location.replace(closeURI);else try{a.postMessage(message,origin)}catch(a){b?(b=!1,window.setTimeout(d,200)):c("jssdk_error",{error:"POST_MESSAGE",extra:{message:a.message+", html/js/connect/XDDialogResponsePurePostMessage.js:53"}})}}function e(){__fbNative.postMessage(message,origin)}window==top&&/FBAN\/\w+;/i.test(navigator.userAgent)&&!/FBAN\/mLite;/.test(navigator.userAgent)?window.__fbNative&&__fbNative.postMessage?e():window.addEventListener("fbNativeReady",e):d()})();; })(74, 58, "u_0_0", "f1aeeba2557c23f", "https:\/\/healthimpactnews.com", "healthimpactnews.com");</script><span id="jsbundle-loader"> equals www.facebook.com (Facebook)
Source: like[2].htm.2.dr	String found in binary or memory: 12.7434661,13.2 L6.54470232,13.2 Z"></path></svg><img class="_1pbs inlineBlock img" src="https://www.facebook.com/rsrc.php/v3/y5/r/OqOE21UvWe3.png" alt="" width="16" height="16" /></span></span><span class="_49vh _2pi7">Like</span></div></button><input type="hidden" autocomplete="off" name="action" value="like" /><input type="hidden" autocomplete="off" name="iframe_referer" value="https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" /><input type="hidden" autocomplete="off" name="r_ts" value="1612446715" /><input type="hidden" autocomplete="off" name="ref" /><input type="hidden" autocomplete="off" name="xfbml" value="1" /><input type="hidden" autocomplete="off" name="version" value="v3.2" /></form></div></div></td></tr></tbody></table><script nonce="sW3d3aWd">(function(width, height, id, callback, origin, domain) { if(id){var e=document.getElementById(id);if(width!==-1)e.style.width=width+"px";else{width=e.offsetWidth;if(window.getComputedStyle){var computed=getComputedStyle(e);computed&&(width=Math.ceil(parseFloat(computed.width))\|\|e.offsetWidth)}}height===-1&&(height=e.offsetHeight)}var message="type=resize&cb="+callback+"&width="+width+"&height="+height;; (function(){var a=window.parent;window.opener!=null&&typeof window.opener.postMessage==="function"&&(relation==="opener.parent"?a=window.opener.parent:a=window.opener);var b=!0;function c(a,b){a=window.location.hostname.match(/\.(facebook\.sg\|facebookcorewwwi\.(?:test)?onion)$/);a=a?a[1]:"facebook.com";new Image().src="https://www."+a+"/common/scribe_endpoint.php?c=jssdk_error&m="+encodeURIComponent(JSON.stringify(b))}function d(){if(a===window)window.close(),window.open("","_self",""),window.close(),!window.closed&&closeURI&&window.location.replace(closeURI);else try{a.postMessage(message,origin)}catch(a){b?(b=!1,window.setTimeout(d,200)):c("jssdk_error",{error:"POST_MESSAGE",extra:{message:a.message+", html/js/connect/XDDialogResponsePurePostMessage.js:53"}})}}function e(){__fbNative.postMessage(message,origin)}window==top&&/FBAN\/\w+;/i.test(navigator.userAgent)&&!/FBAN\/mLite;/.test(navigator.userAgent)?window.__fbNative&&__fbNative.postMessage?e():window.addEventListener("fbNativeReady",e):d()})();; })(74, 58, "u_0_0", "f70f04eb8a5ab5", "https:\/\/healthimpactnews.com", "healthimpactnews.com");</script><span id="jsbundle-loader"> equals www.facebook.com (Facebook)
Source: like[1].htm0.2.dr	String found in binary or memory: 12.7434661,13.2 L6.54470232,13.2 Z"></path></svg><img class="_1pbs inlineBlock img" src="https://www.facebook.com/rsrc.php/v3/y5/r/OqOE21UvWe3.png" alt="" width="16" height="16" /></span></span><span class="_49vh _2pi7">Like</span></div></button><input type="hidden" autocomplete="off" name="action" value="like" /><input type="hidden" autocomplete="off" name="iframe_referer" value="https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/" /><input type="hidden" autocomplete="off" name="r_ts" value="1612446715" /><input type="hidden" autocomplete="off" name="ref" /><input type="hidden" autocomplete="off" name="xfbml" value="1" /><input type="hidden" autocomplete="off" name="version" value="v3.2" /></form></div></div></td></tr></tbody></table><script nonce="vpWUS4re">(function(width, height, id, callback, origin, domain) { if(id){var e=document.getElementById(id);if(width!==-1)e.style.width=width+"px";else{width=e.offsetWidth;if(window.getComputedStyle){var computed=getComputedStyle(e);computed&&(width=Math.ceil(parseFloat(computed.width))\|\|e.offsetWidth)}}height===-1&&(height=e.offsetHeight)}var message="type=resize&cb="+callback+"&width="+width+"&height="+height;; (function(){var a=window.parent;window.opener!=null&&typeof window.opener.postMessage==="function"&&(relation==="opener.parent"?a=window.opener.parent:a=window.opener);var b=!0;function c(a,b){a=window.location.hostname.match(/\.(facebook\.sg\|facebookcorewwwi\.(?:test)?onion)$/);a=a?a[1]:"facebook.com";new Image().src="https://www."+a+"/common/scribe_endpoint.php?c=jssdk_error&m="+encodeURIComponent(JSON.stringify(b))}function d(){if(a===window)window.close(),window.open("","_self",""),window.close(),!window.closed&&closeURI&&window.location.replace(closeURI);else try{a.postMessage(message,origin)}catch(a){b?(b=!1,window.setTimeout(d,200)):c("jssdk_error",{error:"POST_MESSAGE",extra:{message:a.message+", html/js/connect/XDDialogResponsePurePostMessage.js:53"}})}}function e(){__fbNative.postMessage(message,origin)}window==top&&/FBAN\/\w+;/i.test(navigator.userAgent)&&!/FBAN\/mLite;/.test(navigator.userAgent)?window.__fbNative&&__fbNative.postMessage?e():window.addEventListener("fbNativeReady",e):d()})();; })(74, 58, "u_0_0", "f70f04eb8a5ab5", "https:\/\/healthimpactnews.com", "healthimpactnews.com");</script><span id="jsbundle-loader"> equals www.facebook.com (Facebook)
Source: sdk[1].js0.2.dr	String found in binary or memory: } }).call(global);})(window.inDapIF ? parent.window : window, window);} catch (e) {new Image().src="https:\/\/www.facebook.com\/" + 'common/scribe_endpoint.php?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script)+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1003265162","namespace":"FB","message":"'+e.message+'"}}');} equals www.facebook.com (Facebook)
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=928755773879843&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: mpJN5sJvczF[2].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/09P_rcHKL4D/ equals www.facebook.com (Facebook)
Source: sdk[1].js0.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: mpJN5sJvczF[2].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: mpJN5sJvczF[2].js.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/ZtTipMAcpq9/ equals www.facebook.com (Facebook)
Source: 928755773879843[1].js.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: feed[1].2.dr	String found in binary or memory: , said that Stefan Hockertz, professor of pharmacology and toxicology, told him<a href="https://www.youtube.com/watch?v=kANkpqtWLN4" target="_blank" rel="noopener noreferrer"> that thus far no scientific evidence has been found for asymptomatic infection</a>.</p> equals www.youtube.com (Youtube)
Source: feed[1].2.dr	String found in binary or memory: <a href="https://www.youtube.com/watch?v=sSBQUIEUbQ8" target="_blank" rel="noopener noreferrer">They use the computer modelling to essentially just create a genome from scratch,</a> equals www.youtube.com (Youtube)
Source: feed[1].2.dr	String found in binary or memory: <div class="rve" data-content-width="669px"><iframe title="Exclusive: Medical Board Attempts To Strip Doctor Of License Over Informed Vaccine Consent" width="669" height="376" src="https://www.youtube.com/embed/Z5JSmSubwEw?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div> equals www.youtube.com (Youtube)
Source: feed[1].2.dr	String found in binary or memory: <div class="rve" data-content-width="669px"><iframe title="GAMESTOP PEASANT REVOLT 2021 EXPLAINED: reddit vs. wall street" width="669" height="376" src="https://www.youtube.com/embed/d-jXrvszvzo?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe></div> equals www.youtube.com (Youtube)
Source: feed[1].2.dr	String found in binary or memory: <p>If you want to watch the raw footage of everything as it unfolded, you can watch it on the Ammon Bundy YouTube channel, <a href="https://www.youtube.com/watch?v=X5LzpXJc-Ds" target="_blank" rel="noopener noreferrer">here</a> and <a href="https://www.youtube.com/watch?v=0tNc9oeojaw" target="_blank" rel="noopener noreferrer">here</a>. (We have copies if they disappear.)</p> equals www.youtube.com (Youtube)
Source: sdk[1].js0.2.dr	String found in binary or memory: __d("FBPixelEndpoint",["invariant","FBEventsParamList","FBEventsUtils"],(function(a,b,c,d,e,f,g){"use strict";f.sendEvent=a;var h="https://www.facebook.com/tr/",i=location.href,j=window.top!==window,k=document.referrer;function l(a,c,d,e){e===void 0&&(e={});var f=new(b("FBEventsParamList"))();f.append("id",a);f.append("ev",c);f.append("dl",i);f.append("rl",k);f.append("if",j);f.append("ts",new Date().valueOf());f.append("cd",d);f.append("sw",window.screen.width);f.append("sh",window.screen.height);for(var g in e)f.append(g,e[g]);return f}function a(a,b,c,d){a=l(a,b,c,d);b=a.toQueryString();2048>(h+"?"+b).length?m(h,b):n(h,a)}function m(a,b){var c=new Image();c.src=a+"?"+b}function n(a,c){var d="fb"+Math.random().toString().replace(".",""),e=document.createElement("form");e.method="post";e.action=a;e.target=d;e.acceptCharset="utf-8";e.style.display="none";a=!!(window.attachEvent&&!window.addEventListener);a=a?'<iframe name="'+d+'">':"iframe";var f=document.createElement(a);f instanceof HTMLIFrameElement\|\|g(0,20659);f.src="javascript:false";f.id=d;f.name=d;e.appendChild(f);b("FBEventsUtils").listenOnce(f,"load",function(){c.each(function(a,b){var c=document.createElement("input");c.name=a;c.value=b;e.appendChild(c)}),b("FBEventsUtils").listenOnce(f,"load",function(){var a;(a=e.parentNode)==null?void 0:a.removeChild(e)}),e.submit()});(a=document.body)==null?void 0:a.appendChild(e)}}),null); equals www.facebook.com (Facebook)
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.facebook.com/v2.0/plugins/like.php?action=&app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df70f04eb8a5ab5%26domain%3Dhealthimpactnews.com%26origin%3Dhttps%253A%252F%252Fhealthimpactnews.com%252Ff2069dd5a85eaa4%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Fhealthimpactnews.com%2F2020%2Fdoctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine%2F&layout=box_count&locale=en_US&sdk=joey&send=false&show_faces=false&size=large&size=large equals www.facebook.com (Facebook)
Source: feed[1].2.dr	String found in binary or memory: nchen (Munich), Dusseldorf and Zurich for a study proving complete isolation and purification of so-called SARS-CoV-2. <a href="https://www.youtube.com/watch?v=N7VOpY4ZSME" target="_blank" rel="noopener noreferrer">He has not obtained it yet</a>.</p> equals www.youtube.com (Youtube)
Source: feed[1].2.dr	String found in binary or memory: s a guess, and when you apply the primers to the supernatant broth, your primers can attach to any one of the billions of molecules present in it, and <a href="https://www.facebook.com/notes/stefano-scoglio/the-invented-pandemic-the-lack-of-virus-isolation-and-the-invalid-covid-19-test/10219132803013133/" target="_blank" rel="noopener noreferrer">you have no idea that what you have thus generated is the virus you are looking for</a>. It is, in fact, a new creation made by researchers, who then call it SARS-CoV-2, but there is no connection whatsoever with the presumed equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: healthimpactnews.com

Source: autocomplete.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: core.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: jquery.ui.widget[1].js.2.dr, widget.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: menu.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: position.min[1].js.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: http://bestiejs.github.io/json3
Source: main[1].js.2.dr	String found in binary or memory: http://blog.alexmaccaw.com/css-transitions
Source: main[1].js.2.dr	String found in binary or memory: http://cherne.net/brian/resources/jquery.hoverIntent.html
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://coconutoil.com/
Source: main[1].js.2.dr	String found in binary or memory: http://code.google.com/p/jquery-appear/
Source: kg-video-js-skin[1].css.2.dr	String found in binary or memory: http://codepen.io/heff/pen/EarCt/left/?editors=010
Source: kgvid_styles[1].css.2.dr	String found in binary or memory: http://colorzilla.com/gradient-editor/#141414
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://created4health.org/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://created4health.org/how-i-found-peace-with-god/
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: main[1].js.2.dr	String found in binary or memory: http://cssuseragent.org/
Source: 77EC63BDA74BD0D0E0426DC8F8008506.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: buttons[1].js.2.dr	String found in binary or memory: http://edge.sharethis.com/share4x/mobile.html
Source: main[1].js.2.dr	String found in binary or memory: http://farukat.es/
Source: styles.31a113577abf67897166[1].css.2.dr, font-awesome[1].css.2.dr	String found in binary or memory: http://fontawesome.io
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: main[1].js.2.dr, bootstrap.min[1].js.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: main[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#collapse
Source: main[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#modals
Source: main[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#popovers
Source: main[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#tabs
Source: main[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#tooltip
Source: main[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#transitions
Source: main[1].js.2.dr	String found in binary or memory: http://github.com/desandro/imagesloaded
Source: _static[1].js0.2.dr	String found in binary or memory: http://github.com/zuk/jquery.inview/
Source: main[1].js.2.dr	String found in binary or memory: http://groups.google.com/group/jquery-dev/browse_thread/thread/eee6ab7b2da50e1f
Source: main[1].js.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/
Source: feed[1].2.dr	String found in binary or memory: http://healthimpactnews.com/?p=66706
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/category/alternative-health/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/category/coconut-health/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/category/created4health/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/category/medicine-watch/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/category/real-food-nutrition/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/category/sustainable-agriculture/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/feed/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/openx/www/delivery/...
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/privacy-statement/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/revive/www/delivery/ajs.php
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/revive/www/delivery/ck.php?n=a76c993e&cb=INSERT_RANDOM_NUMBER_HERE
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://healthimpactnews.com/revive/www/delivery/ck.php?n=af3e0a62&cb=INSERT_RANDOM_NUMBER_HERE
Source: ajaxComments[1].js.2.dr	String found in binary or memory: http://healthimpactnews.com/terms-of-use/
Source: style[1].css0.2.dr	String found in binary or memory: http://healthimpactnews.com/wp-content/plugins/popupally-new/resource/frontend/img/fancy_close.png);
Source: feed[1].2.dr	String found in binary or memory: http://https//www.amazon.co.uk/Virus-Mania-COVID-19-Hepatitis-Billion-Dollar/dp/375194253X
Source: main[1].js.2.dr	String found in binary or memory: http://infinite-scroll.com/
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: http://ionicons.com/
Source: main[1].js.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: main[1].js.2.dr	String found in binary or memory: http://isotope.metafizzy.co/docs/license.html
Source: main[1].js.2.dr	String found in binary or memory: http://jquery.com
Source: menu.min[1].js.2.dr, jquery.ui.widget[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: menu.min[1].js.2.dr, jquery.ui.widget[1].js.2.dr	String found in binary or memory: http://jqueryui.com
Source: main[1].js.2.dr	String found in binary or memory: http://jsapi.info/jquery/1.7.1/val#L2363
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: http://kit.mit-license.org
Source: main[1].js.2.dr	String found in binary or memory: http://malsup.com/jquery/cycle/lite/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://medicalkidnap.com
Source: _static[1].js0.2.dr	String found in binary or memory: http://metaweb.com
Source: modernizr-min[1].js.2.dr	String found in binary or memory: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-h
Source: main[1].js.2.dr	String found in binary or memory: http://mths.be/placeholder
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: main[1].js.2.dr	String found in binary or memory: http://paulirish.com/
Source: main[1].js.2.dr	String found in binary or memory: http://perfectionkills.com/feature-testing-css-properties/
Source: feed[1].2.dr	String found in binary or memory: http://portal.unesco.org/en/ev.php-URL_ID=31058&URL_DO=DO_TOPIC&URL_SECTION=201.html
Source: _static[1].js0.2.dr	String found in binary or memory: http://postmessage.freebaseapps.com)
Source: _static[1].js0.2.dr	String found in binary or memory: http://remysharp.com/2009/01/26/element-in-view-event-plugin/
Source: main[1].js.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: kg-video-js-skin[1].css.2.dr	String found in binary or memory: http://sass-lang.com/guide)
Source: feed[1].2.dr	String found in binary or memory: http://search.yahoo.com/mrss/
Source: buttons[1].js.2.dr	String found in binary or memory: http://seg.sharethis.com/getSegment.php?purl=
Source: buttons[1].js.2.dr	String found in binary or memory: http://sharethis.com/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://staging.sophiamedia.com/healthimpactnews/wp-content/themes/Avada/images/page_title_bg.png);
Source: style[1].css1.2.dr	String found in binary or memory: http://theme-fusion.com/avada/
Source: style[1].css1.2.dr	String found in binary or memory: http://themeforest.net/user/ThemeFusion
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: http://vaccineimpact.com
Source: kg-video-js-skin[1].css.2.dr	String found in binary or memory: http://videojs.com
Source: comments2[1].js.2.dr	String found in binary or memory: http://viima.github.io/jquery-comments/
Source: main[1].js.2.dr	String found in binary or memory: http://vimeo.com
Source: main[1].js.2.dr	String found in binary or memory: http://vimeo.com/channels
Source: feed[1].2.dr	String found in binary or memory: http://wellformedweb.org/CommentAPI/
Source: main[1].js.2.dr	String found in binary or memory: http://www.2meter3.de/code/hoverFlow/
Source: feed[1].2.dr	String found in binary or memory: http://www.alternativer-medienpreis.de/preistraeger-2009/
Source: KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf.2.dr, webfont[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: logo[1].svg.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: frontend[1].js.2.dr	String found in binary or memory: http://www.cssscript.com/simple-clean-popup-window-with-pure-javascript-simple-popup/
Source: feed[1].2.dr	String found in binary or memory: http://www.georss.org/georss
Source: style[1].css1.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: main[1].js.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: main[1].js.2.dr	String found in binary or memory: http://www.infinite-scroll.com/changelog/comment-page-1/#comment-127
Source: _static[2].js.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: ajaxComments[1].js.2.dr	String found in binary or memory: http://www.makeuseof.com/tag/ajaxify-wordpress-comments/
Source: main[1].js.2.dr	String found in binary or memory: http://www.mattvarone.com/web-design/uitotop-jquery-plugin/
Source: main[1].js.2.dr	String found in binary or memory: http://www.modernizr.com
Source: main[1].js.2.dr	String found in binary or memory: http://www.modernizr.com/)
Source: main[1].js.2.dr	String found in binary or memory: http://www.modernizr.com/license/
Source: main[1].js.2.dr, _static[2].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: main[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: feed[1].2.dr	String found in binary or memory: http://www.torstenengelbrecht.com/
Source: H9GyqoPMvfRa[1].dat.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: style[1].css1.2.dr	String found in binary or memory: http://www.woothemes.com/flexslider/
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://1.gravatar.com/avatar/ad516503a11cd5ca435acc9bb6523536?s=25
Source: _static[2].js.2.dr	String found in binary or memory: https://accounts.google.com/logout
Source: feed[1].2.dr	String found in binary or memory: https://ahrp.org/?s=Thalidomide
Source: feed[1].2.dr	String found in binary or memory: https://ahrp.org/from-the-holocaust-to-thalidomide-a-nazi-legacy/
Source: feed[1].2.dr	String found in binary or memory: https://ahrp.org/government-consigned-israeli-population-to-be-human-subjects-in-a-massive-experimen
Source: feed[1].2.dr	String found in binary or memory: https://ahrp.org/pfizer-admitted-its-vaccine-does-not-prevent-covid-infection/
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://api.sharetrackr.com/v1.0/emailsharewidget
Source: emailsharewidget[1].htm.2.dr	String found in binary or memory: https://api.sharetrackr.com/v1.0/sendemail
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://api.w.org/
Source: googleplus-sign-in[1].js.2.dr	String found in binary or memory: https://apis.google.com/js/platform.js?onload=googlePlusButtonRender
Source: feed[1].2.dr	String found in binary or memory: https://articles.mercola.com/sites/articles/archive/2021/01/05/mutated-covid-virus.aspx?ui=f41848815
Source: feed[1].2.dr	String found in binary or memory: https://blogs.findlaw.com/blotter/2009/09/pfizer-hit-with-largest-criminal-fine-in-us-history.html
Source: generate[1].js.2.dr	String found in binary or memory: https://campaigns.healthimpactnews.com
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://campaigns.healthimpactnews.com/form/generate.js?id=9
Source: generate[1].js.2.dr	String found in binary or memory: https://campaigns.healthimpactnews.com/form/submit?formId=9
Source: generate[1].js.2.dr	String found in binary or memory: https://campaigns.healthimpactnews.com/media/js/mautic-form.js
Source: healthimpactnews[2].htm.2.dr	String found in binary or memory: https://cdn-assets.minds.com/front/dist/en/assets/logos/bulb.svg
Source: healthimpactnews[2].htm.2.dr	String found in binary or memory: https://cdn-assets.minds.com/front/dist/en/assets/logos/logo-light-mode.svg
Source: healthimpactnews[2].htm.2.dr	String found in binary or memory: https://cdn-assets.minds.com/front/fonts/MaterialIcons-Regular.woff2
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/p2p-media-loader-core
Source: style[1].css0.2.dr	String found in binary or memory: https://cdn.mewe.com/front/favicon.ico);
Source: imagestore.dat.1.dr	String found in binary or memory: https://cdn.mewe.com/front/favicon.ico~
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdn.polyfill.io/v2/polyfill.min.js?features=es6
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/animate.css/3.5.2/animate.min.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/10.0.0/bootstrap-slider.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/10.0.0/css/bootstrap-slider.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.1/clipboard.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/css-element-queries/1.2.3/ElementQueries.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/css-element-queries/1.2.3/ResizeSensor.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/d3/3.5.17/d3.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jeditable.js/1.7.3/jeditable.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/jquery.validate.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/js-cookie/2.2.0/js.cookie.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lazysizes/4.0.1/lazysizes.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/moment.js/2.27.0/moment.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/plyr/3.5.6/plyr.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/rickshaw/1.6.3/rickshaw.min.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/rickshaw/1.6.3/rickshaw.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/toastr.js/2.1.3/toastr.min.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/toastr.js/2.1.3/toastr.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js
Source: feed[1].2.dr	String found in binary or memory: https://clark.wa.gov/sheriff
Source: emailsharewidget[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-1.12.4.min.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://commentfreely.bitchute.com/static/comments/css/comments1.css
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://commentfreely.bitchute.com/static/comments/js/commentactions2.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://commentfreely.bitchute.com/static/comments/js/comments2.js
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://community.healthimpactnews.com/intro
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: feed[1].2.dr	String found in binary or memory: https://cormandrostenreview.com/report/
Source: feed[1].2.dr	String found in binary or memory: https://corona-transition.org/die-coronavirus-wette-100-000-eur-fur-virusbeweis
Source: feed[1].2.dr	String found in binary or memory: https://coronatest.uzh.ch/en/
Source: feed[1].2.dr	String found in binary or memory: https://coronavirus.jhu.edu/data/mortality
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://created4health.org/is-gods-judgment-about-to-fall-on-america-what-is-the-mark-of-the-beast/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://created4health.org/make-reading-the-bible-a-new-year-resolution-it-could-change-your-life/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://created4health.org/the-satanic-roots-to-modern-medicine-the-mark-of-the-beast/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://created4health.org/unmasking-who-is-behind-the-plandemic-and-rioting-to-usher-in-the-new-wor
Source: scripts[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://developer.piwik.org/api-reference/tracking-javascript
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://developer.piwik.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: feed[1].2.dr	String found in binary or memory: https://en.idi.org.il/about/about-idi/
Source: mpJN5sJvczF[2].js.2.dr	String found in binary or memory: https://fburl.com/debugjs.
Source: fontawesome-all.min[1].js.2.dr	String found in binary or memory: https://fontawesome.com
Source: fontawesome-all.min[1].js.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizYRExUiTo99u79D0eEww.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizaRExUiTo99u79P0Y.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizdRExUiTo99u79D0e8fOytKw.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsans/v12/jizfRExUiTo99u79B_mh4Oo.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOjCnqEu92Fr1Mu51TzBhc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu52xM.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlvAA.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5g.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v13/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjoa4OWaw.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v13/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISWaw.woff)
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://gab.com/Health
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://gab.com/HealthImpactNews
Source: imagestore.dat.2.dr	String found in binary or memory: https://gab.com/favicon.ico
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: https://github.com/ain/smartbanner.js
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/bas2k/jquery.appear/
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/desandro/masonry/blob/master/jquery.masonry.js
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/master/ui/jquery.ui.widget.js
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/jsor/jcarousel/blob/master/lib/jquery.jcarousel.js
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/louisremi/jquery.smartresize.js
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/lrbabe/jquery.smartresize.js
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/lukeshumard/smartscroll
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/mathiasbynens/jquery-placeholder/pull/99
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/paulirish/infinite-scroll
Source: ma-2.14.0[1].js.2.dr	String found in binary or memory: https://github.com/snowplow/snowplow/wiki/javascript-tracker
Source: ma-2.14.0[1].js.2.dr	String found in binary or memory: https://github.com/snowplow/snowplow/wiki/javascript-tracker-setup
Source: main[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: feed[1].2.dr	String found in binary or memory: https://govextra.gov.il/media/30806/11221-moh-pfizer-collaboration-agreement-redacted.pdf
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://gravatar.com/site/signup/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr, feed[1].2.dr, HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/#organization
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/#personlogo
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/#website
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2017/former-vaccine-bully-board-certified-pediatrician-now-claims-unvac
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2018/death-certificate-clerk-reveals-how-cause-of-death-reporting-is-su
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2018/former-cdc-director-that-approved-gardasil-vaccine-and-became-head
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2018/should-the-cdc-oversee-vaccine-safety-when-they-purchase-over-5-bi
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/british-woman-films-empty-hospital-as-non-covid-patients-are-denie
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/censored-dr-kaufman-they-want-to-genetically-modify-us-with-covid-
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/covid-vaccines-biological-weapons-of-mass-destruction-says-wyoming
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-v
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/doctors-for-truth-tens-of-thousands-medical-professionals-suing-an
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/dr-northrup-discusses-worst-case-scenarios-with-new-covid-vaccine-
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/er-medical-worker-treats-man-who-tried-to-commit-suicide-by-blowin
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/fda-announces-deaths-of-two-pfizer-vaccine-trial-participants-as-i
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/florida-female-officer-in-full-riot-gear-forces-mom-and-small-chil
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/former-medic-whistleblower-exposes-how-military-is-testing-experim
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/how-to-beat-internet-censorship-and-create-your-own-newsfeed/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/i-cant-keep-watching-patients-die-needlessly-medical-professor-tes
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2020/is-the-tennessee-nurse-who-passed-out-on-live-camera-after-the-cov
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2020/oregon-pediatrician-publishes-study-comparing-his-vaccinated-and-u
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/some-americans-are-getting-fed-up-and-resisting-but-where-are-the-
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2020/statistics-show-that-the-number-of-people-who-died-in-the-u-s-in-2
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2020/tennessee-nurse-manager-passes-out-on-camera-after-receiving-pfize
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/10-dead-with-51-severe-side-effects-among-germanys-elderly-after-e
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/12400-people-in-israel-tested-positive-for-coronavirus-after-being
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/181-dead-in-the-u-s-during-2-week-period-from-experimental-covid-i
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/23-seniors-have-died-in-norway-after-receiving-the-pfizer-experime
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/24-dead-and-137-infected-at-ny-nursing-home-after-experimental-cov
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/24-residents-dead-in-3-weeks-as-one-third-of-uk-nursing-home-resid
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/27-year-old-canadian-healthcare-worker-faints-and-suffers-multiple
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/32-year-old-mexican-doctor-suffers-seizures-and-is-paralyzed-after
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/4-people-died-and-240-got-covid19-in-israel-after-being-injected-w
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/53-dead-in-gibraltar-in-10-days-after-experimental-pfizer-mrna-cov
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/55-americans-have-died-following-mrna-covid-injections-as-norway-d
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/7-dead-and-100-of-residents-infected-in-spanish-nursing-home-after
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/are-more-people-being-harmed-by-the-pfizer-experimental-vaccine-th
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/baseball-legend-hank-aaron-dead-after-receiving-the-experimental-m
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/catherine-austin-fitts-explains-how-the-globalist-billionaires-and
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/cdc-329-recorded-deaths-so-far-following-experimental-covid-mrna-i
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/clark-county-sheriff-and-washington-hospital-involved-in-medical-k
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/cna-nursing-home-whistleblower-seniors-are-dying-like-flies-after-
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/community-bands-together-to-rescue-elderly-woman-medically-kidnapp
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/did-larry-king-receive-an-experimental-covid-shot-just-before-his-
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/german-investigative-journalists-still-searching-for-proof-that-sa
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/israeli-teenager-hospitalized-in-icu-for-inflammation-of-the-heart
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/louisiana-woman-convulses-uncontrollably-after-being-injected-with
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/minnesota-doctor-fights-medical-boards-attempt-to-restrict-informe
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/molecular-biologist-explains-that-sars-vaccines-make-humans-geneti
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/perfectly-healthy-41-year-old-pediatric-assistant-dies-suddenly-af
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/study-cdc-broke-federal-law-by-manipulating-covid-death-statistics
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/the-internets-war-on-wall-street-did-what-government-could-not-it-
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/very-healthy-56-year-old-miami-obstetrician-dies-after-being-injec
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/when-the-people-fear-the-government-there-is-tyranny-but-when-gove
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/2021/why-would-anyone-choose-to-receive-an-experimental-covid-mrna-inje
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/2021/woman-warns-others-not-to-get-moderna-experimental-covid-vaccine-p
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/?p=65520
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66599
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66621
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66625
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66655
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66664
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66666
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66672
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66681
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/?p=66691
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/about-health-impact-news/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/author/brian/#author
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/category/alternative-health/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/category/coconut-health/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/category/created4health/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/category/medicine-watch/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/category/real-food-nutrition/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/category/sustainable-agriculture/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/comments/feed/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr, feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/contact/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/covid-information-center/
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/covid-testing-information/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr, feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/feed/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/newsletter/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/openx/www/delivery/...
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/opportunities-at-health-impact-news/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/privacy-statement/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/resources/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/ajs.php
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/avw.php?zoneid=1&cb=INSERT_RANDOM_NUMBER_HERE&a
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/avw.php?zoneid=3&cb=INSERT_RANDOM_NUMBER_HERE&n=af3
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/avw.php?zoneid=5&cb=INSERT_RANDOM_NUMBER_HERE&a
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/avw.php?zoneid=7&cb=INSERT_RANDOM_NUMBER_HERE&a
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/ck.php?n=a695cdb3&cb=INSERT_RANDOM_NUMBER_HERE
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/revive/www/delivery/ck.php?n=a76c993e&cb=INSERT_RANDOM_NUMBER_HERE
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/tag/covid-vaccine/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/terms-of-use/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-admin/admin-ajax.php?action=likebtn_prx
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-admin/admin-ajax.php?action=mercator-sso-js&host=healthimpactne
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-comments-post.php
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/plugins/cloud-search/images/loading.gif)
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/plugins/popupally-new/resource/frontend/img/fancy_close.png
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/plugins/wp-print/images/print.gif
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/themes/Avada/fonts/fontawesome/font-awesome.css
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/themes/Avada/images/shadow-bottom.png);
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/themes/Avada/images/shadow-top.png);
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/themes/Avada/js/excanvas.js
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/themes/Avada/js/html5shiv.js
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/themes/Avada/js/respond.js
Source: imagestore.dat.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2015/09/HIN.ico
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2018/02/Death-certificate-300x199.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2018/02/Death-certificate.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/06/SARS-CoV2-test-is-a-FRAUD.jpg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/06/behind-the-mask.jpg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/07/The-Serpent-and-Medicine.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/07/gottlieb-fda-pfizer-warp-speed-covid
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/08/Health-Impact-News-COVID-Information
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/BitChute.png
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr, feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/Doctors-Warn-COVID-Vaccine.jpg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/Nuclear-Bomb-Explosion-Mushroom-Clou
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/Parler-Icon-White-Logo.png
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/Tiffany-Dover.jpg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/gab-1.png
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/mewe.png
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/pfizer-covid19-vaccine.jpg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/rss-32.png
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Elderly-injections.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Gayle-Released.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Gibraltar-Deaths-COVID-Injections.jp
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Hank-Aaron-Modern-Shot.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/James-CNA-Whistleblower.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Larry-King-Sr.-and-Jr.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Mississippi-Woman-Convulsing-after-P
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/S
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/The-Commons.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/VAERS-1.22-deaths.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/VAERS-COVID-Event-Outcome.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/Washington-Senior-Medical-Kidnapping
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/dead-people-morgue-1.22.21.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/deborah-tilli.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/doctora-monclova-presenta-reacciones
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/elderly-woman-getting-coronavirus-va
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/gregory-michael.jpg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/minds-logo-1.png
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/pemberleyhousecarehome-Deaths2.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/ultra-Orthodox-Jew-receive-COVID-vac
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/wallst-united-1050x525-1-1024x512.jp
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/why-you-should-study-the-Bible.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/CDC-Illegal-COVID-Deaths.pdf
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/CDC-notice.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/Clark-County-Sheriff-Department-Medi
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/Dr.-Bob-Zajac.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/Pregnant-Israeli-woman-getting-Covid
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/Spain-Care-Home-Patients.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/dec_30_2020_CDC_All_deaths.last_.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/image-1-2.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/image-2-1.jpg
Source: feed[1].2.dr	String found in binary or memory: https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/israeli-teenager-vaccinated.jpeg
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-includes/wlwmanifest.xml
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-json/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fhealthimpactnews.com%2F2020%
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://healthimpactnews.com/xmlrpc.php?rsd
Source: feed[1].2.dr	String found in binary or memory: https://ise.media/video/exclusive-medical-board-attempts-to-strip-doctor-of-license-over-informed-va
Source: sdk[1].js0.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: feed[1].2.dr	String found in binary or memory: https://jamanetwork.com/journals/jama/fullarticle/2765837
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://jetpack.wordpress.com/jetpack-comment/?blogid=77516305&postid=65520&comment_regist
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://jetpack.wordpress.com/jetpack-comment/?blogid=77516305&postid=65520&comment_registration=0&r
Source: jquery.validate.min[1].js.2.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: feed[1].2.dr	String found in binary or memory: https://justthenews.com/nation/confirmed-influenza-cases-hit-rock-bottom-amid-rising-covid-numbers
Source: feed[1].2.dr	String found in binary or memory: https://justthenews.com/politics-policy/coronavirus/influenza-levels-continue-cratering-some-cite-co
Source: feed[1].2.dr	String found in binary or memory: https://medalerts.org/vaersdb/findfield.php?EVENTS=on&PAGENO=1&PERPAGE=10&ESORT=&REV
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://medicalkidnap.com/2020/12/24/9-month-old-baby-taken-from-parents-on-routine-traffic-stop-in-
Source: feed[1].2.dr	String found in binary or memory: https://medicalxpress.com/news/2018-12-rna-group-autoimmune-diseases.html
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://mewe.com/i-fro
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://mewe.com/i-front/healthimpactnews
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://mewe.com/i-front/healthimpactnewsDMeWe
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://mewe.com/i/healthimpactnews
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://mewe.com/share?link=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-wa
Source: feed[1].2.dr	String found in binary or memory: https://nationalfile.com/busted-cdc-inflated-covid-numbers-accused-of-violating-federal-law/
Source: feed[1].2.dr	String found in binary or memory: https://nypost.com/2020/05/16/youtube-censors-epidemiologist-knut-wittkowski-for-opposing-lockdown/
Source: feed[1].2.dr	String found in binary or memory: https://off-guardian.org/2020/06/27/covid19-pcr-tests-are-scientifically-meaningless/
Source: feed[1].2.dr	String found in binary or memory: https://off-guardian.org/2020/12/18/who-finally-admits-pcr-tests-create-false-positives/
Source: feed[1].2.dr	String found in binary or memory: https://off-guardian.org/2021/01/25/who-finally-admits-pcr-is-not-a-diagnostic-test/
Source: feed[1].2.dr	String found in binary or memory: https://off-guardian.org/2021/01/31/phantom-virus-in-search-of-sars-cov-2/
Source: feed[1].2.dr	String found in binary or memory: https://off-guardian.org/2021/01/31/phantom-virus-in-search-of-sars-cov-2/#Notes
Source: feed[1].2.dr	String found in binary or memory: https://onlinelibrary.wiley.com/doi/10.1111/ijcp.13795
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://parler.com/profile/HealthImpactNews/posts
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://piwik.org
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: feed[1].2.dr	String found in binary or memory: https://platform.twitter.com/widgets.js
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: sdk[1].js0.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: _static[2].js.2.dr	String found in binary or memory: https://public-api.wordpress.com
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://public-api.wordpress.com/connect/?googleplus-sign-in=https%3A%2F%2Fjetpack.wordpress.com&#03
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://public-api.wordpress.com/connect/?googleplus-sign-in=https%3A%2F%2Fjetpack.wordpress.com&col
Source: feed[1].2.dr	String found in binary or memory: https://pubmed.ncbi.nlm.nih.gov/33113270/
Source: feed[1].2.dr	String found in binary or memory: https://pulitzercenter.org/reporting/suspicions-grow-nanoparticles-pfizers-covid-19-vaccine-trigger-
Source: common[1].js.2.dr	String found in binary or memory: https://rest.s3for.me/bcimg/site/bitchutecheesy.jpg
Source: feed[1].2.dr	String found in binary or memory: https://rumble.com/embedJS/ufs3s9
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://rumble.com/user/HealthImpactNews
Source: feed[1].2.dr	String found in binary or memory: https://rumble.com/vdfofv-community-bands-together-to-rescue-elderly-woman-medically-kidnapped.html
Source: feed[1].2.dr	String found in binary or memory: https://rumble.com/vdhq9x-sheriff-and-washington-hospital-involved-in-medical-kidnapping-of-senior-n
Source: feed[1].2.dr	String found in binary or memory: https://s.w.org/images/core/emoji/12.0.0-1/72x72/1f447.png
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/_static/??-eJyFjc0OwjAMg1
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/_static/??-eJyFyk0KgCAQQOELZaKB0SI6i9UkIzqWP0S3z8B9qwePj98n2wJloMxt4j6s6ICVBFGb
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/_static/??/wp-content/js/jquery/jquery.autoresize.js
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202105
Source: connect[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/wp-content/js/googleplus-sign-in.js?m=1551752381h
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240h
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/wp-content/mu-plugins/highlander-comments/style-ie7.css?m=1351637563h&ver=201
Source: jetpack-comment[1].htm.2.dr	String found in binary or memory: https://s0.wp.com/wp-content/mu-plugins/highlander-comments/style.css?m=1530132353h&cssminify=yes
Source: feed[1].2.dr	String found in binary or memory: https://samueleckert.net/isolate-winter-english/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://schema.org
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/024d035e63b65107f6b2d2e4175c6df9?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/024d035e63b65107f6b2d2e4175c6df9?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/025f1b3f8faaad16c0bb2e91f2868857?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/025f1b3f8faaad16c0bb2e91f2868857?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/0970e0af62cde9eaabbad91c7b4b1657?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/0970e0af62cde9eaabbad91c7b4b1657?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/198c98bb6a95ca9ca731379e5d53443a?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/198c98bb6a95ca9ca731379e5d53443a?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1a427545f668d92460a6c283a0200028?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1a427545f668d92460a6c283a0200028?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1a8d9f04780a3b0a64a9edae4db67fdc?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1a8d9f04780a3b0a64a9edae4db67fdc?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1d3a7adaeae6fad7bb53c7a9171f8208?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1d3a7adaeae6fad7bb53c7a9171f8208?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1f1d0cbef43c54a883b28f8f65ff061e?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/1f1d0cbef43c54a883b28f8f65ff061e?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/21d8087e9ba5e6b49b57551989511666?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/21d8087e9ba5e6b49b57551989511666?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/29af19668ab0eb1ec2224ecdd6ecdeb3?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/29af19668ab0eb1ec2224ecdd6ecdeb3?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/34cd59f4a7a4b2903ce4cf34147a3dad?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/34cd59f4a7a4b2903ce4cf34147a3dad?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/368f19815e1a703fa23bd94302b9bab4?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/368f19815e1a703fa23bd94302b9bab4?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/36937246397ff2b1ac6cc5bb3367b49d?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/36937246397ff2b1ac6cc5bb3367b49d?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/3c59f035475c5403fb7ebbb563dfe4b8?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/3c59f035475c5403fb7ebbb563dfe4b8?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/3e1ed60989d63a425d9b1fbfbae90871?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/3e1ed60989d63a425d9b1fbfbae90871?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/4555f3fb1553866bce9d1c65c1d93e2a?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/4555f3fb1553866bce9d1c65c1d93e2a?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/4ee56cde880fffc708f7c7e233680452?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/4ee56cde880fffc708f7c7e233680452?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/56da5dd2a5793218ecce752909ca5447?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/56da5dd2a5793218ecce752909ca5447?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/611e63414facddf76be8d35eaf8877a6?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/611e63414facddf76be8d35eaf8877a6?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/6267f6851e28c3d41740bc4b9ffc5c7c?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/6267f6851e28c3d41740bc4b9ffc5c7c?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/6c7dacea4464964c727a80c040bf4924?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/6c7dacea4464964c727a80c040bf4924?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/8f31488f2d55868d6f4d9c33c7816390?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/8f31488f2d55868d6f4d9c33c7816390?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/94b52a8f21d8ccb2e9d4a1fa539db520?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/94b52a8f21d8ccb2e9d4a1fa539db520?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/9b54f407360411c8a8b2e3457a194a82?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/9b54f407360411c8a8b2e3457a194a82?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ab82a69ca9fdaba6fb73eb9e5a0c4531?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ab82a69ca9fdaba6fb73eb9e5a0c4531?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b163cd954f902312a2a835af11e3746d?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b163cd954f902312a2a835af11e3746d?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b50d9677fc6f977cffa57a2b333890c6?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b50d9677fc6f977cffa57a2b333890c6?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b86c20072cdf7f0f970115f7b990bbaa?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b86c20072cdf7f0f970115f7b990bbaa?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/b86c20072cdf7f0f970115f7b990bbaa?s=96&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/bb755fd55f355f0d4b9f8bfb7961f152?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/bb755fd55f355f0d4b9f8bfb7961f152?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/bd9d09f4e68282e1024a60d269d91e41?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/bd9d09f4e68282e1024a60d269d91e41?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/eb5ec5d017d872ead92d666e2fb50bbc?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/eb5ec5d017d872ead92d666e2fb50bbc?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/f34a2445d5838796c32421ffa6e71d55?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/f34a2445d5838796c32421ffa6e71d55?s=54&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ffb8847bc1851f150a94c56e3932e6bd?s=108&d=mm&r=g
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/ffb8847bc1851f150a94c56e3932e6bd?s=54&d=mm&r=g
Source: jetpack[1].css.2.dr	String found in binary or memory: https://secure.gravatar.com/images/grav-share-sprite-2x.png);background-size:16px
Source: jetpack[1].css.2.dr	String found in binary or memory: https://secure.gravatar.com/images/grav-share-sprite.png);background-repeat:no-repeat;width:16px;hei
Source: buttons[1].js.2.dr	String found in binary or memory: https://sharethis.com/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/channel_images/HlyeDvlqcVJm/Jc9CHUep4Soko0lNn15axA8k_large.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/channel_images/HlyeDvlqcVJm/Jc9CHUep4Soko0lNn15axA8k_medium.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/channel_images/HlyeDvlqcVJm/Jc9CHUep4Soko0lNn15axA8k_small.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/5aIXPVYuDzJ3_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/98ewCbPEuwFh_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/AzsDIELqhzZFD9RWB7CsCCO2_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/D3nc6rGFkdcA_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/DrpjyOCwrF1S_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/G3LkvUTMWl57_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/H9GyqoPMvfRa_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/H9GyqoPMvfRa_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/HROcFovg5ZWm_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/HdyunOqFgcoH_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/HdyunOqFgcoH_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/IDiH0xxGRcIK_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/IFVeYUExDJzJ_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/NHClntnHh9jU_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/NWQ23HGiYiEzhxoWOYpasgf5_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/PZLBQoi0vD9G_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/PalTTtBJoB8e_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/SpNYlstfRmC6_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/Woa2f26scr0D_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/YoJLKtbksyKv_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/YoJLKtbksyKv_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/bkuCgLKRw9d1_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/cpQ7dnqu0Sos_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/cpQ7dnqu0Sos_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/iGgA0aZ3q3kD_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/ihqFJZmAHPq3_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/ihqFJZmAHPq3_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/jFsuHrwLlTXN_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/jFsuHrwLlTXN_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/kIeJo0ti5JDn_320x180.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/kIeJo0ti5JDn_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/lQ0x4NKxHcYm_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/vJCk0dRuJiAP_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/xL3mXl50f9nE_640x360.jpg
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/ye27RsZlNzly_640x360.jpg
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://status.bitchute.com/
Source: buttons[1].js.2.dr	String found in binary or memory: https://stfb.s3.amazonaws.com/index.htm?i=1170439784&a=22257989976&r=
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/contact/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/cookie/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/guidelines/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/privacy/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/terms/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://support.bitchute.com/policy/terms/#copyright
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: feed[1].2.dr	String found in binary or memory: https://t.co/CGkJxVfzkv
Source: feed[1].2.dr	String found in binary or memory: https://t.co/XwYZhC0zGg
Source: feed[1].2.dr	String found in binary or memory: https://t.co/rW38zfLYGh
Source: feed[1].2.dr	String found in binary or memory: https://theconversation.com/israels-vaccine-rollout-has-been-fast-so-why-is-it-controversial-and-wha
Source: feed[1].2.dr	String found in binary or memory: https://thefreethoughtproject.com/memelords-just-figured-out-how-to-take-back-the-billions-wall-stre
Source: feed[1].2.dr	String found in binary or memory: https://thefreethoughtproject.com/the-internets-war-on-wall-street-did-what-government-could-not-it-
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/AOC?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/AlexBerenson/status/1354196769643622405
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/DrPaulGosar?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/FSCDems?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/FordFischer/status/1354841267788800002?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/RashidaTlaib/status/1354807292667981828?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/RashidaTlaib?ref_src=twsrc%5Etfw
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/i/status/1354844302279667719
Source: styles.31a113577abf67897166[1].css.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/justinamash/status/1354850925068890113?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/laurenboebert/status/1354868931954171905?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/tedcruz/status/1354833603943931905?ref_src=twsrc%5Etfw
Source: feed[1].2.dr	String found in binary or memory: https://twitter.com/tedcruz?ref_src=twsrc%5Etfw
Source: webfont[1].js.2.dr	String found in binary or memory: https://use.typekit.net
Source: feed[1].2.dr	String found in binary or memory: https://vaccineimpact.com/2014/cdc-whistleblower-cdc-covered-up-mmr-vaccine-link-to-autism-in-africa
Source: feed[1].2.dr	String found in binary or memory: https://vaccineimpact.com/2015/can-we-trust-the-cdc-british-medical-journal-reveals-cdc-lies-about-t
Source: feed[1].2.dr	String found in binary or memory: https://vaccineimpact.com/2017/cdc-scientist-whisteblowers-confirm-corruption-within-the-cdc/
Source: feed[1].2.dr	String found in binary or memory: https://vaccineimpact.com/2018/the-cdcs-history-of-research-fraud-regarding-vaccines-and-autism/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://vaccineimpact.com/2020/35000-soldiers-died-from-the-experimental-anthrax-vaccine-more-than-t
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://vaccineimpact.com/2020/dr-judy-mikovits-and-dr-sherri-tenpenny-a-new-covid-vaccine-could-kil
Source: feed[1].2.dr	String found in binary or memory: https://vaccineimpact.com/wp-content/uploads/sites/5/2017/09/CDC-Fraud-Corruption.jpg
Source: feed[1].2.dr	String found in binary or memory: https://vaers.hhs.gov/
Source: frontend[1].js.2.dr	String found in binary or memory: https://w.likebtn.com/js/w/widget.js
Source: _static[1].js0.2.dr	String found in binary or memory: https://widgets.wp.com
Source: jetpack[1].css.2.dr	String found in binary or memory: https://wordpress.com/i/noticons/Noticons.woff)
Source: feed[1].2.dr	String found in binary or memory: https://wordpress.org/?v=5.2.2
Source: apbct-public.min[1].js.2.dr	String found in binary or memory: https://wordpress.org/support/plugin/cleantalk-spam-protect/
Source: feed[1].2.dr	String found in binary or memory: https://www.andrewkaufmanmd.com/bio-credentials/
Source: feed[1].2.dr	String found in binary or memory: https://www.bag.admin.ch/bag/en/home/das-bag/aktuell/medienmitteilungen.msg-id-79584.html
Source: feed[1].2.dr	String found in binary or memory: https://www.bbc.com/news/health-55734257
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.bitchute.c
Source: common[1].js.2.dr	String found in binary or memory: https://www.bitchute.com/
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.bitchute.com/channel/HealthImpactNews/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://www.bitchute.com/channel/HlyeDvlqcVJm/
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr, {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.bitchute.com/embed/H9GyqoPMvfRa/
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.bitchute.com/static/v129/images/android-icon-192x192.png
Source: feed[1].2.dr	String found in binary or memory: https://www.bitchute.com/video/D3nc6rGFkdcA/
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://www.bitchute.com/video/MqfYHV0tzIsZ/
Source: feed[1].2.dr	String found in binary or memory: https://www.bitchute.com/video/v9yWE590K7vL/
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.bitchute.cws.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-v
Source: feed[1].2.dr	String found in binary or memory: https://www.bmj.com/content/371/bmj.m4436
Source: feed[1].2.dr	String found in binary or memory: https://www.bmj.com/content/bmj/371/bmj.m4425.full.pdf
Source: feed[1].2.dr	String found in binary or memory: https://www.bmj.com/content/bmj/371/bmj.m4916.full.pdf
Source: feed[1].2.dr	String found in binary or memory: https://www.cdc.gov/des/consumers/about/history.html
Source: feed[1].2.dr	String found in binary or memory: https://www.cdc.gov/flu/weekly/index.htm
Source: feed[1].2.dr	String found in binary or memory: https://www.cdc.gov/flu/weekly/weeklyarchives2019-2020/Week51.htm
Source: feed[1].2.dr	String found in binary or memory: https://www.cdc.gov/nchs/nvss/covid_weekly/index.htm
Source: feed[1].2.dr	String found in binary or memory: https://www.cdc.gov/nchs/nvss/vsrr/COVID19/index.htm
Source: feed[1].2.dr	String found in binary or memory: https://www.cdc.gov/vaccines/acip/meetings/downloads/slides-2020-12/slides-12-19/05-COVID-CLARK.pdf
Source: feed[1].2.dr	String found in binary or memory: https://www.citizen.org/article/twenty-seven-years-of-pharmaceutical-industry-criminal-and-civil-pen
Source: feed[1].2.dr	String found in binary or memory: https://www.cnbc.com/2021/01/22/pfizer-says-its-covid-vaccine-trial-for-kids-ages-12-to-15-is-fully-
Source: feed[1].2.dr	String found in binary or memory: https://www.collective-evolution.com/2020/12/19/who-calls-into-question-ability-of-rt-pcr-test-to-de
Source: feed[1].2.dr	String found in binary or memory: https://www.corp-research.org/pfizer
Source: feed[1].2.dr	String found in binary or memory: https://www.covid19.admin.ch/de/overview?ovTime=total
Source: feed[1].2.dr	String found in binary or memory: https://www.dailymail.co.uk/health/article-9046363/DR-TOM-JEFFERSON-fear-mania-mass-Covid-testing-hu
Source: feed[1].2.dr	String found in binary or memory: https://www.defense.gov/Explore/Spotlight/Coronavirus/Operation-Warp-Speed/Operation-Warp-Speed-Time
Source: feed[1].2.dr	String found in binary or memory: https://www.digitalrights.org.il/
Source: feed[1].2.dr	String found in binary or memory: https://www.drugwatch.com/manufacturers/pfizer/
Source: feed[1].2.dr	String found in binary or memory: https://www.eurosurveillance.org/content/10.2807/1560-7917.ES.2020.25.3.2000045
Source: feed[1].2.dr	String found in binary or memory: https://www.faz.net/aktuell/wirtschaft/mehr-wirtschaft/schwankende-preise-160-euro-fuer-einen-corona
Source: feed[1].2.dr	String found in binary or memory: https://www.fda.gov/advisory-committees/advisory-committee-calendar/vaccines-and-related-biological-
Source: feed[1].2.dr	String found in binary or memory: https://www.fda.gov/vaccines-blood-biologics/vaccines/emergency-use-authorization-vaccines-explained
Source: feed[1].2.dr	String found in binary or memory: https://www.fluoridefreepeel.ca/fois-reveal-that-health-science-institutions-around-the-world-have-n
Source: feed[1].2.dr	String found in binary or memory: https://www.fuldaerzeitung.de/fulda/corona-pcr-test-mut-rki-robert-koch-institut-berlin-hersteller-t
Source: feed[1].2.dr	String found in binary or memory: https://www.gisaid.org/
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: recaptcha__en[1].js.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: emailsharewidget[1].htm.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6Lf1kbgUAAAAAEzOOExcyJWRNHb80UqEkWRCjyrW&ver=3.0
Source: recaptcha__en[1].js.2.dr, api[1].js0.2.dr, bframe[1].htm.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcGwxYUAAAAADcyYyl7pwAN8cz6u4dgx44nOd9G&co=aHR0
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf1kbgUAAAAAEzOOExcyJWRNHb80UqEkWRCjyrW&co=aHR0
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/bframe?hl=en&v=2Mfykwl2mlvyQZQ3PEgoH710&k=6LcGwxYUAAAAADcyYyl7
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: feed[1].2.dr	String found in binary or memory: https://www.greenmedinfo.com/blog/examining-rfk-jrs-claim-cdc-owns-over-20-vaccine-patents
Source: api[1].js0.2.dr, webworker[1].js0.2.dr, bframe[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/2Mfykwl2mlvyQZQ3PEgoH710/recaptcha__en.js
Source: bframe[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/2Mfykwl2mlvyQZQ3PEgoH710/styles__ltr.css
Source: feed[1].2.dr	String found in binary or memory: https://www.haaretz.com/israel-news/thousands-of-israelis-tested-positive-for-coronavirus-after-firs
Source: feed[1].2.dr	String found in binary or memory: https://www.i24news.tv/en/news/international/1612010348-who-makes-u-turn-on-recommendation-against-c
Source: feed[1].2.dr	String found in binary or memory: https://www.i24news.tv/en/news/israel/1611070395-israel-s-virus-czar-first-dose-of-vaccine-less-effe
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://www.innocraft.com/
Source: uBk4jrxN[1].js.2.dr	String found in binary or memory: https://www.innocraft.com/license
Source: mpJN5sJvczF[2].js.2.dr, sdk[1].js0.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: feed[1].2.dr	String found in binary or memory: https://www.israelnationalnews.com/News/News.aspx/294410
Source: feed[1].2.dr	String found in binary or memory: https://www.israelnationalnews.com/News/News.aspx/294594
Source: feed[1].2.dr	String found in binary or memory: https://www.israelnationalnews.com/News/News.aspx/294852
Source: feed[1].2.dr	String found in binary or memory: https://www.israelnationalnews.com/News/News.aspx/295134
Source: feed[1].2.dr	String found in binary or memory: https://www.israelnationalnews.com/News/News.aspx/296028
Source: feed[1].2.dr	String found in binary or memory: https://www.jpost.com/health-science/antibodies-increase-by-6-to-20-times-after-second-pfizer-dose-s
Source: feed[1].2.dr	String found in binary or memory: https://www.koin.com/local/clark-county/legacy-salmon-creek-clark-county-vancouver-hospital-lockdown
Source: HealthImpactNews[1].htm.2.dr	String found in binary or memory: https://www.lantanalibrary.org/
Source: feed[1].2.dr	String found in binary or memory: https://www.legacyhealth.org/contact-us/email-us
Source: feed[1].2.dr	String found in binary or memory: https://www.legacyhealth.org/doctors-and-locations/hospitals/legacy-salmon-creek-medical-center
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.minds.com/
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.minds.com/healthimpactnews/
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.minds.com/healthimpactnews/XHealt
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.minds.com/healthimpactnews/XHealtRoot
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.minds.com/healthimpactnews/XHealtnt/healthimpactnewsRoot
Source: {8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.minds.com/healthimpactnews/XHealtws.com/feed/tnewsRoot
Source: feed[1].2.dr	String found in binary or memory: https://www.minds.com/newsfeed/1202482280694095872
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.minds.com/static/en/assets/logos/bulb-32x32.png
Source: feed[1].2.dr	String found in binary or memory: https://www.mja.com.au/journal/2020/212/10/isolation-and-rapid-sharing-2019-novel-coronavirus-sars-c
Source: doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	String found in binary or memory: https://www.monsterinsights.com/
Source: feed[1].2.dr	String found in binary or memory: https://www.nature.com/articles/d41586-020-00974-w
Source: feed[1].2.dr	String found in binary or memory: https://www.nature.com/articles/s41467-020-19802-w
Source: feed[1].2.dr	String found in binary or memory: https://www.ncbi.nlm.nih.gov/nucleotide/NC_000008.11?report=genbank&log$=nuclalign&from=6364
Source: feed[1].2.dr	String found in binary or memory: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7151430/pdf/main.pdf
Source: feed[1].2.dr	String found in binary or memory: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7291340/pdf/viruses-12-00571.pdf
Source: feed[1].2.dr	String found in binary or memory: https://www.nejm.org/doi/full/10.1056/NEJM199711133372006
Source: feed[1].2.dr	String found in binary or memory: https://www.nejm.org/doi/full/10.1056/nejmoa2001017
Source: feed[1].2.dr	String found in binary or memory: https://www.nejm.org/doi/pdf/10.1056/NEJMoa2001017?articleTools=true
Source: feed[1].2.dr	String found in binary or memory: https://www.newswars.com/mrna-vaccines-might-prove-catastrophic-in-a-rushed-coronavirus-response/
Source: feed[1].2.dr	String found in binary or memory: https://www.nytimes.com/2021/01/28/health/pregnant-women-covid-vaccines.html
Source: feed[1].2.dr	String found in binary or memory: https://www.nytimes.com/2021/01/29/health/covid-vaccine-pregnancy.html
Source: feed[1].2.dr	String found in binary or memory: https://www.pnas.org/content/117/49/31519
Source: feed[1].2.dr	String found in binary or memory: https://www.publichealthpolicyjournal.com/
Source: feed[1].2.dr	String found in binary or memory: https://www.reddit.com/r/PublicFreakout/comments/l8kevi/antimaskers_denied_entry_into_hospital_by_po
Source: feed[1].2.dr	String found in binary or memory: https://www.rki.de/DE/Content/InfAZ/N/Neuartiges_Coronavirus/Daten/Testzahlen-gesamt.xlsx?__blob=pub
Source: feed[1].2.dr	String found in binary or memory: https://www.rnd.de/politik/bkk-chef-knieps-kritisiert-corona-politik-im-kanzleramt-herrscht-bunkerme
Source: feed[1].2.dr	String found in binary or memory: https://www.rt.com/news/514303-deaths-pfizer-vaccine-covid-spain/
Source: feed[1].2.dr	String found in binary or memory: https://www.srf.ch/news/schweiz/preise-vergleichen-lohnt-sich-coronatest-grosse-unterschiede-fuer-se
Source: feed[1].2.dr	String found in binary or memory: https://www.srf.ch/play/tv/sendung/tagesschau?id=ff969c14-c5a7-44ab-ab72-14d4c9e427a9
Source: feed[1].2.dr	String found in binary or memory: https://www.statnews.com/2020/05/26/moderna-vaccine-candidate-trial-participant-severe-reaction/
Source: feed[1].2.dr	String found in binary or memory: https://www.sun-sentinel.com/news/fl-ne-douglass-mackey-ricky-vaugh-arrest-20210127-ui2xxogekrchtffo
Source: feed[1].2.dr	String found in binary or memory: https://www.tandfonline.com/doi/pdf/10.3402/jev.v4.27066?needAccess=true
Source: feed[1].2.dr	String found in binary or memory: https://www.tasmc.org.il/sites/en/Research/Clinical-Trials/Pages/Helsinki.aspx
Source: feed[1].2.dr	String found in binary or memory: https://www.telegraph.co.uk/news/2021/01/26/israeli-teenagers-flock-covid-vaccine-clinics-bid-save-e
Source: feed[1].2.dr	String found in binary or memory: https://www.thegatewaypundit.com/2021/01/medical-kidnapping-hospital-refuses-let-daughter-see-elderl
Source: feed[1].2.dr	String found in binary or memory: https://www.thelancet.com/action/showPdf?pii=S2666-5247%2820%2930172-5
Source: feed[1].2.dr	String found in binary or memory: https://www.timesofisrael.com/experts-urge-dose-of-transparency-as-medical-data-traded-to-pfizer-for
Source: feed[1].2.dr	String found in binary or memory: https://www.timesofisrael.com/liveblog_entry/who-recommends-against-pregnant-women-getting-moderna-v
Source: feed[1].2.dr	String found in binary or memory: https://www.timesofisrael.com/virus-czar-with-covid-19-mutations-third-lockdown-may-not-be-israels-l
Source: feed[1].2.dr	String found in binary or memory: https://www.who.int/docs/default-source/coronaviruse/real-time-rt-pcr-assays-for-the-detection-of-sa
Source: feed[1].2.dr	String found in binary or memory: https://www.who.int/news-room/feature-stories/detail/the-moderna-covid-19-mrna-1273-vaccine-what-you
Source: feed[1].2.dr	String found in binary or memory: https://www.who.int/news-room/feature-stories/detail/who-can-take-the-pfizer-biontech-covid-19
Source: feed[1].2.dr	String found in binary or memory: https://www.who.int/news-room/feature-stories/detail/who-can-take-the-pfizer-biontech-covid-19--vacc
Source: feed[1].2.dr	String found in binary or memory: https://www.who.int/publications/i/item/WHO-2019-nCoV-vaccines-SAGE_recommendation-BNT162b2-2021.1
Source: feed[1].2.dr	String found in binary or memory: https://www.wiwo.de/technologie/forschung/virologe-drosten-im-gespraech-2014-die-who-kann-nur-empfeh
Source: feed[1].2.dr	String found in binary or memory: https://www.wsj.com/articles/who-recommends-against-moderna-pfizer-vaccines-for-most-pregnant-women-
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/embed/Z5JSmSubwEw?feature=oembed
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/embed/d-jXrvszvzo?feature=oembed
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/watch?v=0tNc9oeojaw
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/watch?v=N7VOpY4ZSME
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/watch?v=X5LzpXJc-Ds
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/watch?v=kANkpqtWLN4
Source: feed[1].2.dr	String found in binary or memory: https://www.youtube.com/watch?v=sSBQUIEUbQ8
Source: feed[1].2.dr	String found in binary or memory: https://wwwnc.cdc.gov/eid/article/26/6/20-0516_article
Source: feed[1].2.dr	String found in binary or memory: https://youtu.be/ac2GEtYMshw
Source: clipboard.min[1].js.2.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.32:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.32:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.26.29.255:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.26.29.255:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.15.156:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.15.156:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.238.30:443 -> 192.168.2.3:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.238.30:443 -> 192.168.2.3:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.50:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.50:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.196.106.79:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.196.106.79:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.35:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.6.35:443 -> 192.168.2.3:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.180.5:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.163.180.5:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.32:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.32:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.59.220.196:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.59.220.196:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.187.126.2:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.187.126.2:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.72.191:443 -> 192.168.2.3:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.15.69:443 -> 192.168.2.3:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.72.191:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.3:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.23:443 -> 192.168.2.3:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.78.23:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.51:443 -> 192.168.2.3:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.51:443 -> 192.168.2.3:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.191.156.9:443 -> 192.168.2.3:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.35:443 -> 192.168.2.3:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.35:443 -> 192.168.2.3:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.35:443 -> 192.168.2.3:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.122.96:443 -> 192.168.2.3:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.122.96:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.232.233.228:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.232.233.228:443 -> 192.168.2.3:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.116:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.116:443 -> 192.168.2.3:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.194.116:443 -> 192.168.2.3:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.22:443 -> 192.168.2.3:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.93.22:443 -> 192.168.2.3:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.37.62:443 -> 192.168.2.3:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.31.37.62:443 -> 192.168.2.3:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.132.64:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.154.132.64:443 -> 192.168.2.3:49845 version: TLS 1.2

System Summary:

Source: classification engine

Classification label: clean1.win@3/441@41/29

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF747B3734364C5F60.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Drive-by Compromise1	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	1%	Virustotal		Browse
https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
l.sharethis.mgr.consensu.org	0%	Virustotal	Browse
media.gab.com	0%	Virustotal	Browse
httplogserver-lb.global.unified-prod.sharethis.net	0%	Virustotal	Browse
api.sharetrackr.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://postmessage.freebaseapps.com)	0%	Avira URL Cloud	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
http://farukat.es/	0%	Avira URL Cloud	safe
https://medalerts.org/vaersdb/findfield.php?EVENTS=on&PAGENO=1&PERPAGE=10&ESORT=&REV	0%	Avira URL Cloud	safe
http://metaweb.com	0%	Avira URL Cloud	safe
https://www.innocraft.com/license	0%	Avira URL Cloud	safe
https://created4health.org/make-reading-the-bible-a-new-year-resolution-it-could-change-your-life/	0%	Avira URL Cloud	safe
https://created4health.org/unmasking-who-is-behind-the-plandemic-and-rioting-to-usher-in-the-new-wor	0%	Avira URL Cloud	safe
http://www.2meter3.de/code/hoverFlow/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
secure.gravatar.com	192.0.73.2	true	false		high
1.gravatar.com	192.0.73.2	true	false		high
healthimpactnews.com	54.191.156.9	true	false		high
l.sharethis.mgr.consensu.org	18.196.106.79	true	false	0%, Virustotal, Browse	unknown
medicalkidnap.com	54.191.156.9	true	false		high
0.gravatar.com	192.0.73.2	true	false		high
media.gab.com	104.16.121.96	true	false	0%, Virustotal, Browse	unknown
pv.likebtn.com	104.26.15.69	true	false		high
bcimg.b-cdn.net	185.59.220.196	true	false		high
scontent.xx.fbcdn.net	185.60.216.19	true	false		high
mewe.com	52.31.37.62	true	false		high
httplogserver-lb.global.unified-prod.sharethis.net	18.195.238.30	true	false	0%, Virustotal, Browse	unknown
commentfreely.bitchute.com	104.26.7.35	true	false		high
cdnjs.cloudflare.com	104.16.19.94	true	false		high
d1wttixtkwe5qj.cloudfront.net	143.204.93.51	true	false		high
campaigns.healthimpactnews.com	52.26.29.255	true	false		high
w.likebtn.com	104.26.15.69	true	false		high
wi.likebtn.com	172.67.72.191	true	false		high
api.sharetrackr.com	35.163.180.5	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	185.60.216.35	true	false		high
nydc1.outbrain.org	70.42.32.127	true	false		unknown
stats.l.doubleclick.net	108.177.15.156	true	false		high
www.minds.com	34.232.233.228	true	false		high
jetpack.wordpress.com	192.0.78.32	true	false		high
secure.mewe.com	54.154.132.64	true	false		high
vaccineimpact.com	54.191.156.9	true	false		high
cdn-assets.minds.com	13.224.194.116	true	false		high
d3mdrpbbs8qfxa.cloudfront.net	13.224.194.50	true	false		high
cdn.minds.com	143.204.93.22	true	false		high
www.bitchute.com	104.26.6.35	true	false		high
gab.com	104.16.122.96	true	false		unknown
public-api.wordpress.com	192.0.78.23	true	false		high
s0.wp.com	192.0.77.32	true	false		high
seed132.bitchute.com	192.187.126.2	true	false		high
s.w.org	192.0.77.48	true	false		high
amplify.outbrain.com	unknown	unknown	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
static-3.bitchute.com	unknown	unknown	false		high
stats.g.doubleclick.net	unknown	unknown	false		high
cdn.polyfill.io	unknown	unknown	false		high
code.jquery.com	unknown	unknown	false		high
cdn.mewe.com	unknown	unknown	false		high
cdn.onenote.net	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
l.sharethis.com	unknown	unknown	false		high
ws.sharethis.com	unknown	unknown	false		high
tr.outbrain.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.bitchute.com/channel/HealthImpactNews/	false		high
https://mewe.com/i-front/healthimpactnews	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/kIeJo0ti5JDn_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css	HealthImpactNews[1].htm.2.dr	false		high
https://www.who.int/news-room/feature-stories/detail/who-can-take-the-pfizer-biontech-covid-19	feed[1].2.dr	false		high
https://healthimpactnews.com/author/brian/#author	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/minds-logo-1.png	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://secure.gravatar.com/avatar/b86c20072cdf7f0f970115f7b990bbaa?s=54&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/ihqFJZmAHPq3_320x180.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://www.monsterinsights.com/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://cdnjs.cloudflare.com/ajax/libs/wow/1.1.2/wow.min.js	HealthImpactNews[1].htm.2.dr	false		high
https://off-guardian.org/2021/01/31/phantom-virus-in-search-of-sars-cov-2/#Notes	feed[1].2.dr	false		high
https://onlinelibrary.wiley.com/doi/10.1111/ijcp.13795	feed[1].2.dr	false		high
https://www.statnews.com/2020/05/26/moderna-vaccine-candidate-trial-participant-severe-reaction/	feed[1].2.dr	false		high
https://www.thelancet.com/action/showPdf?pii=S2666-5247%2820%2930172-5	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/Doctors-Warn-COVID-Vaccine.jpg	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr, feed[1].2.dr	false		high
https://secure.gravatar.com/avatar/b86c20072cdf7f0f970115f7b990bbaa?s=96&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://healthimpactnews.com/2020/florida-female-officer-in-full-riot-gear-forces-mom-and-small-chil	HealthImpactNews[1].htm.2.dr	false		high
https://cdnjs.cloudflare.com/ajax/libs/css-element-queries/1.2.3/ElementQueries.min.js	HealthImpactNews[1].htm.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/G3LkvUTMWl57_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://cdn.jsdelivr.net/npm/p2p-media-loader-core	HealthImpactNews[1].htm.2.dr	false		high
http://postmessage.freebaseapps.com)	_static[1].js0.2.dr	false	Avira URL Cloud: safe	low
https://vaccineimpact.com/2018/the-cdcs-history-of-research-fraud-regarding-vaccines-and-autism/	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/VAERS-COVID-Event-Outcome.jpg	feed[1].2.dr	false		high
https://www.internalfb.com/intern/invariant/	mpJN5sJvczF[2].js.2.dr, sdk[1].js0.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://healthimpactnews.com/category/medicine-watch/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://secure.gravatar.com/avatar/eb5ec5d017d872ead92d666e2fb50bbc?s=54&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	main[1].js.2.dr, _static[2].js.2.dr	false		high
https://www.collective-evolution.com/2020/12/19/who-calls-into-question-ability-of-rt-pcr-test-to-de	feed[1].2.dr	false		high
https://healthimpactnews.com/2021/55-americans-have-died-following-mrna-covid-injections-as-norway-d	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/pemberleyhousecarehome-Deaths2.jpg	feed[1].2.dr	false		high
https://mewe.com/share?link=https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-wa	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
http://getbootstrap.com/javascript/#tooltip	main[1].js.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/PalTTtBJoB8e_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/vJCk0dRuJiAP_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/lQ0x4NKxHcYm_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://www.faz.net/aktuell/wirtschaft/mehr-wirtschaft/schwankende-preise-160-euro-fuer-einen-corona	feed[1].2.dr	false		high
http://getbootstrap.com)	main[1].js.2.dr, bootstrap.min[1].js.2.dr	false	Avira URL Cloud: safe	low
https://secure.gravatar.com/avatar/29af19668ab0eb1ec2224ecdd6ecdeb3?s=54&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://support.bitchute.com/policy/guidelines/	HealthImpactNews[1].htm.2.dr	false		high
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7151430/pdf/main.pdf	feed[1].2.dr	false		high
http://farukat.es/	main[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.gravatar.com/images/grav-share-sprite.png);background-repeat:no-repeat;width:16px;hei	jetpack[1].css.2.dr	false		high
https://healthimpactnews.com/wp-content/plugins/cloud-search/images/loading.gif)	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://secure.gravatar.com/avatar/4555f3fb1553866bce9d1c65c1d93e2a?s=108&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://medalerts.org/vaersdb/findfield.php?EVENTS=on&PAGENO=1&PERPAGE=10&ESORT=&REV	feed[1].2.dr	false	Avira URL Cloud: safe	unknown
http://metaweb.com	_static[1].js0.2.dr	false	Avira URL Cloud: safe	unknown
https://healthimpactnews.com/covid-testing-information/	feed[1].2.dr	false		high
https://www.youtube.com/watch?v=X5LzpXJc-Ds	feed[1].2.dr	false		high
https://healthimpactnews.com/about-health-impact-news/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://www.bmj.com/content/371/bmj.m4436	feed[1].2.dr	false		high
http://vaccineimpact.com	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/AzsDIELqhzZFD9RWB7CsCCO2_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/S	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2021/01/wallst-united-1050x525-1-1024x512.jp	feed[1].2.dr	false		high
http://themeforest.net/user/ThemeFusion	style[1].css1.2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2021/02/Dr.-Bob-Zajac.jpg	feed[1].2.dr	false		high
https://secure.gravatar.com/avatar/bb755fd55f355f0d4b9f8bfb7961f152?s=54&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
http://www.modernizr.com/)	main[1].js.2.dr	false		high
https://www.innocraft.com/license	uBk4jrxN[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://healthimpactnews.com/2020/censored-dr-kaufman-they-want-to-genetically-modify-us-with-covid-	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://healthimpactnews.com/2021/community-bands-together-to-rescue-elderly-woman-medically-kidnapp	HealthImpactNews[1].htm.2.dr	false		high
https://healthimpactnews.com/2021/24-residents-dead-in-3-weeks-as-one-third-of-uk-nursing-home-resid	HealthImpactNews[1].htm.2.dr	false		high
http://portal.unesco.org/en/ev.php-URL_ID=31058&URL_DO=DO_TOPIC&URL_SECTION=201.html	feed[1].2.dr	false		high
https://www.israelnationalnews.com/News/News.aspx/294852	feed[1].2.dr	false		high
https://www.timesofisrael.com/virus-czar-with-covid-19-mutations-third-lockdown-may-not-be-israels-l	feed[1].2.dr	false		high
https://www.wiwo.de/technologie/forschung/virologe-drosten-im-gespraech-2014-die-who-kann-nur-empfeh	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fhealthimpactnews.com%2F2020%	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://healthimpactnews.com/resources/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://secure.gravatar.com/avatar/025f1b3f8faaad16c0bb2e91f2868857?s=54&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://created4health.org/make-reading-the-bible-a-new-year-resolution-it-could-change-your-life/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://clark.wa.gov/sheriff	feed[1].2.dr	false		high
https://healthimpactnews.com/category/real-food-nutrition/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	main[1].js.2.dr	false		high
http://healthimpactnews.com/category/alternative-health/	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
http://colorzilla.com/gradient-editor/#141414	kgvid_styles[1].css.2.dr	false		high
https://created4health.org/unmasking-who-is-behind-the-plandemic-and-rioting-to-usher-in-the-new-wor	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/RashidaTlaib/status/1354807292667981828?ref_src=twsrc%5Etfw	feed[1].2.dr	false		high
https://www.minds.com/healthimpactnews/XHealtnt/healthimpactnewsRoot	{8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	false		high
https://medicalkidnap.com/2020/12/24/9-month-old-baby-taken-from-parents-on-routine-traffic-stop-in-	HealthImpactNews[1].htm.2.dr	false		high
https://wordpress.com/i/noticons/Noticons.woff)	jetpack[1].css.2.dr	false		high
https://www.youtube.com/embed/Z5JSmSubwEw?feature=oembed	feed[1].2.dr	false		high
https://secure.gravatar.com/avatar/3c59f035475c5403fb7ebbb563dfe4b8?s=54&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://campaigns.healthimpactnews.com	generate[1].js.2.dr	false		high
https://jamanetwork.com/journals/jama/fullarticle/2765837	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-content/uploads/sites/2/2020/12/Tiffany-Dover.jpg	feed[1].2.dr	false		high
https://healthimpactnews.com/wp-content/themes/Avada/images/shadow-bottom.png);	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://stfb.s3.amazonaws.com/index.htm?i=1170439784&a=22257989976&r=	buttons[1].js.2.dr	false		high
https://rest.s3for.me/bcimg/site/bitchutecheesy.jpg	common[1].js.2.dr	false		high
https://healthimpactnews.com/revive/www/delivery/avw.php?zoneid=3&cb=INSERT_RANDOM_NUMBER_HERE&n=af3	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://github.com/bas2k/jquery.appear/	main[1].js.2.dr	false		high
https://healthimpactnews.com/revive/www/delivery/avw.php?zoneid=7&cb=INSERT_RANDOM_NUMBER_HERE&a	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
http://codepen.io/heff/pen/EarCt/left/?editors=010	kg-video-js-skin[1].css.2.dr	false		high
https://secure.gravatar.com/avatar/b50d9677fc6f977cffa57a2b333890c6?s=108&d=mm&r=g	doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine[1].htm.2.dr	false		high
https://github.com/jquery/jquery-ui/blob/master/ui/jquery.ui.widget.js	main[1].js.2.dr	false		high
https://jetpack.wordpress.com/jetpack-comment/?blogid=77516305&postid=65520&comment_registration=0&r	{8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat.1.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/H9GyqoPMvfRa_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
https://static-3.bitchute.com/live/cover_images/HlyeDvlqcVJm/Woa2f26scr0D_640x360.jpg	HealthImpactNews[1].htm.2.dr	false		high
http://www.2meter3.de/code/hoverFlow/	main[1].js.2.dr	false	Avira URL Cloud: safe	unknown
http://www.infinite-scroll.com/changelog/comment-page-1/#comment-127	main[1].js.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
108.177.15.156	unknown	United States	15169	GOOGLEUS	false
143.204.93.51	unknown	United States	16509	AMAZON-02US	false
34.232.233.228	unknown	United States	14618	AMAZON-AESUS	false
18.196.106.79	unknown	United States	16509	AMAZON-02US	false
192.187.126.2	unknown	United States	33387	NOCIXUS	false
104.26.7.35	unknown	United States	13335	CLOUDFLARENETUS	false
192.0.77.48	unknown	United States	2635	AUTOMATTICUS	false
54.154.132.64	unknown	United States	16509	AMAZON-02US	false
13.224.194.116	unknown	United States	16509	AMAZON-02US	false
104.26.15.69	unknown	United States	13335	CLOUDFLARENETUS	false
35.163.180.5	unknown	United States	16509	AMAZON-02US	false
192.0.78.32	unknown	United States	2635	AUTOMATTICUS	false
70.42.32.127	unknown	United States	22075	AS-OUTBRAINUS	false
172.67.72.191	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.122.96	unknown	United States	13335	CLOUDFLARENETUS	false
185.59.220.196	unknown	United Kingdom	60068	CDN77GB	false
143.204.93.22	unknown	United States	16509	AMAZON-02US	false
54.191.156.9	unknown	United States	16509	AMAZON-02US	false
192.0.73.2	unknown	United States	2635	AUTOMATTICUS	false
104.26.6.35	unknown	United States	13335	CLOUDFLARENETUS	false
185.60.216.35	unknown	Ireland	32934	FACEBOOKUS	false
52.26.29.255	unknown	United States	16509	AMAZON-02US	false
185.60.216.19	unknown	Ireland	32934	FACEBOOKUS	false
192.0.78.23	unknown	United States	2635	AUTOMATTICUS	false
192.0.77.32	unknown	United States	2635	AUTOMATTICUS	false
52.31.37.62	unknown	United States	16509	AMAZON-02US	false
18.195.238.30	unknown	United States	16509	AMAZON-02US	false
13.224.194.50	unknown	United States	16509	AMAZON-02US	false
104.16.19.94	unknown	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	348698
Start date:	04.02.2021
Start time:	14:50:46
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 16m 23s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	40
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@3/441@41/29
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://www.bitchute.com/channel/HealthImpactNews/ Browsing link: https://gab.com/HealthImpactNews Browsing link: https://www.minds.com/healthimpactnews/ Browsing link: https://mewe.com/i/healthimpactnews Browsing link: http://healthimpactnews.com/feed/
Warnings:	Show All Max analysis timeout: 720s exceeded, the analysis took too long TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, RuntimeBroker.exe, Microsoft.Photos.exe, backgroundTaskHost.exe, UsoClient.exe, audiodg.exe, BackgroundTransferHost.exe, ielowutil.exe, WMIADAP.exe, MusNotifyIcon.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 104.43.139.144, 168.61.161.212, 88.221.62.148, 104.43.193.48, 216.58.207.164, 142.250.186.78, 23.210.250.44, 172.217.23.74, 172.217.20.234, 172.217.23.67, 151.101.2.109, 151.101.66.109, 151.101.130.109, 151.101.194.109, 93.184.221.240, 172.217.20.227, 209.197.3.24, 23.210.248.85, 152.199.19.161, 17.253.55.202, 17.253.55.206, 20.190.137.75, 20.190.137.96, 40.126.9.77, 20.190.137.73, 20.190.137.6, 20.190.137.69, 40.126.9.66, 20.190.137.10, 51.103.5.159, 51.11.168.160, 92.122.213.194, 92.122.213.247, 84.53.167.113, 2.17.179.193, 20.54.26.129, 52.155.217.156, 20.190.159.136, 40.126.31.6, 40.126.31.143, 20.190.159.134, 20.190.159.132, 40.126.31.141, 40.126.31.8, 40.126.31.137, 20.49.150.241 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, devimages-cdn.apple.com, cds.s5x3j6q5.hwcdn.net, arc.msn.com.nsatc.net, www.tm.lg.prod.aadmsa.akadns.net, fs-wildcard.microsoft.com.edgekey.net, wns.notify.windows.com.akadns.net, www.tm.a.prd.aadg.trafficmanager.net, cdn.onenote.net.edgekey.net, vip1-par02p.wns.notify.trafficmanager.net, e11290.dspg.akamaiedge.net, ams2.next.a.prd.aadg.trafficmanager.net, login.live.com, emea1.wns.notify.trafficmanager.net, wildcard.weather.microsoft.com.edgekey.net, audownload.windowsupdate.nsatc.net, hlb.apr-52dd2-0.edgecastdns.net, www.google.com, watson.telemetry.microsoft.com, www.gstatic.com, au-bg-shim.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, ajax.googleapis.com, ris-prod.trafficmanager.net, displaycatalog.md.mp.microsoft.com.akadns.net, skypedataprdcolcus17.cloudapp.net, skypedataprdcolcus16.cloudapp.net, wildcard.outbrain.com.edgekey.net, skypedataprdcolcus15.cloudapp.net, settingsfd-geo.trafficmanager.net, ris.api.iris.microsoft.com, devimages-cdn.origin-apple.com.akadns.net, blobcollector.events.data.trafficmanager.net, e10883.g.akamaiedge.net, e1553.dspg.akamaiedge.net, dub2.next.a.prd.aadg.trafficmanager.net, cs9.wpc.v0cdn.net, www.tm.lg.prod.aadmsa.trafficmanager.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, e15275.g.akamaiedge.net, wu.azureedge.net, arc.msn.com, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, go.microsoft.com, cs11.wpc.v0cdn.net, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, wu.wpc.apr-52dd2.edgecastdns.net, prod.fs.microsoft.com.akadns.net, dualstack.f3.shared.global.fastly.net, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, client.wns.windows.com, www-google-analytics.l.google.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, wu.ec.azureedge.net, tile-service.weather.microsoft.com, ctldl.windowsupdate.com, e1723.g.akamaiedge.net, settings-win.data.microsoft.com, login.msa.msidentity.com, go.microsoft.com.edgekey.net, world-gen.g.aaplimg.com Report size exceeded maximum capacity and may have missing behavior information. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtWriteFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Microsoft Cabinet archive data, 59134 bytes, 1 file
Category:	dropped
Size (bytes):	118268
Entropy (8bit):	7.995450161616763
Encrypted:	true
SSDEEP:	1536:R695NkJMM0/7laXXHAQHQaYfwlmz8efIqigYDf5695NkJMM0/7laXXHAQHQaYfwZ:RN7MlanAQwEIztTmN7MlanAQwEIztTk
MD5:	07E57ED8F424B6844043384CEB8C02CE
SHA1:	4C651F642CEB41785F5E9F5E17A0CCCE6949F8BD
SHA-256:	E8AC8D93636D33F60C7D99AA2A5455EAB4A0F9CBC67A897BBE1FC3EAB6DBF28A
SHA-512:	3F9CBFF0384DD2409D5CB861327C227ADE023D8F65FA2665E87BF435649A613436EB4C37813CF830A32E623AECB417543D81C052A2B00E411587D0AAB3AB248A
Malicious:	false
Reputation:	low
Preview:	MSCF............,...................I........T.........R.. .authroot.stl.ym&7.5..CK..8T....c_.d...:.(.....].M$[v.4.).E.$7I.....e..Y..Rq...3.n..u..............\|..=H....&..1.1..f.L..>e.6....F8.X.b.1$,.a...n-......D..a....[.....i,+.+..<.b._#...G..U.....n..21pa..>.32..Y..j...;Ay........n/R... ._.+..<...Am.t.<. ..V..y`.yO..e@../...<#..#......dju..B......8..H'..lr.....l.I6/..d.].xIX<...&U...GD..Mn.y&.[<(tk.....%B.b;./..`.#h....C.P...B..8d.F...D.k........... 0..w...@(.. @K....?.)ce........\.\......l......Q.Qd..+...@.X..##3..M.d..n6.....p1..)...x0V...ZK.{...{.=#h.v.).....b.....[...L..c..a..,...E5X..i.d..w.....#o+.........X.P...k...V.$...X.r.e....9E.x..=\...Km.......B...Ep...xl@@c1.....p?...d.{EYN.K.X>D3..Z..q.] .Mq.........L.n}........+/l\.cDB0.'.Y...r.[.........vM...o.=....zK..r..l..>B....U..3....Z...ZjS...wZ.M...IW;..e.L...zC.wBtQ..&.Z.Fv+..G9.8..!..\T:K`......m.........9T.u..3h.....{...d[...@...Q.?..p.e.t[.%7..........^.....s.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	656
Entropy (8bit):	3.077594577114233
Encrypted:	false
SSDEEP:	12:m3kPlE99SNxAhUeo+aKg3kPlE99SNxAhUeo+aKt:AkPcUQUj+aKqkPcUQUj+aKt
MD5:	63521E8525718B93BE7AF04318B06F15
SHA1:	4D82F163CC2FA9EEE21268910A4B78F8F08D283B
SHA-256:	386C007AEBF9ABA91671638FF4E92DA7D3E977C4D83ECBBAAA1664A301C88118
SHA-512:	BAF3CEF1C9EF946DB0BF928409FA83C8A36FD8482C7D6BC601B077828FBFE11AAC4464D114A1E5FBC46983639E2493E64B8F1F2DB663BA81A0BC627266B623F5
Malicious:	false
Reputation:	low
Preview:	p...... ........e.KTH...(....................................................... ..................&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.e.b.b.a.e.1.d.7.e.a.d.6.1.:.0."...p...... ........e.KTH...(....................................................... ..................&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.e.b.b.a.e.1.d.7.e.a.d.6.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\EQTVYJSG\mewe[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	low
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\K087VR2D\healthimpactnews[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	39
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aK1r0aK1r0aKb:JFK1rFK1rFKb
MD5:	B9C5EB570521110110BB7DFF12AF780D
SHA1:	27F5BEBC2200FD8D0B51A93D1357EA954BE44079
SHA-256:	90171F10A6467C9DC31143859BAB69D045B67B39E2E49D92BB7168B383C4D1AB
SHA-512:	BC81539E62D643808CBDA3D86050058F379B2F0347CE65CBBA9797D386401C886B22AC4C0B2BE68197AE10C83A1E22A14232CD531C8D139DD3C031DB423EA355
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\OCP9V3F5\www.google[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	946
Entropy (8bit):	5.6621216081208425
Encrypted:	false
SSDEEP:	24:WUY8VUY8Mw4VUY8Mw46Z/vauz0gpmfZVUY8b:L323N423N46hauQO823b
MD5:	D813F541F60092F9C00E1860BDE6D87E
SHA1:	477224EABA6953C9456BB6BE1838374BDDA438D0
SHA-256:	4F5C7E60E9433F4656741268C3BBAABCC0E1F713CB93F81DD9AE850FD3D98CA0
SHA-512:	C523B08E7B93BFF124A98206627BB13A1E9BADD81E3E06DBA9C8C5C9EEA92F8E1AFE41F388219814A98E23FAE6D3354650CE3D200BEB653EDA3F6620AA8F2147
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="rc::a" value="MWw4ajgycTN1eGR4dg==" ltime="1444654592" htime="30866248" /></root><root><item name="rc::a" value="MWw4ajgycTN1eGR4dg==" ltime="1444654592" htime="30866248" /><item name="rc::d-1612479116658" value="MWdxMjFsbXZ1OWhwYw==" ltime="1456494592" htime="30866248" /></root><root><item name="rc::a" value="MWw4ajgycTN1eGR4dg==" ltime="1444654592" htime="30866248" /><item name="rc::d-1612479116658" value="MWdxMjFsbXZ1OWhwYw==" ltime="1456494592" htime="30866248" /><item name="rc::d-1612479116658-66e98b3c" value="ChNyYzo6ZC0xNjEyNDc5MTE2NjU4EAAaCDAwNzljYmUwIpIBCokBYmR4WnpZV3UzZDczdlJHZlpMYTNwOWVfRVlrS3h3cGxnZFdYbHJUaHdLVHByU0FoaVMydGNKQ1VqSVRBdnZtZ3daRDV6RmlsRExTcXFyVEJJU1dvSzlHcFNMU3RrT0lSdk5ETXlkTVI2MDdvV2VXaENhWHBwR1c4X044UnY2U3BzRkdQb3JTOWgQgoHLswIqAjFy" ltime="1461544592" htime="30866248" /></root><root><item name="rc::a" value="MWw4ajgycTN1eGR4dg==" ltime="1444654592" htime="30866248" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\SPP2NMHF\www.bitchute[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5949
Entropy (8bit):	4.944107002907682
Encrypted:	false
SSDEEP:	96:ljENKIR6RZIR6R67W5ahgLIXvcwoMySSPsSOvhfKF5akjb:RER6RiR6R+2aejwoMbUQKakX
MD5:	2C33176384617F7FBCFDEE791F427E98
SHA1:	BC6DBE7ACBE5B69BDF2EC84D6101DF6EDE32BFE6
SHA-256:	137229713580620055C0DFACEA82FAE99B805BFED1B81853D5A34C408440C0A7
SHA-512:	6DBB3F9401866B44B3A7D9B25F7CD577D801697A594F3798319614CFCF59D59292F1E156B2DABC1D03513FA951C557B075A77897EDE46B5637683A8934EDEE81
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root><root></root><root><item name="cache-sprite-plyr" value="{"content":"<?xml version=\"1.0\" encoding=\"UTF-8\"?><!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\" \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\"><svg xmlns=\"http://www.w3.org/2000/svg\"><symbol id=\"plyr-airplay\" viewBox=\"0 0 18 18\"><path d=\"M16 1H2a1 1 0 0 0-1 1v10a1 1 0 0 0 1 1h3v-2H3V3h12v8h-2v2h3a1 1 0 0 0 1-1V2a1 1 0 0 0-1-1z\"/><path d=\"M4 17h10l-5-6z\"/></symbol><symbol id=\"plyr-captions-off\" viewBox=\"0 0 18 18\"><path d=\"M1 1c-.6 0-1 .4-1 1v11c0 .6.4 1 1 1h4.6l2.7 2.7c.2.2.4.3.7.3.3 0 .5-.1.7-.3l2.7-2.7H17c.6 0 1-.4 1-1V2c0-.6-.4-1-1-1H1zm4.52 10.15c1.99 0 3.01-1.32 3.28-2.41l-1.29-.39c-.19.66-.78 1.45-1.99 1.45-1.14 0-2.2-.83-2.2-2.34 0-1.61 1.12-2.37 2.18-2.37 1.23 0 1.78.75 1.95 1.43l1.3-.41C8.47 4.96 7.46

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8CFC7D20-673B-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8596335488891553
Encrypted:	false
SSDEEP:	96:ruZ6PZwu2xL9WM6QtM3fMFFMM8VM2M3fMnsX:ruZ6PZwu2xL9WBQtOf6FMZV12fQsX
MD5:	C4C0344459C48546B0AEE6F19F69DA87
SHA1:	6E11BC590E43940E48A2460A7C653647D46A5BE9
SHA-256:	DC27E83F92CBB55E747256C77B331B6D65AF45EB5EF15508EC979482018269D1
SHA-512:	76AB0E7C9DC4E16DF6443EC4B0B78518EB41E169167E293B1B0B7102B5B9EC1D6E0CE26D43AE5AA815F44D763B1E31093346D0EC27ABAA486AE7C0FFD3AA56E5
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8CFC7D22-673B-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	173876
Entropy (8bit):	3.4578769615716967
Encrypted:	false
SSDEEP:	768:Y9oWC2WeQr4oW0rVsreQXzc/4oW0rVsreQXzcLR:YerL+CL+yR
MD5:	42749AABA655D1B69E02154D5887F606
SHA1:	D46EAA599CCD1CBCCBE6B49F61E722CFB42C5198
SHA-256:	47422838605F84738765975588102780918809B49E447793A8B75DC3A9C92E01
SHA-512:	4892869AFE2EC6EAF498DCCA35CB71E178942ED9596108E39CA1CDA58869CBDCB19B21F85FFE1546D440E0682923DA08923C4872AC45DB704105571431F4E5E5
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{984764C1-673B-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5666473786621173
Encrypted:	false
SSDEEP:	48:IwuGcprvGwpaQG4pQeGrapbSQrGQpKmG7HpRWsTGIpG:ryZZQQ6QBSQFARTW4A
MD5:	37BC820F140D3148E8C5C04256FD8F5D
SHA1:	78B50AF3E5733EF5C18DEC78F04697B876FE700E
SHA-256:	CEE9E717A8AFA6E8BB8ECAE90E2E6194F32DC34EAA24DC0346FA86DDF9CD347A
SHA-512:	D5EB3F844E1FF6399C00F603DE08DC066196415FF30774CDC29665706869D483C74A0F1F44E51E60A9244A57B5B860B357D693040CF2A22BB37FA753D5F75DF1
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	modified
Size (bytes):	40153
Entropy (8bit):	7.5694221245996225
Encrypted:	false
SSDEEP:	768:ovoAOzgit2ZuJgeAABtUzEU7Yte6HyOgud8+LO5F3uSnDBlxBpbx4ooTj:ov97itzZLPtew2w8DjxBBx4jj
MD5:	81379B624431B2F171BE9577C09071A7
SHA1:	539C3F5F636B8B26382DE9F78CD8AD87F0F95364
SHA-256:	E5FF19D3A089EFDF0FB6F42388275B8398E07DA28CBA710A1CD0FF7A0AC17396
SHA-512:	E9970BC1356D48B8855C7B200015FCD784D694FAAC92092816F6B8C9A72721951D2803DA8151ECD31C08938F6B44B9ADA5A2B3922771D397988FCD61C5A1CC91
Malicious:	false
Reputation:	low
Preview:	G.h.t.t.p.s.:././.h.e.a.l.t.h.i.m.p.a.c.t.n.e.w.s...c.o.m./.w.p.-.c.o.n.t.e.n.t./.u.p.l.o.a.d.s./.s.i.t.e.s./.2./.2.0.1.5./.0.9./.H.I.N...i.c.o........... .... .........(... ...@..... .........................................................................Z.../.}..p`.M...;.t.o[./nb.q......................................................................\|......................z..kP..YH..PA..H5..T1..[6..U?..M<..E5.$_Q........................}..........................................................}..gB..Y;..O9..G8..@/..K0..V7..P9..Q<..L3..G..M4.........................................................................2....rA..Y...Y2..Q0..K...G+..M,..R...R/..Q0..T2..O..H$..V8.................................:C.............................z....d..a2..a/..\/..T,..P,..M..R)..U(..R%..S+..T-..Z1..R..S,..lQ..........................WN..jz............S.....................wE..c5..h8..a7..Y5..X1..V,..V..Z)..X+..V-..U/..X0..T...P..M*....................T.RZ..Zk...........................

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\3DYIXNT7\H9GyqoPMvfRa[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO Media, MP4 Base Media v1 [IS0 14496-12:2003]
Category:	dropped
Size (bytes):	2621440
Entropy (8bit):	4.342158602115011
Encrypted:	false
SSDEEP:	24576:5+jM6bllCobtLutA9M71jbgkfq3kaey7aZAALD010L0fyIWa:52JrcBNgkCK0iwf5n
MD5:	8F33D9828FCC5AAF8F87C8E0D8DF45FE
SHA1:	CFD71CB1797156563293212C8A4F0D07B452FE45
SHA-256:	748FF96A468E463FF062A08EA7AAD86D76B057C0E8A77EB8E22105E6265590AD
SHA-512:	12B6D9CB180EE7098D9909C1722852717A28F7D02E35665C6A24397BE02D5D62FFA4BA24A3CCEEB64203E4CF237707BB0CF49616D5B4DC2DF36823AD5182EC17
Malicious:	false
Reputation:	low
Preview:	... ftypisom....isomiso2avc1mp41....free...;mdat..........E...H..,. .#..x264 - core 152 r2854 e9a5903 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=4 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=0 threads=12 lookahead_threads=3 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=120 keyint_min=12 scenecut=40 intra_refresh=0 rc_lookahead=20 rc=crf mbtree=1 crf=30.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....;e.........V.r. .F.$..Q#.......l...l.........,.L.Sp...5g.t.~\..g^7.c.Z.j....-.......6..Q,..zq<F."...?......6....4S.^W.&i....{.<./.ir._....!.02..>R{.........3.z0..R..S.......?.F..8 .MR-.\|.}E.....`.A.ZU..o..U.. lV..d;.i.N.!)..`O.....T.LW.52^..

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\3DYIXNT7\H9GyqoPMvfRa[2].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO Media, MP4 Base Media v1 [IS0 14496-12:2003]
Category:	dropped
Size (bytes):	2359296
Entropy (8bit):	3.696213674935055
Encrypted:	false
SSDEEP:	24576:5gKWM3jbNq3ik8aey7aZAErG0L0fyIWX0vr+jMH:5pnMykgwf5+0vrL
MD5:	BF56A3DEBF139F1B301142FF11B06859
SHA1:	FA36428E935BE9918591C6F98AAE8A06E393CEB0
SHA-256:	B6BFD33827EF6EE8697DC37D3A8188347E751FE1CF200E60F2162AA0AA81DAD8
SHA-512:	2471C862FC25CB2246132A0AF4FF19D6E2EE1E59E6E4CBC68EF2F13CAD591095975C5C25A88ECA0ADC16CFAD075A18FE515CA9E5F1EA90F7D8A6F9890945AACA
Malicious:	false
Reputation:	low
Preview:	... ftypisom....isomiso2avc1mp41....free...;mdat..........E...H..,. .#..x264 - core 152 r2854 e9a5903 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=4 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=0 threads=12 lookahead_threads=3 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=120 keyint_min=12 scenecut=40 intra_refresh=0 rc_lookahead=20 rc=crf mbtree=1 crf=30.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....;e.........V.r. .F.$..Q#.......l...l.........,.L.Sp...5g.t.~\..g^7.c.Z.j....-.......6..Q,..zq<F."...?......6....4S.^W.&i....{.<./.ir._....!.02..>R{.........3.z0..R..S.......?.F..8 .MR-.\|.}E.....`.A.ZU..o..U.. lV..d;.i.N.!)..`O.....T.LW.52^..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\0970e0af62cde9eaabbad91c7b4b1657[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.360369536054091
Encrypted:	false
SSDEEP:	24:OJf+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:Uf6uERAkOQlOebN50dWe
MD5:	06880927E376FBB787651BF3D0DE2EC4
SHA1:	DDD0D85DB7682A1C879B7180B0027619407742B8
SHA-256:	B09254841913E9EF55583DD707285A887464E6915DF97EF23AA4D1BA895B2380
SHA-512:	081FC43AD4DE74BD630DEDE27E03EA74E30323C3E2418429CBCB803B30132DC96CBB16962A56C7B475930B59F248C138E51E9E48E5CC827A833814A3C13DF439
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1a8d9f04780a3b0a64a9edae4db67fdc[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.349759435926791
Encrypted:	false
SSDEEP:	24:5f+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:5f6uERAkOQlOebN50dWe
MD5:	9014C024EAEC3061C237A3C0FB2F4583
SHA1:	CFBFB4E38E8CBD73E5A04F2956ABAB7A96065C0C
SHA-256:	2E71FC4BCF45C81D859C649B163CDCD978EB13E1D05585B57A9272854F664E9B
SHA-512:	1F2ED78ADD2EF77A3BD595ECB65056E9127775463D7455E9B7AD203A73EDAC0B378B9ECEECBEC06664545BDDD08AA22A5FB83912AE058A5968818D3B8A648B0B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1f494[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	626
Entropy (8bit):	4.4263109823303415
Encrypted:	false
SSDEEP:	12:t41WNF30qcMUJV/MUfiazpGs7gtvbBevWdLns2WNZiLTDNz9c:t41SzUwmAZBbB1ps2KZiDNze
MD5:	FDA7477C4EEA759CF5407472387453BF
SHA1:	E27C117F875F235272223EEBCF4E3C08FACC9CA4
SHA-256:	67F6421806614DA4A3EEA025F84AF6DA69DA2C43B640C89AE964A1940755E6C0
SHA-512:	209167AD1681AE99CBF024D5AADA473BFE6DA39B5AF3DEA54809A567DCA6A1C3B7CBCF594B1936AFD37A160AF821B9FE7446C3E9AFC0269CBD018B93B000113C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><g fill="#DD2E44"><path d="M13.589 26.521c-.297-.495-.284-1.117.035-1.599l4.395-6.646-5.995-5.139c-.556-.476-.686-1.283-.31-1.911l4.304-7.172c-1.669-1.301-3.755-2.09-6.035-2.09-5.45 0-9.868 4.417-9.868 9.868 0 .772.098 1.52.266 2.241C1.751 22.587 11.216 31.568 18 34.034c.025-.009.052-.022.077-.032l-4.488-7.481z"/><path d="M26.018 1.966c-2.765 0-5.248 1.151-7.037 2.983l-4.042 6.737 6.039 5.176c.574.492.691 1.335.274 1.966l-4.604 6.962 4.161 6.935c6.338-3.529 13.621-11.263 14.809-18.649.17-.721.268-1.469.268-2.241-.001-5.452-4.419-9.869-9.868-9.869z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1f608[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1417
Entropy (8bit):	4.2075666535186
Encrypted:	false
SSDEEP:	24:t41R2CvwCXAVUdg5HpE7j00828qriy+aZCWaEUtvKCPFncFm/FVWRoVTET:CAcw/Ud6Iotqrt+aCWytvKC9ncFKvwwU
MD5:	54B9902837FED72B7551EDB77B30B96E
SHA1:	62A11B2EDDEEBD87245818541767CCC1FA0D485E
SHA-256:	47E8DCD1B8D55A6FB6A29061B4254030EBD346D76CC725AEA29831B68C5D5F8E
SHA-512:	594B1C45A0F1469525A1BE2EB426D5C67ABBBF7779B5834C195C799F9327555DBF6B954A7D05631B7645FEE3E77CA0049E323B34441ABF352FDE852B8E8E46BA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#AA8DD8" cx="18" cy="18" r="18"/><path fill="#AA8DD8" d="M10 4C7.42 4 4.369 1.534 3.414.586 2.843.014 1.981-.157 1.235.153.487.462 0 1.191 0 2c0 3.459 1.672 10 8 10 .757 0 1.45-.428 1.789-1.106l2-4c.31-.62.277-1.356-.088-1.946C11.337 4.359 10.693 4 10 4zM34.766.153c-.75-.311-1.607-.139-2.18.434C31.7 1.472 28.589 4 26 4c-.693 0-1.337.359-1.701.949-.364.589-.397 1.326-.088 1.946l2 4C26.55 11.572 27.242 12 28 12c6.328 0 8-6.541 8-10 0-.809-.487-1.538-1.234-1.847z"/><path fill="#553986" d="M27.335 25.629c-.178-.161-.444-.171-.635-.029-.039.029-3.922 2.9-8.7 2.9-4.766 0-8.662-2.871-8.7-2.9-.191-.142-.457-.13-.635.029-.177.16-.217.424-.094.628C8.7 26.472 11.788 31.5 18 31.5s9.301-5.028 9.429-5.243c.123-.205.084-.468-.094-.628zm-11.628-7.336C12.452 15.038 7.221 15 7 15c-.552 0-.999.447-.999.998-.001.552.446 1.001.998 1.002.029 0 1.925.022 3.983.737-.593.64-.982 1.634-.982 2.763 0 1.934 1.119 3.5 2.5 3.5s2.5-1.566 2.5-3.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1f62d[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1318
Entropy (8bit):	4.5205082167213195
Encrypted:	false
SSDEEP:	24:t414f2BC7mBiLGimz8JuTARRvpnll0J3Pj0/XE7w5L6B3+1yzi695n3+1e4suB:CnvDimgJuk3vpDi/jI196418i661R
MD5:	F7B3F6B926CB31A17D4928D076FEBAB4
SHA1:	6E31C7CAEF6FD64B9897638EC38F098DB529E8AC
SHA-256:	D0333B5CB416AD6545055766FC8128566874AB5EAD272E5A691A24704048F077
SHA-512:	6B23687C584C981765191CFF073D8E46F903E3D6F86D2DDCED66DBF1D4017C77CBC8F7800548B101063D42C3CDA61EF0CE316AB7C3FCCBF113CB9A78368F4DDA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#FFCC4D" d="M36 18c0 9.941-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0s18 8.059 18 18"/><path fill="#664500" d="M22 27c0 2.763-1.791 3-4 3-2.21 0-4-.237-4-3 0-2.761 1.79-6 4-6 2.209 0 4 3.239 4 6zm8-12c-.124 0-.25-.023-.371-.072-5.229-2.091-7.372-5.241-7.461-5.374-.307-.46-.183-1.081.277-1.387.459-.306 1.077-.184 1.385.274.019.027 1.93 2.785 6.541 4.629.513.206.763.787.558 1.3-.157.392-.533.63-.929.63zM6 15c-.397 0-.772-.238-.929-.629-.205-.513.044-1.095.557-1.3 4.612-1.844 6.523-4.602 6.542-4.629.308-.456.929-.577 1.387-.27.457.308.581.925.275 1.383-.089.133-2.232 3.283-7.46 5.374C6.25 14.977 6.124 15 6 15z"/><path fill="#5DADEC" d="M24 16h4v19l-4-.046V16zM8 35l4-.046V16H8v19z"/><path fill="#664500" d="M14.999 18c-.15 0-.303-.034-.446-.105-3.512-1.756-7.07-.018-7.105 0-.495.249-1.095.046-1.342-.447-.247-.494-.047-1.095.447-1.342.182-.09 4.498-2.197 8.895 0 .494.247.694.848.447 1.342-.176.35-.529.552-.896.552zm14 0c-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1f914[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1573
Entropy (8bit):	4.307365124568593
Encrypted:	false
SSDEEP:	48:CsnnoLjFk1Eg7llEuN8M5SjlH8xeeMU1gL3FBRqoY:nnovzg77EYSjlH8xeRbVWd
MD5:	263A7F4EEB6F69E46D969FA479188592
SHA1:	6ADD81641F76C88B0DA55EEF8A374661B497A823
SHA-256:	3A19C77FF33F8EA325055B8563E7415FFD2AE37F0BB50A12898801613037721E
SHA-512:	EA5F39E60839605A28E389CF225AB712D3986AB73F8CC79FAE18A3E8B28869BD99A39A7043BAC857233C6DDC81DAD1E200D140DF17FDA400C669B71FC5E162E5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><circle fill="#FFCB4C" cx="18" cy="17.018" r="17"/><path fill="#65471B" d="M14.524 21.036c-.145-.116-.258-.274-.312-.464-.134-.46.13-.918.59-1.021 4.528-1.021 7.577 1.363 7.706 1.465.384.306.459.845.173 1.205-.286.358-.828.401-1.211.097-.11-.084-2.523-1.923-6.182-1.098-.274.061-.554-.016-.764-.184z"/><ellipse fill="#65471B" cx="13.119" cy="11.174" rx="2.125" ry="2.656"/><ellipse fill="#65471B" cx="24.375" cy="12.236" rx="2.125" ry="2.656"/><path fill="#F19020" d="M17.276 35.149s1.265-.411 1.429-1.352c.173-.972-.624-1.167-.624-1.167s1.041-.208 1.172-1.376c.123-1.101-.861-1.363-.861-1.363s.97-.4 1.016-1.539c.038-.959-.995-1.428-.995-1.428s5.038-1.221 5.556-1.341c.516-.12 1.32-.615 1.069-1.694-.249-1.08-1.204-1.118-1.697-1.003-.494.115-6.744 1.566-8.9 2.068l-1.439.334c-.54.127-.785-.11-.404-.512.508-.536.833-1.129.946-2.113.119-1.035-.232-2.313-.433-2.809-.374-.921-1.005-1.649-1.734-1.899-1.137-.39-1.945.321-1.542 1.561.604 1.854

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\21d8087e9ba5e6b49b57551989511666[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.360369536054091
Encrypted:	false
SSDEEP:	24:OJf+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:Uf6uERAkOQlOebN50dWe
MD5:	06880927E376FBB787651BF3D0DE2EC4
SHA1:	DDD0D85DB7682A1C879B7180B0027619407742B8
SHA-256:	B09254841913E9EF55583DD707285A887464E6915DF97EF23AA4D1BA895B2380
SHA-512:	081FC43AD4DE74BD630DEDE27E03EA74E30323C3E2418429CBCB803B30132DC96CBB16962A56C7B475930B59F248C138E51E9E48E5CC827A833814A3C13DF439
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\28e504a9091e121cf958d92b5b06b662[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x250, frames 3
Category:	dropped
Size (bytes):	84269
Entropy (8bit):	7.985665757839402
Encrypted:	false
SSDEEP:	1536:GuaoYykMYbZ/JFjWJ4+T9sisVbV0RWqAHHo8XwbXSVKdNJ+S2z6A4jnnA:Vao5wZe5JsVb4WqCpXwbXpdWS2zB4c
MD5:	28E504A9091E121CF958D92B5B06B662
SHA1:	EDE981EFF33E2508DB073E1C53BE1CD254FF7E14
SHA-256:	2653671DEE77B5BB47648CB0B88ADBB1E2C9B8CA49B3B9A6520B78A7E03D058C
SHA-512:	7B91FFEEEBF3CB08E8845504166A85BB0FCF704AD63B64DEFE51860AC10DAF1BA6DCCDB9321A77876339B5BC0F6E722AF8720960661D89B2063AA8D732CE7055
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:3DA972B0F09111EA8BA694756CC60AE2" xmpMM:DocumentID="xmp.did:3DA972B1F09111EA8BA694756CC60AE2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:039B92FFF08711EA8BA694756CC60AE2" stRef:documentID="xmp.did:039B9300F08711EA8BA694756CC60AE2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\368f19815e1a703fa23bd94302b9bab4[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.360369536054091
Encrypted:	false
SSDEEP:	24:OJf+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:Uf6uERAkOQlOebN50dWe
MD5:	06880927E376FBB787651BF3D0DE2EC4
SHA1:	DDD0D85DB7682A1C879B7180B0027619407742B8
SHA-256:	B09254841913E9EF55583DD707285A887464E6915DF97EF23AA4D1BA895B2380
SHA-512:	081FC43AD4DE74BD630DEDE27E03EA74E30323C3E2418429CBCB803B30132DC96CBB16962A56C7B475930B59F248C138E51E9E48E5CC827A833814A3C13DF439
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\523f42eef36a6695bbb2e6878dd54e01[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 250x250, frames 3
Category:	dropped
Size (bytes):	54365
Entropy (8bit):	7.986257986651101
Encrypted:	false
SSDEEP:	768:YE/yK9xU4I+Azs/SnS+l6AZqk6C4jWMmQR7qI0U+70tazOnv/fn:VJ+zw+lmpC4ZRVhRtiOv/f
MD5:	523F42EEF36A6695BBB2E6878DD54E01
SHA1:	F68FFB7A15AF9C42C855758C5115D061BEFC2D1E
SHA-256:	3DC2DD5C57F04D0012CA01D3133078C178DE02ED16BC26CF0B38727E5F2934A9
SHA-512:	D11FCF49B4204CA6BD7530FEA9E7857F64020D77487D974F87359203871FFD57203AAE2B2E99DC3EE121E9AA6147A8313B03760036C42E0C2AA461294CCB097E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....{http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8f4154d3-cdbf-40b1-9080-68e1b7faaf73" xmpMM:DocumentID="xmp.did:039B92FEF08711EA8BA694756CC60AE2" xmpMM:InstanceID="xmp.iid:039B92FDF08711EA8BA694756CC60AE2" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B4E4A5F3677C11E9B8D6B625E43F34C1" stRef:documentID="xmp.did:B4E4A5F4677C11E9B8D6B625E43F34C1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\59f314a1ba3c175c26b5f0549c135ac0[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 600x200, frames 3
Category:	dropped
Size (bytes):	56588
Entropy (8bit):	7.97015133454149
Encrypted:	false
SSDEEP:	1536:bYoTY54M8nrVrC/Uejs9n22amJWGJm0Agn00Ike51U:b454DnQpIt2TmwsAg03kW1U
MD5:	59F314A1BA3C175C26B5F0549C135AC0
SHA1:	B11CCA33B9A5EDEE4AF638CCEE5A5FE0E9B7BD24
SHA-256:	8A620E93D79E9CFA1D1C57D703A019D1A4EFB9662AD9D8332DBC3C3341FD8C16
SHA-512:	2B466A436D59D1D9634E2B336A3BC103D948D17256C500068C961A7E9034F7A11D8CC539BE6F3FA8EA1F41775F4E2BB6445AA5403DDDDD39330E9FF2D596B1F9
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:4074c763-d854-4fb0-84b8-0827b5575d39" xmpMM:DocumentID="xmp.did:7DEFCE582E8B11E989BBEAED7F3EFD33" xmpMM:InstanceID="xmp.iid:7DEFCE572E8B11E989BBEAED7F3EFD33" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5b08ea21-d567-4e13-a60e-a016ce7fa598" stRef:documentID="xmp.did:4074c763-d854-4fb0-84b8-0827b5575d39"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\6267f6851e28c3d41740bc4b9ffc5c7c[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.360369536054091
Encrypted:	false
SSDEEP:	24:OJf+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:Uf6uERAkOQlOebN50dWe
MD5:	06880927E376FBB787651BF3D0DE2EC4
SHA1:	DDD0D85DB7682A1C879B7180B0027619407742B8
SHA-256:	B09254841913E9EF55583DD707285A887464E6915DF97EF23AA4D1BA895B2380
SHA-512:	081FC43AD4DE74BD630DEDE27E03EA74E30323C3E2418429CBCB803B30132DC96CBB16962A56C7B475930B59F248C138E51E9E48E5CC827A833814A3C13DF439
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\94b52a8f21d8ccb2e9d4a1fa539db520[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.349759435926791
Encrypted:	false
SSDEEP:	24:5f+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:5f6uERAkOQlOebN50dWe
MD5:	9014C024EAEC3061C237A3C0FB2F4583
SHA1:	CFBFB4E38E8CBD73E5A04F2956ABAB7A96065C0C
SHA-256:	2E71FC4BCF45C81D859C649B163CDCD978EB13E1D05585B57A9272854F664E9B
SHA-512:	1F2ED78ADD2EF77A3BD595ECB65056E9127775463D7455E9B7AD203A73EDAC0B378B9ECEECBEC06664545BDDD08AA22A5FB83912AE058A5968818D3B8A648B0B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\9b54f407360411c8a8b2e3457a194a82[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.360369536054091
Encrypted:	false
SSDEEP:	24:OJf+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:Uf6uERAkOQlOebN50dWe
MD5:	06880927E376FBB787651BF3D0DE2EC4
SHA1:	DDD0D85DB7682A1C879B7180B0027619407742B8
SHA-256:	B09254841913E9EF55583DD707285A887464E6915DF97EF23AA4D1BA895B2380
SHA-512:	081FC43AD4DE74BD630DEDE27E03EA74E30323C3E2418429CBCB803B30132DC96CBB16962A56C7B475930B59F248C138E51E9E48E5CC827A833814A3C13DF439
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Biological-Experiment-Hebrew[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 469 x 313, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	62413
Entropy (8bit):	7.96883690708883
Encrypted:	false
SSDEEP:	768:ukFPN/AfPmaid0WSxf267xT6sJnh2QwMePNgBdh0miBU0wP2gKhKE0LdgYfmeNN9:hIfOaWSD19hcPN6dhMUVOgKUETyLN81Q
MD5:	74832C77CB7DD8D28735557620082137
SHA1:	CE04693A8C9D038BD07A5D73CEB23CCEA25EE30E
SHA-256:	1A84ADBA9271C49EAB1311BEA87A699AD4E6AE9D9BAE67842FE8B6E1244302B9
SHA-512:	D9D26FA6046DB732491B3DA4B96C3B62CAEFD1FA89AA5234274CA0A1DF4571339C792D385BEF302B53086B8B9E3C05D5202493CD1BAF425E58CFAC5603893813
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......9.......J<....pHYs..........&.?....PLTE....V..j.......................h.....d.....^.....\..e..Q.....f..Y..U.....k..Z.....b..b........w..m..t..g..d..o.~O.....i..n.....a.zM.......H,.....q..k..`.fA.N0.....h.._.uJ..s..:4....d....nF.vL.rI.a?........g!qH.....;6.@9....82iD....yO..b jB.c=..] .]..Y.kC.......pG.uK....\9..x"...V5.C(.}P..`.!...[..l....R4..` ...1-,dccW8.?;:.Y..T.jig.u"yN........T.)%#\<.trpwvw\|R........>9.h'.p.\|\|}.R.....V..c".......S.843....V..X.^\[E@?..........].plj...JFE.l$............jlpWUT.....>...PMM<$..k..4-.p.....u..u".......:7.?<......4...s&.~y.f%..H.o#.........k..BC.y.........4.v..l...........g0.r',....S....n?.;9kI.zU).TR....zR..C..~....P0..rbG".qZ...^'.c..g.........w....[Z.qp.HC.......G.z+H5..LK.}{....}g.v4kT0oQ"<2.^P5.t>.hHQA%.._.9+{_$.jhs^<..P.....b`QWatgS..@fZFZS.6?O..[..7{u2S.+.. .IDATx...K#....,.BRR....RH=..l..E....6..4..-.8.7.f...@.{f.a\..\?.......m@..pe...^5.z.{o.[.J..Vb......{~......./......WP.....Z^^...vHMT.tv6s...s5.*1....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\CDC-Fraud-Corruption[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1625x844, frames 3
Category:	dropped
Size (bytes):	384315
Entropy (8bit):	7.864986849100741
Encrypted:	false
SSDEEP:	6144:5JpBJUC+P9xCCCCCCCCCCCratRouZFLkReaznUO2aNESh++t4Sg8r5HKtd8dCDLB:bpbzq/txHonrBHDSSfwdNLaDghmveH/f
MD5:	5AD498BF2A9DAE8B535306EAFD0CA293
SHA1:	19FE0FBC88C4CB14FBD2571944F067D2990BBF81
SHA-256:	3D653BBD171E39CB860D7794ADF3B791777198339454B02087FC339BF956C8A9
SHA-512:	74D7EA5EC8914105E2A38BD4F3711B819FFBCCE8B5389BBB15AD4DF31F6537E07ED737FF462047A5226E783B01BEFDFE58ED6AFFD52DA19EA8E9D4CD3F7E16A2
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................L.Y.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....7.g....~#.......][O.....-.........k.+.......o....L>(YG....B..5.....n.s..B...c.t.......W.T.p.J.NR...g.9..>....c.....i.........{/.y..y^_..~.n3.1..O..~....v....]^]J...^*.y%....D.,I...&..<...\|A....4{..R.?...v..4.].if...(,..,..Nk..go.#w..>.......e..N.{!...[\}...Ks.4..fG..a.~....W...X.G.R.Wn.+.#...q.b%l>..s4....y..1......Q>3\|)fc.Q..<.}..i...G.->.[{.._...r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\CDC-notice[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1032x465, frames 3
Category:	dropped
Size (bytes):	117391
Entropy (8bit):	7.860971116226421
Encrypted:	false
SSDEEP:	3072:+K4CmdFluRwi3JrqsgjJB2OIwx6WNlwfH/e9a:lUXeb3ssgVjxLlw/W4
MD5:	38B4C7BD56C1F86493194393EC379691
SHA1:	80CC70BD234BEC6DA68915BA09E27728B7DA2835
SHA-256:	28463234C2EE48A69694F0B5FD57BA1F5112E2EA03A789E28453A876A088A10E
SHA-512:	0993333E94412B6B75B96CA62337FEEB71086A707F53231D8EB2DFFF5E5DFE92EDCB2B2F2F0A825E57776F3F8DB683D7C74BD49B69849AFDCD4A32BA81E4E10E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(.....(.4f..(...QE..QE....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(4..f..?.?.Z............y.h....v7r.9....sGr.p.0.Q..z..?........z'.$.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\D3nc6rGFkdcA_640x360[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, frames 3
Category:	dropped
Size (bytes):	12732
Entropy (8bit):	7.936247007276371
Encrypted:	false
SSDEEP:	384:zIPuzuQOFeuioliW0WZyHSe5b33/4D0qAaC69v93sn:zHMxQW6db3v4D05yv93sn
MD5:	0630091A9513DEF07FC77FFE7DF5F35D
SHA1:	CDE763327828DA579A316C6D343FC0F928FEB6B3
SHA-256:	81ED9E9E03F5F178A0E99376A397356E031680E426952C0A77D580E5CE0A3A43
SHA-512:	C19392D67154D3818C2618BEFE346540585DF08191675945AA5396A71FEB32F2E65B6C91207B811A158FE168FB27F593AA52FF2B9AFA87830D0D168AC856A656
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."........................................9........................!1..AQ."a.2.#q..BRb3...$..4CSV....................................................!.1A..............?..c@M..\|.^.M...`..).P,d..) ...!..X.K..B.B...... ...X.......6..X.G7<.G*.1.H.t...S0.+O..e^.....)..T.-.Y^..=.... ..L...&5../....H.1...c".H....@l..c3.fX..w.h.R.R...O...)+...9..F.eL..C$........5.u.D:.r..X...<..SF_XW...kC.+.h..e..y/...&el.+`...s...I.....\|..B JE2a..l.$...Em..V3...........`B.........@.(.$5....h...9,.DX#a.....6..l6),.,.T. ...v..@Y/....X...`3d.l....@.%......`.[@.[..9Z..^92&....V2f%....5..H.3.....^..n.R.2.....B..j.ldfR.2.#Te.\|Y.2.2aZ...fh.H.J,Sq3)...".\r...^Nw...NF....P...OT`...2z..".....Y..2.L&.Y.T....\.h.NVV...@F.l.B.@.[..X.....b.;......R....$.%.........Ht...h).AQ.8 % . ..B.Y,..D...!A..).k...`1.7"n@G....6...!.. ,...@

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Doctors-Warn-COVID-Vaccine[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1084x661, frames 3
Category:	dropped
Size (bytes):	250423
Entropy (8bit):	7.947561656499916
Encrypted:	false
SSDEEP:	6144:JfckUlFlb8tQ7UBF8nWjd0gsYz0EC3Gbc1rWDIzboNUrjfPZxvL+:JfcBlb8tNF80tz0qcRLjfPZxvL+
MD5:	C42AB5FD05456C05E3E443D6EFFF4D34
SHA1:	3023C3A1BEF83D68093DEF480C6267BA270A5A88
SHA-256:	A29C6BC82B8466694262853E8FD2F693F558A29234022C17F8EEFA06B033F857
SHA-512:	7F67AE868706D866054B7E8553527326B2A83E455B72CBB7F2479F008DA1B21371113C827BCEB03D2D16FDB897EF9638AE239724691F9DC8800A9A539BB2EB4F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...n[..k:..i./.F.......W:L...k.r>..~3.a.1_.-......C.2~.n^..)>....Wt...a.r.......[.......x...9.E<.&...)1..oj.;V..._.Smu.......C....V.c...R....z.x..E..1'.zt...s.sT$...P.g..K.SI..N..As...Db..A...R).Z.l..~.ZK.....H....@...nU...._.Li.*.!^.........,....U.\|..j.y.......8..i.Z..-.....%.Q..m.H..^...c.E%..a.{.}.._........../...._H..c....$\|....FO...q...(I.T.8I.HxZ.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Dr.-Bob-Zajac[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1202x672, frames 3
Category:	dropped
Size (bytes):	94981
Entropy (8bit):	7.950773698382006
Encrypted:	false
SSDEEP:	1536:yj9Y9V4ABCX7dZARwYfbJ9zYVAr/CQ+f6fSP3vZlXD5IG4pKc8Ctm:QOKfpsFbJ9zCArUf6fabDZ412
MD5:	F900F6F70652C9447702267ACCA44A73
SHA1:	209622C097286FD03C94908AF4E2F42C6EAE1A0D
SHA-256:	6AC6EBF40CC6EB789A11560FF95A6628E928DB37A80E87E9341D9D7E4850BCAD
SHA-512:	B76F76E509AF7F3551202482FB65F79EE5517939E46B900F236AC7284D5EEAF2053393C598485DEBB9B4B51FFD663B5EF1D0EFAE88D0306F6B9CEEF0A6C289AA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......5.......\|.s.vz......5...k.l...(.(.5......j...\.S.....#.n O..,@'...dV.......&m...$..Z........z....\|...2w...?..}+...n..&X...s..6..R7..S.$M....o.&.{..L..,..x.....i5.qVH..b.kH@..}j...qW].1_SU.c....U[/.Q..z..*.6-.~..........W..Hn.8.+.\|.o.P..w.....s.j..Kc.4Q.?....O...+..O.'..\|.5.v....6C.."9.<.......k.u.......%Z\.B>.(.G....>..s.....T.pON+FT...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Dr.-Tehila-Schwartz-Altshuler-1017x572[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1017x572, frames 3
Category:	dropped
Size (bytes):	88703
Entropy (8bit):	7.98578131277085
Encrypted:	false
SSDEEP:	1536:kXXBqOgJF6GfYWPujahY12rwEpcA8xB69SAuwWn0RhAA+C5G:k0bJ3fYKPY1ORcA8896Rs4sG
MD5:	9206186175D2AD4F4C1B96B759694871
SHA1:	B52005BBCFF3D3F5F596CD5BB813057D2BD7E5C7
SHA-256:	D315F945EF9C1BF0EA0EA868B5777D2A674560D6DCAB3C28855FDAEA0F8F605A
SHA-512:	83ED8A20D437BBE6D7AB33FABDB86333D53721716FE5A9CB9D98FE009D7DA33A319A97E5AA7C0C596C571561B91B4CBFD732C628B6ABDF3A974244B0A1E082F3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......<....".................................................................................-G/%m.k...sX.....k..........$..Amc.U(..]..A.. !N......li..6...BWX.4tT....w2.gJy....`;A..vu.TwQ............d..i....t.e..\...8.V.,.YV.-\.....sU.....8.CF.YL...Y....O,w..{B........g!....v..,U\|...~...G..E..U.X....OLuK...>V9@........{..{(.{.\|.... G.....m.bz..z.\|....3'...c=!.{....z.8.w...;6...h..S.o)\...Jt....7..@.....n;.Pf.6[D..M-.U..9Ra.YL'5.d.5u..q.Q}...vXMws..P.Zs.w9!..GF.Y.a.A.;..h.%..twN.c.@w.Jz+..C...q....0....D.;...n.z..dz..... G.;.$=..2Ofw...O.....=...LF....k5m.8...$..@.4.qH .b....0....G...=..........@.....R....R.,...).z..(.N..J.H..!.. ...".z... ..),h.-.-pX.......+T.3U....W.....L.f.,..4ykG5 .8k.....$.. .v...."F8:h"....<...N.j..!..Rp.6A.%k$...pXh.c..).qh4.>.j9b...1.......G..KN.b.H. $.8.{..$R.A..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\FeedUI_LTR[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2314
Entropy (8bit):	4.972915551534062
Encrypted:	false
SSDEEP:	24:D+SGfP4a+DV5dOBx2wRZr5TPsCqaPk/vEC5GXbEC5Gc9C0RCQRVSrb9uPyH18H1v:D+z+DV5dO4MV5gCJC5FC55qbCtcq
MD5:	08FA4FD43897C234D7A1CB3161EE5EAC
SHA1:	12DD39C546BD148AF9B5F881E80C3CEB434ECDA4
SHA-256:	FDE26BC70EEB45D7DB5C18F91739F263C96262EA9FE254C59D993DC44B248774
SHA-512:	07692119205EEAB9D67E77C0E2A93AD77E388BCF717F17D0511BA169A1DA370288E5AC167658D5EB69184E1CB91B483ADFBBC1CC76A6994FFBA108C1B3535A35
Malicious:	false
Reputation:	low
Preview:	.body ..{.. direction: ltr;.. .. margin-left: 1.5625em;.. margin-right: 0em;..}.....__feedview__mainbody..{.. margin-right: 14.0625em; /* 225px; /..}..../ SUBSCRIBE/PREVIEW HEADER /.....__feedview__headers..{.. margin-right: 1.25em;..}.....__feedview__syncengineheader..{.. padding-left: 16px;..}.....__feedview__syncengineheader img..{.. margin-right: 8px;..}.....__feedview__justsubscribedhelpheader img..{.. margin-right: 8px;..}.....__feedview__subscribeheader p img..{.. margin-right: 8px;..}.....__feedview__inlineerror img..{.. margin-right: 8px;..}..../ FEED HEADER /.....__feedview__feedHeader img..{.. margin-left: 12px;..}.....__feedview__feedHeaderImage..{.. float: right;..}..../ SIDEBAR */.....__feedview__sidebar..{.. right: 0.75em;.. top: 1.75em;..}.....__feedview__sidebarcontrols..{.. padding-left: 0.9375em;.. padding-right: 0em;..}.....__feedview__arrowfilter..{.. background-position: left center;.. background-ima

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Gibraltar-Deaths-COVID-Injections[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 960x522, frames 3
Category:	dropped
Size (bytes):	192370
Entropy (8bit):	7.95440317610138
Encrypted:	false
SSDEEP:	3072:5hdAyrrKU7NBYjxcqfy2exaVFdwpM84zK1LFzBFGl9gKIvluu+qEVZ3vhxQaja9i:hAynxkFcqqHx6fbU5zz24P+qcn+2woCA
MD5:	F5580FE405C1C4013E1F4958BF6FFF34
SHA1:	5AE5E16B493D90AB23A8F4CAB91408384A181993
SHA-256:	E738C064B1C960052D563743CDE0B9D02B012047D4683734A4356BE60EAB5A89
SHA-512:	CD56C8D13159AEDE55DA0C503103FE1112495F18E8936D0D615B528A4960B66835A5F583F91CCCBC2EB724FFE9DFB873411271FD637C19C7C1C38493592D1DB0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM...........................ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\H9GyqoPMvfRa[1].mp4 Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO Media, MP4 Base Media v1 [IS0 14496-12:2003]
Category:	dropped
Size (bytes):	31909
Entropy (8bit):	7.989097793531385
Encrypted:	false
SSDEEP:	768:lfumFzjTW60KTlRwrBg6sca1NOxNi+w0/7mIkZAw5:lmmFH5Tk9gEa1aNi+wOaf6w5
MD5:	F39539D9356FDF5240A3EBDD56D7CCD7
SHA1:	F0A417CCE0675B9840D4C58A4A98E050D57B1498
SHA-256:	1F73D39E6FFE19D60CA7399967BE273385A95356AF8BC134EA297FE1179902CD
SHA-512:	EF22FCFAB1DFCFC5FDA51C323AF966B24CD44F6304371244E7FF8E167A482491E5D3271709CD005990A8588528D80D031F25AC4D3B1DDFD4D007FED25DD85B6F
Malicious:	false
Reputation:	low
Preview:	... ftypisom....isomiso2avc1mp41....free...;mdat..........E...H..,. .#..x264 - core 152 r2854 e9a5903 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=4 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=0 threads=12 lookahead_threads=3 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=120 keyint_min=12 scenecut=40 intra_refresh=0 rc_lookahead=20 rc=crf mbtree=1 crf=30.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00.....;e.........V.r. .F.$..Q#.......l...l.........,.L.Sp...5g.t.~\..g^7.c.Z.j....-.......6..Q,..zq<F."...?......6....4S.^W.&i....{.<./.ir._....!.02..>R{.........3.z0..R..S.......?.F..8 .MR-.\|.}E.....`.A.ZU..o..U.. lV..d;.i.N.!)..`O.....T.LW.52^..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\HIN-Desktop-Banner-[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1170 x 124, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	100859
Entropy (8bit):	7.977935389622546
Encrypted:	false
SSDEEP:	3072:bmipGV6w0wrZzj0hJ8paMIVZ3V1LZNb/RVFnejv:ae06vwlk+aXh/Db5VFejv
MD5:	E86B65161BBC36B8591F221098976AFE
SHA1:	461508FC2770A957905D75314E42B8F04E49DFDE
SHA-256:	BC5FDBD98C6DD283F90543A6BCF27D489BB7C3B76AD6032B65DFD3E36BA7F4FB
SHA-512:	EB041AFAB85BD799C1631730697419AA1A9B4FC19D968797384CE4ED7389BB1951D65A377B2A520F1354689DC4396157D644142C76BE086A9DBDD13CCC4EDEB3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\|.............pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmp:CreateDate="2020-08-17T23:11:39-07:00" xmp:MetadataDate="2020-08-18T20:51:59-07:00" xmp:ModifyDate="2020-08-18T20:51:59-07:00" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/png" xmpMM:InstanceID="xmp.iid:72df24a9-b43b-4484-8ad3-7f2db8fcfc4f" xmpMM:DocumentI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Health-Impact-News-COVID-Information-Center[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 877x570, frames 3
Category:	dropped
Size (bytes):	100154
Entropy (8bit):	7.788334517915623
Encrypted:	false
SSDEEP:	1536:fIwk0oH4aG5TxGFAPsG9RFnynG6D5U39bf4uuW/LjWtH6xwiut+s7Hd9dcbPj:TkVH4HMFksm5p6Dq3B4XuW8yh8s7HG7j
MD5:	D64DE53F2FEC5132643DC38C3EBEB5B9
SHA1:	94078B06BE532E3550191D0BC762FBB10CA80173
SHA-256:	B6B4494DD310D89C360DBF0440F0E518536509009AC702E5D6FE0E527DE07164
SHA-512:	049790FAABC4590A252AD1F2D73DED38EF7C301A32E8AEBCE433041D34DB1F544A1E75234AD080D21ABEE50857FF1E6198C9A3D5AA2A548C4FA56C01E3DC0F66
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C.......................................................................:.m.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(....@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..Q@..f..(...(...(....E.P.E..4.QE..QE..QFh...(...(...(...(...(...(...(...(...(...(...Q.3..(...(...(...(...(...(...(....(...(.....(...(...(...(...3E..QE..QE..QE..QE..QE..QE.5....6(f.~d....?..s.E...3.......\|Y.q\|g..6...&.S.XV.....G}......=k.....}R..W..NN.....8..b..?.t..M..F.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\James-CNA-Whistleblower[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 887x542, frames 3
Category:	dropped
Size (bytes):	56310
Entropy (8bit):	7.96079956902911
Encrypted:	false
SSDEEP:	1536:Ih9rtFX/dVROJpHuNow+XH0CTeDA01wYRGDBjjo8/jOte2yi:OvFXlnOJpONow+XH0pA01w8YjjoqjOtr
MD5:	99E4C46E5AA8CC5871BD5C5B5E31C1A2
SHA1:	A477D65414E7D0A3FC1DB37B99EEB465124BAC8C
SHA-256:	6135202FAD9E8044DF0642667CDCA7863944CA1F1534B5AB4ED47474B475E7D2
SHA-512:	862542456CA282C000129A114EA918F4EC0D526F8B736F3EA95E7BC40376BB4E55F77DC90BA19CF8675BCCAAA5C334AC7F9B1E8EC3BD77AC7A6C1C78FF47B41B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................w.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....G.e........6L!..u$W.\|57.<W..q......@8.......fh....K.....r..?`.Tm$_..ON...R.Z..#.J..............(.4......u...J(....pi.2.`?p.u2.W...u2...rL.lt.v..?u2.MX....j:rt..:.(...*..J)XC..7.e..~.F.L....S\..Q@..Q@..QJ..QEH..QH...v.OO.@..iv.X..C...g.}(..OE;..R;Rb.).G.K...i..pL.u>f;..i4.)7..3a.a..Qp...I..EH\.4R/J\f....b.G.O..n2<T..y.T....#..J.L......../.u. ......4.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\MaterialIcons-Regular[1].ttf Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Material I
Category:	dropped
Size (bytes):	128180
Entropy (8bit):	5.923497321976906
Encrypted:	false
SSDEEP:	3072:ac3JgwiEle0epMYEZpzha3lEa4rS+hd/R7:ac3Q0zwVEPhD
MD5:	A37B0C01C0BAF1888CA812CC0508F6E2
SHA1:	FC05DE31234E0090F7DDC28CE1B23AF4026CB1DA
SHA-256:	B7F4A3AB562048F28DD1FA691601BC43363A61D0F876D16D8316C52E4F32D696
SHA-512:	CD8784A162ED428CA5A76E5E877349D50620773E3A3D202D5199FEFB5D69A9B87B92C5DE9455DC3C373FEFB065F06A18F17199A5601887FC1F880D14BD223769
Malicious:	false
Reputation:	low
Preview:	...........pGDEF...S.......$GPOS......,...6GSUB..Q...d..iPOS/2.s"c...x...`cmap..1....x....cvt ...D...\|....gasp............glyfD}........rHhead..f.......6hhea.......4...$hmtxj.iF........loca;)..........maxp.'.....X... name..5....d...zpost...2....... ........O."._.<....................................................................................................@.................L.f...G.L.f...........................................0........................... .+.......................................................................................+.+...@.+.@.@.U.@.U.5.+.@.@.U.k.k.@.+.+.+.+...+...+.+...+.+.+.+.@.+...@.@.U.U.....+...+.+.+.@.+.k...@.@.+.@."...U.U.U.U.U.U.....+.+.+.U.....+.+.....,.@.+.........+.@...+.@...U.w.@.k.U.+.@.+.+.@.U.+.+.k.@.@.+.k.+.+.+.3.@.+.......[...k...k.+.+.....@.U.+.>.....+.....@.U.k.@.+.+.@...+.k.+.+.@.@.+.@.k.U.=.@.+.+.+.!.k.+.+.@...@.@.@.+.@.k.+.+.@.@.+...+.+.+.+.+.+.+.+...........k.@.U.@.........+.U...............@.+...+.+.@...k.....U...+.+.3.+....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\OqOE21UvWe3[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	400
Entropy (8bit):	6.584211645324161
Encrypted:	false
SSDEEP:	12:6v/7P+UhU2RGLJ31m9q/NPkIzS+TmxEMXr:+6UGN3gkNxzjiEMb
MD5:	B85D112F813E876DC294B4263CE4D333
SHA1:	CA55B0C604D89034EE0249024983F7570EA2F8BB
SHA-256:	ED91FBB0CD9308F91F8E1FD93942C94EE850FC4161ED788B16F801B743C70B9B
SHA-512:	07DF881DC463F96F412DB4DBB8DB94BE66492C1E130AC2997D9ECA21DAFC23944A962A44F893F96895550EB10691F627579501E17A853A3C8A8C3861656E9506
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............7.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........tIME..... .`......IDAT(....B1.D/H.ttT....L.......h...%.AH_.<.................n.M..Y...Z_+.4.4..........3.....[J\h,C.....M..exA$.p..H....gm.f...=...$).u.zd..D4T..tx..........%tEXtdate:create.2019-02-26T15:32:06-08:00J..L...%tEXtdate:modify.2019-02-26T15:32:06-08:00;\@.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SARS-CoV2-test-is-a-FRAUD[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	"ID:359970748", baseline, precision 8, 899x519, frames 3
Category:	dropped
Size (bytes):	121783
Entropy (8bit):	7.888784396297674
Encrypted:	false
SSDEEP:	3072:UngvgJme60FkKZFM3syMUY6V1xAIdZxIlYP2I4vwx/ayXBLd:TvU60CVy6V77rxIiqvc/ayXB5
MD5:	E24C3C9700B201956293898314D54540
SHA1:	346F013014B6E6F77E719B31A4877BD9C280E2CE
SHA-256:	AB4E22F8AD31EBE6F53107D6725373E9A9D6ECECC8F3768E4C367968EF7C64E5
SHA-512:	60A4CBDAED33D766EC0E93EAD29D20E61141D7303C6DFCABBE282B7AD362BB6694CFB5F6DEFBEE0D2C9058EFB271333E280B7A267A8C6CA584AB39B9EEEFFAAC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM..................z....................... ..................................2.(.................................:....Coronavirus test. Hand in gloves holds a test tube with a corona virus test label on blurred laboratory in the background. COVID-19 or SARS-CoV-2 test concept..SONY..ILCE-6300....H.......H....Bigstock.....HPhotoshop 3.0.8BIM.......,....@Coronavirus Test. Hand In Gloves Holds A Test Tube With A Corona.....Coronavirus.....virus.....pandemic.....infection.....Covid-19.....Sars-CoV-2.....symptoms.....transmission.....analysis.....tube.....label.....sample.....hand.....pathogen.....epidemiology.....virology.....Diagnostics.....laboratory.....research.....vaccination.....epidemic.....clinical.....pneumonia.....respiratory.....testing.....19-ncov.....corona.....nurse.....researcher.....blood.....genetic.....positive.....2019-nCoV.....dangerous.....mask.....protective.....gloves...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Washington-Senior-Medical-Kidnapping-Sheriff-Grabs-by-Throat[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 818x457, frames 3
Category:	dropped
Size (bytes):	53750
Entropy (8bit):	7.958501542521195
Encrypted:	false
SSDEEP:	768:Lx4MWo2raaSU3TII/CCz+uNrqzzjb4rMs8kMPRcJrtp/hzSUqSIqgueLDh1b8:Lx4MilSQKCzBQH4rMhPRort5s5Zvo
MD5:	DA2A6FA1F9B4841393A97044C250F5B3
SHA1:	C74093AC5F4934420B996D49BB285813AAACF265
SHA-256:	971AE7FE10A5DFD9B5BCF40D543C1592974570FFC747890CB6B8BF31376DBEE5
SHA-512:	14643C4B4352132018A67782CEF4F789947AB7F0FCE4F9E8330EC0CB812FCAA14EBDB24AD95D125CA0645880F8D8EFEB4989A076BAC8DF1524992AA8A2D141E9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C....................................................................C.........................................................................2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..u......:....4.C.!...3W..k.....e...=..@..o..A..T.Dc<...7E'.....U.C.O.Lq.i....v...Q.S..5.9.Suy.X7......(..J.....9...7u...{TN.{..b<.....(zW:.e.}.IFE=S.JS.i......pp(...Z..H:Q@.EtY..N..[p..<...ZF...h....J..0.c7..}.O.SA..c..x@..7.[F.._..Tc.j......34-~...J.m.........\..+b.d.qZ.R.....Y..u.WEq.6&.....].J.5HDV'..W...@RO..S...}.,....~.._.k..B.=.....s...~

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Windows-666-mRNA[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=4, orientation=upper-left], baseline, precision 8, 1138x831, frames 3
Category:	dropped
Size (bytes):	197613
Entropy (8bit):	7.8747683082961135
Encrypted:	false
SSDEEP:	3072:E8N8eL5dxi9VtQD4r21bLSXsyk1WOhyov+rTuTykfyhFkBQLc23guua:nL5qrNeLSc8O5+/uTartGuJ
MD5:	B45CFE67BD58A51542B8B48411C53153
SHA1:	90E2C0AB46DAAC0908FFF805AE2CE8C441633D86
SHA-256:	C7EF8FE0CFE76E7D192B3B252489343FE5B772D909E75CB04CD04D5586CBC64F
SHA-512:	690C70B8FDB108C7652398C58F10E12BA541726A0E204AD0833BB4EA553FEDD339A185B0BDE5ACB3B46315BA8061109761355E7CEC11C94AF671BD5F8E8C8245
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....FExif..MM...................Q...........Q...........Q..................C....................................................................C.......................................................................?.r.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\YoJLKtbksyKv_640x360[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, frames 3
Category:	dropped
Size (bytes):	15181
Entropy (8bit):	7.780126254599895
Encrypted:	false
SSDEEP:	384:PVWT2Ik4Hp54TRHipB5qz5cqQFZ3qNYBOYOopJlJvfOYO:tWT55uCD5qtYI/kZvfW
MD5:	9C76AED46345CACB3C65E84438CD60A9
SHA1:	52157530C5BD43ACF689D95933311D06AE13C473
SHA-256:	D227126C718B036C19DEA979801388CE305154CEBB9E763761AE0A72E2E3CBCF
SHA-512:	E67A12DF53F631FABB9E615866444B4C55A9C6A70CC67D656EDBFA60BA31C2E1861755EC556D223B1A110D0D79E14121CCC8B1BADB878D654A7F60B08B31EFCE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."........................................I........................!.1A.."Qa2qs..#6....&BRT..$34bcrt......%5CD.U................................#......................1.!2"A..3Q#............?.....................m.`.q..kz.T..T....G.tt.3.7..............>...T..'=..\...mg.u..H...:2........D..c...R.t.....g..c..O...i.Pd..7D..:g....".H.1.......o.X....~h.?.}..H.ZF......yd...G1{.YB.iY.K.......J......u.4Coc;...#~o....!....J............P..`..ao.......n.!mo.\|.z...u..jM)<..F.r.QjF..kJMS...5.Els....O.Lr...yfJ.eq<E.2i..)qNK.e'.....4..d%^.../.4.p.em$...2.o..h...M....J.[.uaoA..-;+...5iC.~.<..X.\|..b.6t...PIK.'=.....l.t...~n....".....d..K?...-$..L.\|.......X..G..+!..5...7.~.G..g..?.h...1.u't...,.....#.lm1...."eOd....B...Z?.....t..........L.k{:......;..A...e.C<9...1.J........:N...6.....~#4y..j#.#N.....?4....m..%...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\active_filter[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 12 x 12
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.822171423789941
Encrypted:	false
SSDEEP:	6:HkuZjRkSRsgyurfxlKJ7u9b8tJtSRcKVJn:HkusisgTrS8GtJ8RVVJ
MD5:	F3B899F507693F9D35B156CB661ED3DC
SHA1:	DDE053369EDBA1904F33A24D233F67251B119EE8
SHA-256:	B6DA2CE88DDA725EA7A45C738BAE5E0AA8B3EE73D5C7E10DD803D7C4093E2200
SHA-512:	A10D38AD6025EDAFC27DA17313B962B7963956EC79DF31C3C568F9DAEA0FA94A855434E35AEB3BC3AE9FF8F09B6BB15A8E6008FAD8600A483764F0EA88CDE807
Malicious:	false
Reputation:	low
Preview:	GIF89a.......)y.\|.3..3..5..{....-..2..0.....+.....,../.......6.....7..8.....3..5..=..;......)z./................/..7.....8.....~......................................................................!......,..........9@.pH$..)IQ..$:.MQ.!Q&....9."...D<-.....*...H..Tm2.J}....A.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\async-buttons[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	157841
Entropy (8bit):	4.16038718689917
Encrypted:	false
SSDEEP:	1536:euIP5Ux7KluyFLabroJvEvPEyhBUEmZ2Gh/Td4GV9T44kJqdYTDXzjVY356M9s39:+/JvEvJst99T44kJ7TDXdY3rU
MD5:	7CDE9863D0BD7034DC8F4D0F0140D2F7
SHA1:	6141BEF4B4FC50579EBB4990D57F0801F474FD55
SHA-256:	C4268884F5B92B7FB9E15AA766E8E91F15A9ECD5C1E11F27DEAC1B048AE3E12A
SHA-512:	0C772BF4DB676ACFD4E5DA2D5E8DD12E2305364F50EFE7DE48486B679E737A54CCC4B2ADB1D56E2760BB33CD5405F0AC9750DF006A5BA186CF9E76BCE6227D7F
Malicious:	false
Reputation:	low
Preview:	stlib.nativeButtons = {. supportedNativeButtons: {. linkedinfollow: {. log: true,. config: true,. dependencyLoaded: false,. dependencyLoading: false,. requiredFields: [["st_followId", "Profile Id", "Enter '207839' for profile id"]]. },. twitterfollow: {. log: false,. config: true,. requiredFields: [["st_username", "Username", "Enter 'sharethis' for username"]]. },. pinterestfollow: {. log: true,. config: true,. requiredFields: [["st_username", "Username", "Enter 'sharethis' for username"]]. },. youtube: {. log: true,. config: true,. requiredFields: [["st_username", "Username", "Enter 'sharethis' for username"]]. },. foursquaresave: {. log: false,. config: true,. dependencyLoaded: false,. dependencyLoading: false. },.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\behind-the-mask[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	"ID:306344257", baseline, precision 8, 900x561, frames 3
Category:	dropped
Size (bytes):	111441
Entropy (8bit):	7.912955463957584
Encrypted:	false
SSDEEP:	3072:MxAlou9XTMO2cBE0tAKsp1XGTmNTyAWy2dKMHfHnoeE:M95HcBEz12i90yI8
MD5:	989EB4A8054A36091BCABE258306C9E0
SHA1:	C2C5D6D7273C54A6E1B0C2965EDF764F2DB53B08
SHA-256:	F287F8BF91A83DD534BC08D1371077711602FE420790FAF28E4F64320E90673A
SHA-512:	4AE576EA714203E110D7DF9B7885F26CC9A6E1EEBB0513830F81EAE000399B0C22B843C69706FB0D585C79589422B75F44AF2BF46AAE3B6F334BAAA3ECDB297A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.............L...b.....................................(......................................Business fraud concept. Businessman hide the mask in hand behind his back. ....H.......H....Bigstock......Photoshop 3.0.8BIM.......u....@Business fraud concept. Businessman hide the mask in hand behind.....bad.....bandit.....betray.....burglar.....business.....businessman.....cheating.....concept.....crime.....criminal.....disguise.....dishonest.....double.....employee.....face.....fake.....false.....fictitious.....fraud.....fraudster.....fraudulent.....guy.....hacker.....hide.....holding.....hypocrite.....immoral.....impostor.....isolated.....lie.....male.....man.....mask.....partner.....partnership.....people.....person.....robber.....secret.....sham.....spy.....suit.....thief.....tricky.....unethical.....unfair.....untrue.....white.....young............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="ad

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap-slider.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	34781
Entropy (8bit):	5.115497394280324
Encrypted:	false
SSDEEP:	768:xjZ4FfsXBlTasV251YTFLzi9H4d9h8/Oe5oMsVn:r4FfsX2YTFLzi9H4d9h8/OSs5
MD5:	C23BAB7D5F2621ACAFDC1B7D9DF2CE88
SHA1:	1D492AC2ADAFA033463B7EDECFA1426CD70A0CBE
SHA-256:	B2CC3BE3745F33C71B361C28BB6EAD9A63E188D86ADDBB946D11BF45EBED7C6E
SHA-512:	06A30C515F1CC07141835D1667112448392199C1EA2926F538793570865F4474A8BDA9C5C61BEAE3A81C1BE7FC35020762455BB39B169A0546722C5DDD7D19DC
Malicious:	false
Reputation:	low
Preview:	/! =======================================================. VERSION 10.0.0 .========================================================= /."use strict";var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(a){return typeof a}:function(a){return a&&"function"==typeof Symbol&&a.constructor===Symbol&&a!==Symbol.prototype?"symbol":typeof a},windowIsDefined="object"===("undefined"==typeof window?"undefined":_typeof(window));!function(a){if("function"==typeof define&&define.amd)define(["jquery"],a);else if("object"===("undefined"==typeof module?"undefined":_typeof(module))&&module.exports){var b;try{b=require("jquery")}catch(c){b=null}module.exports=a(b)}else window&&(window.Slider=a(window.jQuery))}(function(a){var b="slider",c="bootstrapSlider";windowIsDefined&&!window.console&&(window.console={}),windowIsDefined&&!window.console.log&&(window.console.log=function(){}),windowIsDefined&&!window.console.warn&&(window.console.warn=fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	37045
Entropy (8bit):	5.174934618594778
Encrypted:	false
SSDEEP:	768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
MD5:	5869C96CC8F19086AEE625D670D741F9
SHA1:	430A443D74830FE9BE26EFCA431F448C1B3740F9
SHA-256:	53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF
SHA-512:	8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9\|\|1==b[0]&&9==b[1]&&b[2]<1\|\|b[0]>3)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bulb-32x32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	7.732058087907521
Encrypted:	false
SSDEEP:	48:MJ3X/7Tc7JF4goXQnKBlSQB7BI2WeIdl2EjT:MJ3j24giXBdI2w
MD5:	56D77D6AE400D9BBA6CA0D5AAE2FF63C
SHA1:	83D4EE57A2BA6E39B90DE8B5160CD853BDF596D8
SHA-256:	29B0E34445518E4040BD29DD9DC63E03E0E1C28B27C83A623EEDA722C467CF96
SHA-512:	5B2987A6E1E8587DB6AC3CC428F3A807EB83BFC6C42654D89882EB233D6D68E44310227719D394497F69680147EDD7184BC6E42B91651246842BBCF89E69993D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME........8.)....IDATX..].$.....VUwWO....\|.F..2d.........Y.}..%..A... ..d!... 8...K..B..D.!.3DV.n..5.e..f...{.......B..P.}......{o.9..p.w..cL......p=3..&...5.\\|\F.8.koa.^.S..J.P?. .<.6G....v]..7%Y.E..t....b.@..}..p..}.U..".W....n.Y.b....@O.Y.o.%F ^V.......0e...d..B......)..L...I.OU.].gh..=.....@..\|........6M.]...U.K..A.C....fA..G.a........@.Ct.0...Tu.pMh.We...w&GA..)6N..'.S>\|;._..\|.....c....A..W.&.....S.......`. ......a..L5. .Q..L..Y........xC*...UA..G.S..MJ0)....dG...?j?.w...m....I..Q.`7E..E...6.(...R...R.V;.0....@VIaF..W...$..n[p.4Y....U!.U..d..~.l.K..;.C.7....m..H0.....0.4J...H.n.).nL{...p.L.L.P...nK.nh..&'..].. .t....'R.G.`\...Y...r..N.D...YA.x^>........n....]..M..JD.U...P.EP...M."v...!.q...m.....8.?.x....SR..B.)~..1...U./x#t.hK...p..<kG.5.n.H'..Z...)...vlV.$.:h]Q....L...$...[.U..p.X.[.....p.'....x ..-a...$l_....&m7V..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cleantalk_nocache.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3775
Entropy (8bit):	5.322931742112798
Encrypted:	false
SSDEEP:	96:BRafTKt2oVhFByVrItGFTNlGGFZecF+qLiDc5D5ehJ:BRUTKtaQGFBlGGFZecFr+i9ehJ
MD5:	D4339E973D54263CD42BDAD08B17F0D3
SHA1:	3408C31AD7CB35023C82B095F8EF150DDBFA1273
SHA-256:	71ACC673307BCECCA91FB24091F83C386F577925D6753D24AA6E9F20C4D9FA7E
SHA-512:	A0D83A36A6B73B3AF3D6AB175D034AE86E58C057F7091807444853CF7DEDD246E4CED86947FCCD103BC990FA14416157E759B93C227BBF8879EC34E82961E6A8
Malicious:	false
Reputation:	low
Preview:	if(void 0===ctNocache)var ctNocache={set_cookies_flag:!0,ajaxurl:"/wp-admin/admin-ajax.php"};function sendRequest(e,t,n){var c=createXMLHTTPObject();if(c){var i=n?"POST":"GET";e="https:"===location.protocol?e.replace("http:","https:"):e.replace("https:","http:"),c.open(i,e,!0),n&&c.setRequestHeader("Content-type","application/x-www-form-urlencoded"),c.onreadystatechange=function(){4==c.readyState&&(200!=c.status&&304!=c.status\|\|t(c))},4!=c.readyState&&c.send(n)}}var XMLHttpFactories=[function(){return new XMLHttpRequest},function(){return new ActiveXObject("Msxml2.XMLHTTP")},function(){return new ActiveXObject("Msxml3.XMLHTTP")},function(){return new ActiveXObject("Microsoft.XMLHTTP")}];function createXMLHTTPObject(){for(var e=!1,t=0;t<XMLHttpFactories.length;t++){try{e=XMLHttpFactories[t]()}catch(e){continue}break}return e}function ct_getCookie(e){var t=document.cookie.match(new RegExp("(?:^\|; )"+e.replace(/([\.$?\|{}\[\]\\\/\+^])/g,"\\$1")+"=([^;])"));return t?decodeURIComponent

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cloud-search-suggest.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	33099
Entropy (8bit):	5.013533471438158
Encrypted:	false
SSDEEP:	384:WbuZ/6iuerL/72fZBhVhlxOuLzvReetaf+R:EuZ/6iuesBhxsuLzvJo+R
MD5:	B206F5E1CA1C5C03CCAEA242B3503B5F
SHA1:	7EF844302FB1B89D6B80C74514963BB320DF668F
SHA-256:	674161C012D61CD1FD7C70EFEDA6431C20699FED97478BE73DFA72073104E678
SHA-512:	590A09181F56CB00B6CDA67985E02FB97C5261D0C493CA8D96E3D3AA393B56049F3A4E712AE1413D08C508C7A911EFE9E827A41C23F3BA10BB995835454CFB11
Malicious:	false
Reputation:	low
Preview:	.ui-front{z-index:100}.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{position:absolute!important;clip:rect(1px 1px 1px 1px);clip:rect(1px,1px,1px,1px)}.ui-helper-reset{margin:0;padding:0;border:0;outline:0;line-height:1.3;text-decoration:none;font-size:100%;list-style:none}.ui-widget-content,.ui-widget-header{border:1px solid #B6B6B6;color:#4F4F4F}.ui-helper-clearfix:after{content:".";display:block;height:0;clear:both;visibility:hidden}* html .ui-helper-clearfix{height:1%}.ui-helper-zfix,.ui-widget-overlay{top:0;width:100%;height:100%;left:0}.ui-helper-clearfix{display:block}.ui-helper-zfix{position:absolute;opacity:0;filter:Alpha(Opacity=0)}.ui-state-disabled{cursor:default!important}.ui-icon{display:block;text-indent:-99999px;overflow:hidden;background-repeat:no-repeat}.ui-widget-overlay{position:fixed}.ui-widget{font-family:Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget button,.ui-widget input,.ui-widget select,.ui-widget textarea{font-f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\core.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	4000
Entropy (8bit):	5.356960434880502
Encrypted:	false
SSDEEP:	96:D2V6pux64Dgeqyq/5qeEiEXLptwpHJQOPoEK0Jq:DN4CgksKyLpqVpA
MD5:	9CE4E157448487D4EFE0CA538F656A71
SHA1:	45D22DE723A97CA19CDDD4FB792E339B5FAB5C50
SHA-256:	936567BC744E199E02BFC3C33FE2BC9C862999E0D479E2A694AA7485460A3960
SHA-512:	A28EA8C489EE99B0127217429933B84A07CD0B53E4A566754D7BB3E6C762BF7909052CEE4DE5EF3FCD1F8263CA88C2821A7590CD7CB3A1BDB54599C79C6AB5AE
Malicious:	false
Reputation:	low
Preview:	/!. jQuery UI Core 1.11.4. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/category/ui-core/. */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a(jQuery)}(function(a){function b(b,d){var e,f,g,h=b.nodeName.toLowerCase();return"area"===h?(e=b.parentNode,f=e.name,!(!b.href\|\|!f\|\|"map"!==e.nodeName.toLowerCase())&&(g=a("img[usemap='#"+f+"']")[0],!!g&&c(g))):(/^(input\|select\|textarea\|button\|object)$/.test(h)?!b.disabled:"a"===h?b.href\|\|d:d)&&c(b)}function c(b){return a.expr.filters.visible(b)&&!a(b).parents().addBack().filter(function(){return"hidden"===a.css(this,"visibility")}).length}a.ui=a.ui\|\|{},a.extend(a.ui,{version:"1.11.4",keyCode:{BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,RIGHT:39,SPACE:32,TAB:9,UP:38}}),a.fn.extend({scrollParent:function(b){var c=this.css(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cpQ7dnqu0Sos_640x360[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, frames 3
Category:	dropped
Size (bytes):	16223
Entropy (8bit):	7.93687700512075
Encrypted:	false
SSDEEP:	384:byGSoljGrVtMpNNo+P2BRrzoc+iYTwnMpplnCce2dFzhv9wP0:bNjGraNNobfzH+iGwMJCceKtj
MD5:	9ACB2700D60700BA5F83F8B450F49DCD
SHA1:	55102861CD519A4EA667FF1CD3D1556440EB6450
SHA-256:	987DF0D621A2A743E8CC7DCCFE798212480FBC51E85A84EEC2728480952261E9
SHA-512:	14BA396995F02A3DAFD1D605B7737D26E5A015547B86D34BD75407CDD3343D885AA34DABE9A02AABF600AC8F943352136F73086DFE32547830B94A1F72538720
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......h...."........................................F.......................!..1A..Q"aq.#2s....$6BRrt....%&345bu.CSc..................................."......................1..!.A"2Qa............?.......+W.G....U7.E.:{...L.In2..A..8.....k.p.Q]....O...."b.51@..D(... ...(..........................`9G!@..Hp..............L.=E.h?K_=...\...7)$.....-kw.d.t...4.P4l.UE6...s.!Z.J7.$A..J.i....[."../..&...M...9m.N4W\}....i..-.o)..W...y.BI`..2.6>..m6.%:.N/-.q.{I.........a.q...IC..9}.N..p.J.QbY.E>.......>....+q.!r{e..qxkm.,.<..Hv.........]_$.Z;]U..$..G9..J.Mi-.....;-.S9.'W'.....=GG...^.Q.."....QK..I.0a8.:+....{..Y.}....Nw...w..4.r^....7.l.Oh......L.R.._.1.I.-/p.."?.%7L.}..$fW>Kc.5k.?...U*.....-...../D"..R...T.\|%.H...4d..ks....f....i.....\.....Y.,........g......N..\|._'....r...........5U...R.......\|.B..\|'.>......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1830
Entropy (8bit):	5.258683933548223
Encrypted:	false
SSDEEP:	48:mY3QLsMhY3QCsM7OLsMNGOCsMCY3QLNmTY3QCN9OLN4OCNBjOLNITDOCNITe:mYgL3YgCpOLnGOC8YgLNiYgCN9OLN4OW
MD5:	F656B85162BCADD66116DBD167D993E4
SHA1:	FE901E333F941452D68FA20ADE4ED82DE4701C9F
SHA-256:	0442D7667C85883B2152A7FDDFECC10465F1FD6D6C4C40D9CDD10CB55732828A
SHA-512:	018E7F074F3BF1D757F948DBC75884F160E0E2CD8857C0618FD0194EEA295A40B2953E14214970C4F94DF9DB5D87E92D5FAEFD224EE5997872B4E6EFC624D50D
Malicious:	false
Reputation:	low
Preview:	@font-face {. font-family: 'PT Sans';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ptsans/v12/jizYRExUiTo99u79D0eEww.woff) format('woff');.}.@font-face {. font-family: 'PT Sans';. font-style: italic;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/ptsans/v12/jizdRExUiTo99u79D0e8fOytKw.woff) format('woff');.}.@font-face {. font-family: 'PT Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/ptsans/v12/jizaRExUiTo99u79P0Y.woff) format('woff');.}.@font-face {. font-family: 'PT Sans';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/ptsans/v12/jizfRExUiTo99u79B_mh4Oo.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu52xM.woff) format('woff');.}.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 700;. src: url(https://fonts.gstati

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dead-people-morgue-1.22.21[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	"ID:277686784", baseline, precision 8, 900x540, frames 3
Category:	dropped
Size (bytes):	121707
Entropy (8bit):	7.8876360899182885
Encrypted:	false
SSDEEP:	3072:ZNsmKwA7uidXn28FRAzBLA2BLHnQlHR4fyX1Ks8U5sP:ZN5KwAXV/FR6LDJQloylKs8UU
MD5:	9735AB6E70317E9A6ABBF9B12120A545
SHA1:	8B1B989931F4A799C46962D0C07D29437DE95BFE
SHA-256:	1BA8CFD8CE6E8DD0722D83C3E14A59B2D8833E7C90CE725501EE599A94B46459
SHA-512:	4DA85374C48606F55C2C493FEE85FAC05AD8E29FA962896ABA014CFBD834C67FB195EE43ECF0C809D46C631155DC06652E17A0E94F17ABA8957D1967E2E3F301
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................b.......................z.............(......................................dead man in the morgue.....H.......H....Bigstock......Photoshop 3.0.8BIM.............dead man in the morgue.....accident.....adult.....advertisement.....autopsy.....body.....cadaver.....closeup.....corpse.....cover.....crime.....dead.....death.....deceased.....die.....dissecting.....foot.....horror.....hospital.....human.....identity.....life.....medicine.....morgue.....mortuary.....murder.....person.....rate.....sheet.....tag.....threat.....tragedy.....victim.....violence.....violent..........Yhttp://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 11.70">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">dead man

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dead-people-morgue-COVID-mRNA-Injections[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	"ID:277686784", baseline, precision 8, 900x540, frames 3
Category:	dropped
Size (bytes):	109137
Entropy (8bit):	7.886847908347968
Encrypted:	false
SSDEEP:	3072:Z5FDpT3M5vUscpE7XnNUSQmS6sp2HCn5ur:Z5FDd88XpE7XNUSQmcg+O
MD5:	CF92BA682528C2CE188CE320E52FCC43
SHA1:	30D659F68EA74363B49CE3DBB10655BE3469FDAC
SHA-256:	716CC669C7B34697C2BAA8F70873BD446FD1A05E84061D119E3B2C9BFF3D5446
SHA-512:	40F44D6F074EA33C6C7F6B501B62E337A5E16B6D0D90F554E1F1D2FD50B5F56DE469BB2BFD129CE8E20F26B11C66B1C048D1E64881136D0929CD8C1760E6887F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM.*.................b.......................z.............(......................................dead man in the morgue.....H.......H....Bigstock......Photoshop 3.0.8BIM.............dead man in the morgue.....accident.....adult.....advertisement.....autopsy.....body.....cadaver.....closeup.....corpse.....cover.....crime.....dead.....death.....deceased.....die.....dissecting.....foot.....horror.....hospital.....human.....identity.....life.....medicine.....morgue.....mortuary.....murder.....person.....rate.....sheet.....tag.....threat.....tragedy.....victim.....violence.....violent..........Yhttp://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 11.70">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">dead man

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dec_30_2020_CDC_All_deaths.last_[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 2218x1288, frames 3
Category:	dropped
Size (bytes):	407537
Entropy (8bit):	7.598762788620983
Encrypted:	false
SSDEEP:	12288:/WdQv7LdMAd7LsJddddddddddddddpdddddddddddddpdppiiidw/WwbCIFLo67c:/Wdw757FsJddddddddddddddpddddddg
MD5:	8D82CE17BF164E0D66407554D71B918C
SHA1:	DC4AC73FFD4128096EE868B83A78455AE8283B8B
SHA-256:	65F1121B705E9491ED1066532981117AD64F2E192EECC3DBBCCE9E5A888BD03D
SHA-512:	839B2E65E2A223D783E2608B691E60F4F2478C887CC18E7D86DB1828ED793CC36D159A47BD7DFA8B3D690E5E389E3EA0FFB7423F95072F39E8551DC7C15163CC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...................&...V....(..e.e...d?........u...<.5..\|E..@.....h....y.%.<\I..-$....(...+.o....g.'.i.......?.+.}...?n.u.....e..}?.g.:>.g....P..............@..Q^..c~...]7.....o.x....V.cw.-....'.#..:...+...K......k.V.;.o./....">...i....H....1.?..k./.....L..^........q.#........(....(..(........_..pjZ.w....\.-.F..e..x..r...O

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\eb5ec5d017d872ead92d666e2fb50bbc[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 54x54, frames 3
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	7.349759435926791
Encrypted:	false
SSDEEP:	24:5f+4o0XxDuLHeOWXG4OZ7DAJuLHenX3KOQlOCbbV7VKS0dWe:5f6uERAkOQlOebN50dWe
MD5:	9014C024EAEC3061C237A3C0FB2F4583
SHA1:	CFBFB4E38E8CBD73E5A04F2956ABAB7A96065C0C
SHA-256:	2E71FC4BCF45C81D859C649B163CDCD978EB13E1D05585B57A9272854F664E9B
SHA-512:	1F2ED78ADD2EF77A3BD595ECB65056E9127775463D7455E9B7AD203A73EDAC0B378B9ECEECBEC06664545BDDD08AA22A5FB83912AE058A5968818D3B8A648B0B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................6.6.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...9..9...9.A.o...[X.Gx..n...v$....~..zHv-....I.p.....xw>.s]O.\|.?.dYc..X.p...S...\.4.s.E..@..WtKD..l-...W4...B....I..m<sF.d....#.@.K....8.R.5.+_...@.>..,..w..V...cx..;..j........Tn....0+.~'x..7H.M.@.K........?..(....(...mx[..^.. ..I......AX..~.n....m...;.2f.%..~.?.......5..H.zF.w........'.E.r~+.wa...{u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\email_counter[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 60 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	7.342252860683893
Encrypted:	false
SSDEEP:	48:YcwitNn2cw3tJ3UikMERFWe7NwfKc/NpdlTRnld/2:Ya2DQi4VKppdlTp/2
MD5:	798497B0B9264894249B5D7620BA74DF
SHA1:	9AAA0B8C34FDC91A1CE38AE8740647CC454B8253
SHA-256:	8534F9EBCCB73F5F17F3ABC3DDFA6739452E6880BA0B64D01852FA46FCCCD14F
SHA-512:	C3528138C543C7DE7D38CDE1DC2E8881E8CA3ED1639AD6F667560DCE6183C12AE9B89C217A2B4A034CF0FDDE57B8E55592CCE30CF5769214CDA63B3FDEFD7235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<............"....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:F4BEEE23AEB311E199D5803CEB26A027" xmpMM:DocumentID="xmp.did:F4BEEE24AEB311E199D5803CEB26A027"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:37BFF28EAEA011E199D5803CEB26A027" stRef:documentID="xmp.did:F4BEEE22AEB311E199D5803CEB26A027"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6.......IDATx..XIKcA..,F...../Q..xQ."..u....9.0.......G&.D..M.yT.Q..TpAF.H.....:..ttF.F^A.........hZ\\...[..bd.1..?.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\emoji-closed_book.0dad9bc1[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1101
Entropy (8bit):	7.680146378711165
Encrypted:	false
SSDEEP:	24:/iUpCGFJFc4i3Q1yrbqg05ZnFOh8uxcejyaw6xTduaeOe:/NpCGrC4l1yrb6QIejrxCOe
MD5:	0DAD9BC1D59622A8C4984DF8C84E5BAA
SHA1:	D8972EC4FB6D590D54802AB1BBECA1C446F08030
SHA-256:	A3B46C0AEFEA3556F8FE8A561BCC7E081FC3C6581F2CC7C77127DD33FC6DD2F2
SHA-512:	A1611500CB27BDCCF8603DB6A9A2331ED3A8EC78810F5F2D5317AC3F9BC30F17F0E94573986DC0284BE387F6FB8A4C6381821BFFBC9300E9426AF366220E3712
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<.....IDATx...o.E..?.....$u..FD.-= .@/.7. N....7$.....P...@jo=..."......Mi.u......4......v<_..y..7.}.......L2.....w..AX....u..8....LqWx.....}Q.Z...B`._...O.#.,c.,A..{Y.x..f.8n.2. p.e.dDa.....%L.P.......0...(...G..L...<.......H..,.{....0.;.<.......je.V..-.B...y...9..!..[..K6.e....iX.J..h....e......NP...........M<o.....[@........K...SR..Gz..&.5<s}...7..f..M.l.y..L..\...0.r....tQ.......8..r....[t.x..>)...r...4Q6..P...(.@-PGX.S...U..s..(B.X..g.a.a....G..hy...S...l-.{....N.8...{$....@>.....".............O.4P~'a1o.+J.@.)...T....C.o..mx....,&..m<.[..>UV..T.......F...e........._.V....... ..(.."...A2.....o0X...`.`..E.@.$..c.`.2H....h.@.@94.'A..iq^...]u<<....V.V..I...j.....7pDs.Dg_...+......._~}q....cU...."..2.J."...<....1n..M!.......w/....7E@4........lP"6..u..x=.8C.`. .c.f..8\\|..(8..\|...j....@...9*S..(v..F.CUP.` .@U....DNQ.-rd... Yk-..L..9...c...Ss..8.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\emoji-coffee.0905d882[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2439
Entropy (8bit):	7.788848034783283
Encrypted:	false
SSDEEP:	48:qGMeFpDDW9c/8At74awRWV5v/Gx6nBm95xnu61gwBswvZzIFK34H:q1c8At74FWVtKM6CW9IFtH
MD5:	0905D8820D12917B3B166A01B32B1057
SHA1:	B1ABD935D22FC2E247BDF48C002270BD19E985E7
SHA-256:	2AC1ECC586253B843C6BC5DD7C02350E6BCD5A20D981880858943542F8062683
SHA-512:	C9509012B36A0BF38F5AA127F83D172D95070CBF6E9D5B9FAA41F98EBFE89229F64B7647714CC67CCAA88E282B321A9FA3614A8CD6E007FCD01964B48DE5F9C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............ cHRM..z&..............u0...`..:....p..Q<....PLTE....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................}x.sm.meyc[u`W..............pjfI>J&.G".I#.K$.L%........jPFN&.P'.Q(.R(.R(........L.S).U.W+.Y,.........[-.]/._0.....a1.c2.e3._@4...h4.V6(...j6.k6 n7!o8!wYM...p9"r:"iC5......~cX...e>-......uQB......[L.........xl.]MuI5.vi.........................C..t....tRNS.1.\|gJ._8.,.'...=..H....D.t.qe.Yc..o&...k.b{.8.........2iHQ...T.,k8CP\|........x.................#..^...}...Re.(./.._....t.........E......b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\emoji-musical_note.e4bc8b20[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1611
Entropy (8bit):	7.797775011024049
Encrypted:	false
SSDEEP:	48:/Npy3rRLG5TX8uawgSOWt9li3T7B1SXO9:lMxGF1GWjlonBWO9
MD5:	E4BC8B20E724A48C008203F8E317ED2D
SHA1:	900684347632D2C8864D53339282F652A091BFDF
SHA-256:	675A68145A6AAFC4CDAC0995B66FFE84623CF599302DCADD9821A6D028992DC9
SHA-512:	8DD0CB47E5BF2FD7D11CD0A4D7B565EC2B1DC7AC0008996309C12806BE6C67EB0B4EDDF2B7C780F429B5FCD67A13C5F06D044864B01721F67B380CA4908B8DA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<.....IDATx..Z]l.U.....R..b.....T........y.V...1.}#....._.....P....QC.&.`...AE.?.Z.K..b).s.........D.KN.{g;.\|.s....F.m...............%J....HJ.6..J1E...4.....j]'...0<<.9?.Him.J..T.............=K...h...D.v..!..fB..(.Z..,m...+%.6.J...a.H...f.....4..TX B.4\..q$e..&D...O.......&i.y,K..t....(.2....j...@.....\|....5.....4.....L.\.".6L..X........%.Q..m.R5.[...X..=...0.)= ..o.$..$..."S...I..L..)R.B....._.....$>Gr.d.d..i(dE..p.r...'..d....o.... .....sB..<,..0..IM...3..+..=...F.{e..-i...y..W_6.."17A.H.s.F.?n.....JPL{.....,h......a.k).ZX..7A.iPZZ.q..Q...s.."v.D{4......M..\u.C..E.2...oi..~.2!....q?..t)..x....)........M....z..oq.\.#`&4!.<..`.4.....+.@t%0.5.....TC.V.,..#....o#U.....n..}}Cw.q..^............=x....K...6....../.....=H..1^.....ev........&...922r..J.M`........U..E0l..!..q..B..G......Q......76n.~P....0b.p...Q"..x.+..[v>wK..Ps..`....z...kN.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\emoji-thought_balloon.5731c25c[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2831
Entropy (8bit):	7.890651247114591
Encrypted:	false
SSDEEP:	48:/NpCIB3kPOdJ72oC2Py91OUh9/5VhqA9+/Qwx14q8K6NBvYQp4sATbgGq:lgIBkU72n2PsDTfw6+4wHPF6nxGI
MD5:	5731C25CBABE290565782F211BE18A87
SHA1:	6B6A3EE419A0FB323EEF0031F8FE26BA61FE6554
SHA-256:	52868B4AB966CEF713FE4BF4C7F5BF7B214A329F7CCE9F63E015517D00EAABD3
SHA-512:	3E9D191BA18CAD4C0BC0C8ACA0DE3DB8AFA33021ADFC1BC59A83B963345ECAC0A2183F4ACB6FE1E4710B8178DA041C386F1FE873BFEB2502337492D7DAE58352
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<.....IDATx..Zk.]U.....R.U.@...t......!.F).Z".......?41.................1.4<.4B..2.t:3.....0..e.=g..s.9.....;m..d....k}.^.}....[.D(.:tduM..6.......E.!...@.\.h..'..Wf.....K$....i........X..\|...L.....j.[..A".XdJ.C.<.lQ.'l.5.F.&6..?.pf..".(...u.._tM...3"2O.:,.I.,.5.<=.;g....7...A4.H.d....n.h.E...........{....0..kKI.. ...R%)`....._L=..,.a..m....x..8..^{c..n.Z......x..&0.D$.?............\|R.......N.....@X...J.[...E..5.^......i.C....,..x....._uq...... "t.....r7..#...ODS.^&..I.T._..K.0pHH..! .."....F...E....M..O.'A...<....H..p..H0^`... \|$.....t...+\.GGG.7Q..%."x..V[9.N<.G.(.......Z..".UYH@....pEb..<l....Pc.......i..t...mV....k*.0<v.z"\..p..F..3`..CF..'^dO..h... ..H]_...E.$..m`.......t.2....=.~..).....S.#`..-D.1...\.^l.._.t.< .obN<. .9.y.7.......9../...v.v~.p{..9..a.z@.1w.../.zr..h]F....}......u..n<....$......`..y...m..^@.P...G.C.W...B..Ov...0ey..^..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\emoji-tv.5ce1dbb7[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2493
Entropy (8bit):	7.892965600956033
Encrypted:	false
SSDEEP:	48:/Npl4z/I25T1/sN4RJ1hNxXHsr1YaXMxjBj/6xLEgwA1TiF3R:lATiUJPH+YJxjR4NwA1T+R
MD5:	5CE1DBB731A01FA2CBC01A8B5CDDD34F
SHA1:	9CF727F9F2993C003CD7E23E36D970CDEC71AAE7
SHA-256:	8C1A4FAEEB3D4194633C35922D3BECB560D653960D77321ED639A90CBF0D38AD
SHA-512:	1A23CD1A71B01A8DF61D5AE91346FE214C7F9DA989CE65D4D14D98E901C5662F2F04A23A7C3B6CB5B2A09475E0D07E493490FD0B8601B20B650220BABEA836B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....sBIT....\|.d.....pHYs.........B(.x....tEXtSoftware.www.inkscape.org..<....:IDATx..kl.g....yO/\.ma..eI7`.?....&.9.Y.N..2.t0!..>...............(le.`Y...@..PF.p.w.\.B....>.?...}.[z..e...>.>...y...n.m..>qj...Z..}..Z.....:q..P}.\..I"......:R.......Z.[.Rm.g..J...f^...s.$...J{._?h<SlY...m.6..km..)....46.^no....\..@.zAO6...,.z..O.3c.y.z3.sMMy.Sv._R".]..\|.3o...+.P..0e..v.<../J..=...55...y...C..........bwJ..E1A..\|.C.C..?n.6O..PG.Dz....h.ox...N.r.t..-..W...]+.z.C...f..W:'d::G.R)...sreE.L&.x....d..}c...*.>.t....lx.l...8 a..u.....U.?]...M..T.sB...L:...`.........-.."..,.9.A..w.oo.......y.dB_.bbq...\.)..0g...Y.2MD.#.O..J"1...........8F..9m.........u.......D.{le....o.wU.<...%....Y.#.....s......V..c[S.s.T........E.%Y.0{.)J.[...;...ZW..^0.......BB.'....S..8..k....cQ.P\LA%.I.\|...........}.w..z-..D.......#`Y........F..t...........{..A......Q...5...v.+.]...E.%.I.6.........8.Eb.ye[ -]h9.d.w..*..m.......R@......6......PLRe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\facebook_counter[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 60 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2146
Entropy (8bit):	7.458496264277078
Encrypted:	false
SSDEEP:	48:Y5/EvnLhFFfJ3ZvT3rif+Lp8GW86Jkxtb6b7UiMIKvn1pg:Ypk1rTvTHpwzstb0ICW1y
MD5:	6B0855359B6F78EE382E54C188A33F2E
SHA1:	0A6AE274B24534E1DD425DDB01332372229B31DA
SHA-256:	D1C745D88FDF7E6557BCCA05BE49869CA1FC7ECC87DF0F754BC9D461F2C14FA5
SHA-512:	A8230C961DE3953017DE5717637E2C92C672DF4E8AA32D3F59BBC24F58A44DDBFB032CB8D32BBAE2A37400531F169B150088CB82E4CE99A6B2437B7B1BD72558
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<............"....tEXtSoftware.Adobe ImageReadyq.e<...jiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0C5D87C5182E11E3933A8FEE9798F39D" xmpMM:DocumentID="xmp.did:FDC8A5E6D47E11E3AE18F5B447E80FBC" xmpMM:InstanceID="xmp.iid:FDC8A5E5D47E11E3AE18F5B447E80FBC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d92ac038-f783-4e9a-8075-f15e5f66a584" stRef:documentID="xmp.did:0C5D87C5182E11E3933A8FEE9798F39D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..X{LSW.......(.2DA'..2.*.:..?...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.0821911566006515
Encrypted:	false
SSDEEP:	24:sul7RlLii/z+iiiiiiiiigiiiiiiiiiiiisJXiiiiiiiiiiiiioYiiii2iiiiiiE:LRlnznJvZW/NGDoZy4ZL830Yi/43lLeL
MD5:	E379C5EA5AA630B7AFE130AB4ADA3316
SHA1:	78B3C7DB8774F83C04DBBE57C62F372FF618149B
SHA-256:	577B4927806C381E4CA3BCEF451ACAE1D76AEC56180F38ACAAA81651D6F7A881
SHA-512:	2916AC75DE69318EA0E35D2314007E5BC7F3C678C881003FD5C37200F0D9DDC4532408456145FAF729E8613CE9DFF97F8EE513FCD3F37BDEF8C0B16ED4276EFC
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ........................................................................#y..Rv..~v...v...v...v...y..X~......y...............................................................................z..>t...p...o...n...n...n...n...n...o...p...s...y..L................................................................}.......t...p...n...n...n...n...n...n...n...n...n...n...n...o...s...~..!l.....F.................................................{......p...n...n...n...n...n...n...n...n...n...n...n...n...n...n...r...}..(r.....I...............................................&...z.u...n...n...n...n...n...n...n...n...n...n...n...n...n...n...n...r.......~...................................................z...}..'p...n...n...n...n...n...o...n...n...n...n...n...n...n...n...n...u..x......%...............................................1.....u..{n...o...r...v..vu..Yu..Vv..rr...o...n...n...n...n...n...n...q......!}...................................................\|...~...u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feed[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	285311
Entropy (8bit):	5.111235272993252
Encrypted:	false
SSDEEP:	6144:vJOYuOeN8NN/ptfCBfVkuyeiteNFVURDcPxMLluKeNN:kAtfCBfVkmVURDcPxl1
MD5:	AD6426E4B888ABE4E6B807E79DA3904F
SHA1:	2C14AD18125BAD74C8A0E8F76CDED0116C618F86
SHA-256:	179205A0577C61548D71F80CDD6A6FE07D20120B4FA037F5B64CA5E0784DAE47
SHA-512:	FE2BDBE0CC662C497FEBAD7B8FD467488F3BE75AD83BFD437E908F3830CD7E3D3D58673A52647C4FB6A2BE6DE583CA9C22C63457CB2DAC1D39B927C132C7B737
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"..xmlns:content="http://purl.org/rss/1.0/modules/content/"..xmlns:wfw="http://wellformedweb.org/CommentAPI/"..xmlns:dc="http://purl.org/dc/elements/1.1/"..xmlns:atom="http://www.w3.org/2005/Atom"..xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"..xmlns:slash="http://purl.org/rss/1.0/modules/slash/"...xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#".>..<channel>..<title>Health Impact News</title>..<atom:link href="https://healthimpactnews.com/feed/" rel="self" type="application/rss+xml" />..<link>https://healthimpactnews.com</link>..<description></description>..<lastBuildDate>Thu, 04 Feb 2021 00:08:22 +0000</lastBuildDate>..<language>en-US</language>..<sy:updatePeriod>..hourly.</sy:updatePeriod>..<sy:updateFrequency>..1.</sy:updateFrequency>..<generator>https://wordpress.org/?v=5.2.2</generator>..<item>...<title>German Investigative Journalists Still Searching for Proof that Sa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feedcomments[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	594
Entropy (8bit):	7.569712177808553
Encrypted:	false
SSDEEP:	12:6v/7+o6e4J0XLPkTm4m8ZFlnCUsHmJDcO9BFq8rf8xNz/J24:3fJe7Cm4mKnCpzO9nExn
MD5:	16FE4512DEB019CA6148F01792C8AD7B
SHA1:	040A6A8D8BA480277DCFFA12D35A60FA89D2D257
SHA-256:	F2FE561879D605A603671A0530642966CE5F145F9339DE4D93740399F9C05878
SHA-512:	DE90FD250B0FBB2FA70C106A8A7D7AED39D2104A5C1CAC32F9CA94561CF7DA02730F0054F1BAAFD0DFB543B499CA20683DF447123B4625BE932AD645B516E32C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............F4.S....IDATx...ORa....v..M[[..k..l6.d...._..I@....$.......B ....O....=...G...S..V.&..\|:...^..8...~~.8..~....&....TP.....H..\....6.o..Q^....vz.V:.B....sJ!...:r..V.Y..R.q.#3....Y.sG..].........kXy.9......<.0..f...nN.#.O..~.=.\..J... ....jj......Db...f..L<-.\|....,.<J..[.9y...r.4.....>3;.Y.<n'g.nu:..+....zg..Nk.e....a.Yq....F..bdp.o.y.v}x..Y.tlx.J..m......<.....v..g.W.U..*..7j.........N".Q.-...k...{..ZR...v.M...........Z..].....&^b^"..`(H....P.&.B.....wl...<.J..]U,..$.D.@..Z........L..&@.4....-..@..0u0n..G.m..a.X....?'.t....3....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\gatotalviews[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	732
Entropy (8bit):	4.620432721973925
Encrypted:	false
SSDEEP:	12:zAMAN55MeR85/zhswN0hprgo0PSYxRN4zhd+hprjpekdgMBvmQSS:zAMAN55MeRM7mI0hprAPSYxRNChQhprN
MD5:	F49DA4F32B476E4B67B416B38B52BEA6
SHA1:	4F9E14139F5B14039D81E8B976C444662F896522
SHA-256:	F561FD771979CB9CD5707986F6D5C5D0B0F61FAEA903B7A4EEA0119A00190301
SHA-512:	30453B8D5FBD7919CD70D1F81C8789B4CC57CBBA738FD289B3796780F05DCC154656B51E66718D0C689D4D40F13919A2486196EC03CD72710C40186E0C40C58A
Malicious:	false
Reputation:	low
Preview:	jQuery(document).ready(function () {.. var $totalViewCount = jQuery('#total_views_count');.. if ($totalViewCount && $totalViewCount.length > 0.. && typeof gatotalviews == 'object' && gatotalviews.ajax_admin_url) {.. var postId = $totalViewCount.data('pid');.. if(postId){.. var viewCountLink = gatotalviews.ajax_admin_url + '?action=' + gatotalviews.action + '&post_id=' + postId;.. jQuery.get(viewCountLink, function (response) {.. if (typeof response == 'object' && Object.keys(response).length > 0 && response.totalviews) {.. $totalViewCount.html('Total Views : ' + response.totalviews);.. }.. });.. }.. }..});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\general[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2479
Entropy (8bit):	5.241122655948915
Encrypted:	false
SSDEEP:	48:kMYRgGJFaXzpZzqIASpeg9LUOZ93qOkdVfLMFUq+PZO3CnnmgfNJiEjWuJ513:eRgNXzpZznASphNUO36ccZN1JiEjWu13
MD5:	CD3A83BE27C749EF651D0BF593C9AAC1
SHA1:	74BD8800001861F6344EC85E2C3BB05B5902BD21
SHA-256:	685961B9BDE22D4642681B9AB78984231A4F66F14965CCC871C03CABE8848FDE
SHA-512:	947383D3DB87113FC60786C25014A7BB71D3D623F53D0E57AC343233FE75BBF16CC91CB9667E6648F561E1EEBD28181A3D011931E949281FA4667477DCE1E3AB
Malicious:	false
Reputation:	low
Preview:	jQuery(document).ready(function($) {.. jQuery(".fancybox").fancybox();.. removeHandlerForCommentsPagination();.. function removeHandlerForCommentsPagination() {.. if(jQuery(".comments-navigation a").length > 0) {.. .if(jQuery(".comments-navigation a").data("events") && jQuery(".comments-navigation a").data("events").click[0].handler) {.. . jQuery(".comments-navigation a").unbind("click");.. .} else {.. . setTimeout(removeHandlerForCommentsPagination, 100);.. .}.. .}.. }.. jQuery("#main-nav-search-link").on("click", function() {... setTimeout(function() { jQuery("#main-nav-search-form #find").focus(); }, 50);.. return false;.. });.. jQuery("#sticky-nav-search-link").on("click", function() {... setTimeout(function() { jQuery("#sticky-nav-search-form #find").focus(); }, 50);.. return false;.. });.....Date.prototype.getMonthName = function() {.. var monthNames = [ "January", "February", "March", "April", "

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\image-1-2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1128x712, frames 3
Category:	dropped
Size (bytes):	140310
Entropy (8bit):	7.9823550903235185
Encrypted:	false
SSDEEP:	3072:6gbsPlpskXcIE44HEZ3Oh/RIe3fcaCN2cW1Ro3UnFt9hb:Ue58Z+rDG2j0UnJ9
MD5:	913EA3F486D541D7A6A9CED56ED37782
SHA1:	CE41ECCF74415D73E8D7247ADC76B6A76F675EDD
SHA-256:	66EF86F34C273E672B6E95BF0ECB69F80BEBE774897D7DD31993E3CDA1A51C46
SHA-512:	9FB0819DFC9533B548FF3E197366A441CE00C6A747DE45E81736EC7731B036BDEC7E528395BEA98E5BCAB9699E30BCF077448FD78505722E42F6EB884E345ECE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`...........................................'!..%..."."%()+,+. /3/2'+..............*************************************************........h.."................................................"?{../s..}.....s...w...z2.....){..}...,9.F.....x.{....y.FQ...t......y.{..I!v]....9x\|.].&_.S......z..Y.p...v.Y.E.r.u.%^..f7{>s.......q.2.}..1..TY..zQ....\..,8...1...{U..~WP.}...z.....c..\..g..Y.Je.ys[W2yC...c....q..P.....d..]E...<4.g.K......Q..o/s.....\.v.AQ.f.[..8{...K..=......n>..T.0.....y..V..O....`<:.p#.:,tR.b..q...E.0.##.v.........NJ=......,....B...9K..hiqS..]..\(....C..{.....9../.....I.\...=.E...! .........bU.^e...<?hvt9...!P2{..}...3..*......I...7F[.]>h.7;.C.Z{I......}....{.s".b.I8.mW."..).].&...E.L\.....X.^.YL.+..R.....9..i...! ...h?E........y.//5...\...eM....C..`Hp._D.......@../>.......=..V.?$3.b.Y.zYH..QX....B.4:\|4C(.].}..^........Q.S._F....i..L..r....Wm(@r.=..>-..=.G.U..s..F..4...C...........?y....C....tr..OS.....g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\image-2-1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1380x706, frames 3
Category:	dropped
Size (bytes):	124204
Entropy (8bit):	7.966972393263649
Encrypted:	false
SSDEEP:	3072:Gp4M2yIce2gl5LV0MGB2vqB1rOllQauXhsR5dpVJeGkkFO3ceMH:GqM2im5py0vU10liudIGDk3ceMH
MD5:	05F29BB7DCF3CD078F4A5A6572032480
SHA1:	B0D61F7ED5F6EB6E8DEFC783519AE77628DFA2E3
SHA-256:	9CD167CF3753EC6B763773F007B2A0EA5446134434DD73D4A67BB52A03CFEC2E
SHA-512:	91EBEF12C0886E3AF0E9419407228F47457E9A144E7B51323AE5A929E23EC4DEAA7D438E347C2348D6046AE3D7BAE65EF35367260ECBBAD2B92147B167E051CF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`...........................................'!..%..."."%()+,+. /3/2'+..............*************************************************........d.."................................................E$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.I$.y;.z...K..]K.Is.,..J .ngu..\|L...!...W.bI%.XU..I$...#.....F....(%...?Q.....S..j..k...l.gV.c.)6AL.....@e~.?.`T.!5w.p..z...r.K.qs..N..R..L..a..q.......^....i.n...$.r>.qG...sKe.I%.....8..nb.A.%.......o........9..h.l(......t.B..b.l{/...'.lGlU.Ze.<sb...=$....I$.8.....I'$...Ks.w.Z..........x.....jz...26...zM\|..y..<.BJ..U.v......[.`5....<.Z....\.gL....k.hE.R.2.........+v......N^...%jr.......5q%...s..R.]].`..M...1..,......l(.}6n.q....K-D..-4.vF5.g\|.A...6.g.X..q.:.5..-.iN.........C .Y..F..r.@..\........4Nj...sR.....`3.5....Sz..;..N..Mw..\|.mq..j~.."g.=..I.dp.K<..a.z)..G5.s;......d.S.!$...p..?...y....6.ZJ.'s4,..U.u*P.._R@.\m.C....<m...Z+..:w.........w....LC......d.#]{.e5...d..].C....K.w8.C

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jeditable.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	8067
Entropy (8bit):	4.887805918225746
Encrypted:	false
SSDEEP:	192:xlrPWi/42g6jYnrDJDpygVPsKy2fRXKJQwYp5:xlrPb42gQarVDpygKKy2fgCw+5
MD5:	4F332FDF2DE4E25EB3F5611BF7B6C354
SHA1:	53E8A6136FA9AF4FE8B50E8068899DA860657E1B
SHA-256:	B76E0536E5AE607A8453DC2DD7AC8D08779BA93E8F8700113EE2C1106F31FD79
SHA-512:	259739D36BF7B4B74DC94B3B33433E1822F0792944F0126636ACE5004D1F68A850FC7734C3EF1357502B14792116DD1CC4B091ECD3C9B4B66D6B4E1B8266CB43
Malicious:	false
Reputation:	low
Preview:	.(function($){$.fn.editable=function(target,options){if('disable'==target){$(this).data('disabled.editable',true);return;}.if('enable'==target){$(this).data('disabled.editable',false);return;}.if('destroy'==target){$(this).unbind($(this).data('event.editable')).removeData('disabled.editable').removeData('event.editable');return;}.var settings=$.extend({},$.fn.editable.defaults,{target:target},options);var plugin=$.editable.types[settings.type].plugin\|\|function(){};var submit=$.editable.types[settings.type].submit\|\|function(){};var buttons=$.editable.types[settings.type].buttons\|\|$.editable.types['defaults'].buttons;var content=$.editable.types[settings.type].content\|\|$.editable.types['defaults'].content;var element=$.editable.types[settings.type].element\|\|$.editable.types['defaults'].element;var reset=$.editable.types[settings.type].reset\|\|$.editable.types['defaults'].reset;var callback=settings.callback\|\|function(){};var onedit=settings.onedit\|\|function(){};var onsubmit=settings.onsub

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jetpack-comment[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	28014
Entropy (8bit):	5.5562892286366
Encrypted:	false
SSDEEP:	384:VHy8CYG/MTaPmLHE2F/ILCvFMmt7THxSs0uDLTVvcvSQovGt/C3uJ:x4MTYmLHE2F/ILLMzIQv1ZcC30
MD5:	085F9560370D52D00A08735591F5F68A
SHA1:	0A86776CBC9C978CC72733F021688FB324AE14B7
SHA-256:	55A044336F6A8002CBA599C6BA3613A43A8245E3D766A14A3F1261632D72B7A8
SHA-512:	872C1DA02EE4C40AAD8E5F1FEDB915EC967E0D019F4873321FCFE394CF36DF67BA9A08785D730C82945D4B795F852D4FD9D72CE59D44AE55B7784E7928F4A77F
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>...<html lang="en">...<head>....<meta name="viewport" content="width=device-width" />....<title>Post a Comment</title>....<meta name='robots' content='noindex,nofollow' />.<link rel='dns-prefetch' href='//s0.wp.com' />..<script type="text/javascript">.../* <![CDATA[ /...function addLoadEvent(func) {....var oldonload = window.onload;....if (typeof window.onload != 'function') {.....window.onload = func;....} else {.....window.onload = function () {......oldonload();......func();.....}....}...}.../ */..</script>....<script type="text/javascript">....window._wpemojiSettings = {"baseUrl":"https:\/\/s0.wp.com\/wp-content\/mu-plugins\/wpcom-smileys\/twemoji\/2\/72x72\/","ext":".png","svgUrl":"https:\/\/s0.wp.com\/wp-content\/mu-plugins\/wpcom-smileys\/twemoji\/2\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/s0.wp.com\/wp-includes\/js\/wp-emoji-release.min.js?m=1612197847h&ver=5.6.1"}};....!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContex

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.fancybox.pack[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	23135
Entropy (8bit):	5.369846301219893
Encrypted:	false
SSDEEP:	384:5N7WhsyZ3mw3DJeKZurcVCxHrXhYF/hxQ7SLp2EWJYZ/uSh:5N6xZ3mwI4urcVCxHrXhY9hOaQa/uSh
MD5:	CC9E759F24BA773AEEF8A131889D3728
SHA1:	53360764B429C212F424399384417CCC233BB3BE
SHA-256:	BC50BF49CBE79EE49B4EE8B56F26FF4877BC4945C16F260B1481BA2355C96347
SHA-512:	BB7C913E954D85481AE34B0CE767D210A5A580AFDF8C5CC2B43EF09312055B93F1CEDE6AB0FE5E601EE3981AFE7BC28EC4530291E373CE4487C518F94E951D5B
Malicious:	false
Reputation:	low
Preview:	/! fancyBox v2.1.5 fancyapps.com \| fancyapps.com/fancybox/#license /.(function(r,G,f,v){var J=f("html"),n=f(r),p=f(G),b=f.fancybox=function(){b.open.apply(this,arguments)},I=navigator.userAgent.match(/msie/i),B=null,s=G.createTouch!==v,t=function(a){return a&&a.hasOwnProperty&&a instanceof f},q=function(a){return a&&"string"===f.type(a)},E=function(a){return q(a)&&0<a.indexOf("%")},l=function(a,d){var e=parseInt(a,10)\|\|0;d&&E(a)&&(e*=b.getViewport()[d]/100);return Math.ceil(e)},w=function(a,b){return l(a,b)+"px"};f.extend(b,{version:"2.1.5",defaults:{padding:15,margin:20,.width:800,height:600,minWidth:100,minHeight:100,maxWidth:9999,maxHeight:9999,pixelRatio:1,autoSize:!0,autoHeight:!1,autoWidth:!1,autoResize:!0,autoCenter:!s,fitToView:!0,aspectRatio:!1,topRatio:0.5,leftRatio:0.5,scrolling:"auto",wrapCSS:"",arrows:!0,closeBtn:!0,closeClick:!1,nextClick:!1,mouseWheel:!0,autoPlay:!1,playSpeed:3E3,preload:3,modal:!1,loop:!0,ajax:{dataType:"html",headers:{"X-fancyBox":!0}},iframe:{scroll

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.flexslider-min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	23078
Entropy (8bit):	5.099165876885446
Encrypted:	false
SSDEEP:	384:WpO5TNKX/OdYpzP7YD03rfPoVrLtb04lsmKj+/QmiyZOtybJS0Yom:sweAYdP7noVrLtb0jjUZcyJTi
MD5:	4BAC6EA8514FA899DBCD0256F9E4BEB7
SHA1:	3F8BA07EA04B2BFBA04E3F6D369314C0649B16AC
SHA-256:	23D9C6FA873560F9AC2F4B9B63D966CB179C0FBB0735609AE1506F81E4278853
SHA-512:	2EA3814193F9AD5820FDF7A14ADF974B2381EF21A17376653155C87F6AA76B3D25988186C7EE71823CCF209CC21167B4E70148DC1773970530C94ECE0D4846AB
Malicious:	false
Reputation:	low
Preview:	(function(e){e.flexslider=function(t,n){var r=e(t);r.vars=e.extend({},e.flexslider.defaults,n);var i=r.vars.namespace,s=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,o=("ontouchstart"in window\|\|s\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&r.vars.touch,u="click touchend MSPointerUp",a="",f,l=r.vars.direction==="vertical",c=r.vars.reverse,h=r.vars.itemWidth>0,p=r.vars.animation==="fade",d=r.vars.asNavFor!=="",v={},m=true;e.data(t,"flexslider",r);v={init:function(){r.animating=false;r.currentSlide=parseInt(r.vars.startAt?r.vars.startAt:0,10);if(isNaN(r.currentSlide))r.currentSlide=0;r.animatingTo=r.currentSlide;r.atEnd=r.currentSlide===0\|\|r.currentSlide===r.last;r.containerSelector=r.vars.selector.substr(0,r.vars.selector.search(" "));r.slides=e(r.vars.selector,r);r.container=e(r.containerSelector,r);r.count=r.slides.length;r.syncExists=e(r.vars.sync).length>0;if(r.vars.animation==="slide")r.vars.animation="swing";r.prop=l?"top":"marginLeft";r.args=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.validate.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	23261
Entropy (8bit):	5.227722635338554
Encrypted:	false
SSDEEP:	384:QorHpFSnWB6/tX2lH1dkMiYnFpg54Lrf7m9SNAc0Eny+RWuK7NeBMwV/vtrx+OLg:eWB6/8lH1dkMioFpg54n7mcQEny+NLx+
MD5:	93C1DD8416AC2AF1850652D5B620A142
SHA1:	6A76E4C7DB479053350580469AA010FEBFDCACD0
SHA-256:	17A879E50C3AB3078AFADED288E257FB66E94806B76FF7E796B54226F9848F50
SHA-512:	3BF9D44C5E66745921128407167F4DE709A06325B7DB724EEAFF24AFA96D4912AB899C93AFFF38D7BB5A55679A6D54B888E346936578E38403D0FD9CC21B9392
Malicious:	false
Reputation:	low
Preview:	/! jQuery Validation Plugin - v1.17.0 - 7/29/2017. https://jqueryvalidation.org/. * Copyright (c) 2017 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.sub

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\kIeJo0ti5JDn_320x180[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, frames 3
Category:	dropped
Size (bytes):	5868
Entropy (8bit):	7.874083412228347
Encrypted:	false
SSDEEP:	96:RhjwhiPnUzpuQxSqfPX4n5pSmdxcQghx1NAoYlLcfFc/XAEYIIIsZbR:LXnO9HPX4nHSmdxX3fl4GfYIII2bR
MD5:	26EE896C96C11ED1E985CC62567971F6
SHA1:	2F8CBE0C8CB2EFD0E2FB3B83F3417FA4B65FD2F4
SHA-256:	0B4D6940419DDB7EA79E1D531D37E8B327235A404D26B5DA09C75740AB32ABFC
SHA-512:	EC8CE714B75D17A97FCC27BF49C4F6488F7ACDC695FA6A2A74E4737E432086E487083731061DB95F7796BB2A4B33052F370C3710404494877E921B8F182E1944
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........@.."........................................A.........................!..1AQ"aq...2R....#B..$3br..4s....Sc................................&........................!1.2A."Qq3a.............?..............~...c..k....*b.ld..d.K..Q3..D..nF.M.....=_.n.......:f?....H:8..a..........6]...HJ..n.U..q..D0...-.7...."e...>.Z....J.i...ca\|..g....id...Zy.+<F.C.G}W.....l.,...{..?.X.#fh....>....a...Nj..u...(edL..F..H^Z........B...Zy...5..`..AH..S;..\|B@.g.H..E.....5#....I...~.F,......y.....D=o..;.7.....[....M...y.(.+.M;]..yv...:........................vf.p...>..]}.a.W;.t..D.8..~'.Y....h.......B.\|..-.].w..Q....PF..dl...r/q{w......Z..^)Y....?.ya..;.>....r..@o.G.... N....ZN.x..V..l..!.?...I....{~..uPB...9.{F...&\|9............z...g.r..M...-........&.O.2...)d~f..T.................0..d...../............Z._i......\...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\knut-wittkowski[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1996x1331, segment length 16, progressive, precision 8, 618x410, frames 3
Category:	dropped
Size (bytes):	66838
Entropy (8bit):	7.988343758724717
Encrypted:	false
SSDEEP:	1536:e2YU78NSxDWd26FCZIVZwmoqDodw/nKcLRDwPoj3C1ps0MRYU:dZMCZCXDGu6P6+s3
MD5:	64AA349359EFE9F18D0B8FC8478B5186
SHA1:	DAA1E28F91A9CDA027D24546F47BAE397E3206E1
SHA-256:	991FAB4EEAD619EE50091380C48E828E77742B78A0CA04A44BB2DF2932D46A01
SHA-512:	D31B935DBA8D4F229E9FC003E7CBA310FDB495F11D4C79BA21955B66E7920728A468970A01948BEF5B33A1F162E7C49650C1A002BEE24A3EB910027C86ACAD17
Malicious:	false
Reputation:	low
Preview:	......JFIF.......3.....C....................................................................C.........................................................................j.....................................................................................0...{.7}.[3U..v.zU?-S.oo............k.k.j.[......K..4.P.,...+....j..b...H...2...wY.Fp..q.U...F.-.]e./..z9.\|.W$.WM^...9.....8.D.....Vt.m.y.......:."..>.....-....J...@.Vs..g[_k.n....C...=..I..d4<.fMW.i....i.R.".]...Y..=m..}ku.,cm.^hs..]U:.An.6-v..u....:F.:.v....c...'..h.y...>...d^s..\|o..]..o...MW.}..p.+5.Q.fYJ...,'.n.. ]....z.9P......K.>...a.AuY..5dyh>....@.nyf.g=...^e.:Y.B.{.Rg.gUx.z..e9.iu~{.....L.]f.A..\..N1`..&.Ep.ew..d..\....F.....G.r...=. ..;.....P....;Z.........~.r.?.QE.{_G..Ig~}..-....y....:...?....Q..:...*./UTIQ..N.O0..7..kH.WM.yKY...9..."Zu..?..3?N...`U'.f.j%.k...>FJ.....2....._%......0..<:.D.....x..(h~....`pT\|.....y.n..c{.K.#)k.F.s.;.~...5T.~....K..T..L.4."..u..9g....D..v.k

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo-full-day[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 611 x 133, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3770
Entropy (8bit):	7.894692749476985
Encrypted:	false
SSDEEP:	96:oGv8d9KYlG0id+V1dJRLbFZf01qZJ0rhUj3z:oGv8KAG0k+dvPFSOJ0rKj3z
MD5:	4F432877D58CEF1AD19A39B4124CB300
SHA1:	37CF27E4133A2488610353BAE4CFA906FE47B3B0
SHA-256:	EAEA24C064F60285BC77A423D58BDF5C34E8C3F42F8DD9153E0421656BC67A1E
SHA-512:	DFB81894BE8203ED13DA9B053CCE646BE9104B009DF935C935D63888D2E1F290166B4B1FF2EC82DEB5DC82AC0D215454DF66C7F61CB8E7DBF25240F1044B7A66
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...c......... .......PLTE....A7!.".A7!.".A7!.".A7.A7!.".A7!.".A7!.".A7!.".A7.A7!.".A7!.".A7!.".A7!.".A7!.".A7!.".A7!.".A7!."..............................A7usugegYWYKIL=;>/-0!.".1.....!tRNS... 00=@@PP``ppq................@.....IDATx..}_...[+..O-...iy+...?.....m&.I....:g]x ^.Lg.x....>{,.%.t_...+.......K7..,....N..%a.......^xYX......HW.4,3....../..z..z...K.....A.W^%.....\|....s@J....y.X..."...z..?.x.X...:.;l..x<...o.j,\|.B...t.....5y.X...:.....[..?...c..0A....b2>...G..a....D....K.?.Ud...:.[}.`E...-/%K.......4.+j....,.S...\|2.jn.....(.\|(..V@ym8...\|..........K>..#.(.\|....`..l6V*.ZN....A...o....B.Z....oI~..W...YG.. ....(..V.t....'..%......d.S"........'....c.].c..l:&i......'..].cM\....:.....HA.3..c...n5..\|......3.\|.$d.\f.O..:..h.5Yl.....i..K.0c.2...\|0F.+.....A.{tVx.a..c.U"Z.>s..m,.-w.....C.Ex..1..C..>...........=....Hw....s.1.Gg.>.`.1....z/}_..'._.......S.}.P.Q..U..."t8..y.....0..L...o......`.......t.}j)..8..7.ZBl....2v..P.M.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12687
Entropy (8bit):	4.499071520188676
Encrypted:	false
SSDEEP:	384:cdOGC8V8RjVi6DRkmKFTSc7t7cW7v7VW7E7FT7d7z7W7H7q79787LW7N7V7ja79o:qC8qp3emKFTSbMRAab
MD5:	4F168AC61BDAE049969A61BA10C031F7
SHA1:	6DF4C40C98B7514BBB6DD132108EA3C2B106882B
SHA-256:	A28EF6A0E0C0D50898DFC07F8FF2BB2280DEFA39EADE4D457732A72D92CE44C5
SHA-512:	074F999265EBA73EC1194214DA138E915BACBE34CFE993E6A991868A6604361EC2A57C07E54C747312C6FB21D4093D55C91D2B0BF26714BE0F1A7941C285AA76
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="1879px" height="691px" viewBox="0 0 1879 691" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49 (51002) - http://www.bohemiancoding.com/sketch -->. <title>Slice 8</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <path d="M69.2,263.2 C96.800138,320.000284 124.699859,375.199732 152.9,428.8 C181.100141,482.400268 210.599846,537.399718 241.4,593.8 C245.40002,586.199962 251.199962,575.300071 258.8,561.1 C266.400038,546.899929 275.19995,530.600092 285.2,512.2 C295.20005,493.799908 305.899943,473.900107 317.3,452.5 C328.700057,431.099893 340.299941,409.40011 352.1,387.4 C363.900059,365.39989 375.599942,343.800106 387.2,322.6 C398.800058,301.399894 409.59995,281.600092 419.6,263.2 L427.4,263.2 C431.800022,301.600192 435.899981,338.699821 439.7,374.5 C443.500019,410

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo_48[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mRNA-Vaccines-NOT-FDA-Approved[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 865x544, frames 3
Category:	dropped
Size (bytes):	137438
Entropy (8bit):	7.92697245227578
Encrypted:	false
SSDEEP:	3072:zPkkzRUz0eHKr5vcClCbNAslW71rxz6cI8SJUxoIYWm:zkYGz0eqlcThAslW75EFJUxo9
MD5:	E22FA1C0273C0B7689AB670BC82386B8
SHA1:	9CE3347C1CD10CB8DA2E5E286B1387C0CEE4BA81
SHA-256:	8EADD2B9FEF2547B971447F66CF982C205C90044AD062217EE1AEE0F6AAEAC72
SHA-512:	74AD0338B833B5117C4448C180A7750317F9E3B5D0E2C8E09894CE5F25F1838393E2BFF2F6819DC9B63028D006E85F30F1E5413E70600BDC3152BE80DC7A0705
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x....."Exif..MM..........................C....................................................................C....................................................................... .a.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...............~;.....e..)6..,...u...@`.g...5....T....?~....<....YUR..'..5..&....S...4W.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main.00c62ae6a73ffb49eda2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	2549125
Entropy (8bit):	5.425308781071641
Encrypted:	false
SSDEEP:	49152:WSh7oKjrqLST93GOatmsVfrkCz1Y1Ep1H1W111l1E141M111F1L1E1i1jZWn3vzK:RrqLST93GOatmsVfrkCz1Y1Ep1H1W110
MD5:	C4684185EA3A8BB2E6F33FE1B4C8F447
SHA1:	7434F515180F761A606D453497CA7A3355299277
SHA-256:	0396B1E90CF30624B1E1AA3B19D9D526730E99234A92283E23696B559F45E9B4
SHA-512:	A7E3EC1720F64F574A9E8AE022659DB9F043907EDF1232BC613D5BD06745C6208ACEA357F106F032136B546A098052F5A6E7059B390E5A8D50737530B2F2EBB5
Malicious:	false
Reputation:	low
Preview:	var $localize=Object.assign(void 0===$localize?{}:$localize,{locale:"en"});."use strict";(function(global){global.ng=global.ng\|\|{};global.ng.common=global.ng.common\|\|{};global.ng.common.locales=global.ng.common.locales\|\|{};var u=undefined;function plural(n){var i=Math.floor(Math.abs(n)),v=n.toString().replace(/^[^.]*\.?/,"").length;if(i===1&&v===0)return 1;return 5}global.ng.common.locales["en"]=["en",[["a","p"],["AM","PM"],u],[["AM","PM"],u,u],[["S","M","T","W","T","F","S"],["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],["Su","Mo","Tu","We","Th","Fr","Sa"]],u,[["J","F","M","A","M","J","J","A","S","O","N","D"],["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],["January","February","March","April","May","June","July","August","September","October","November","December"]],u,[["B","A"],["BC","AD"],["Before Christ","Anno Domini"]],0,[6,0],["M/d/yy","MMM d, y","MMMM d, y","EEEE, MMMM d, y"],["h:mm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	369109
Entropy (8bit):	5.157232026299004
Encrypted:	false
SSDEEP:	3072:nGkJlkYoq4z1jJhzJLNqbyrYGr7iLVjn4IL4MJWkD3vyJuXnTEjtKqooFJx1qOHd:nGkUjzkyrgRjn4ILEknj8gO6M+E
MD5:	0BB1D01C49097451CA7EFCA1C4F4BC20
SHA1:	08D5B660F2D20F381AE8C22D79F96C1D609289E9
SHA-256:	01B1487F07EED6CD8DFD28A8C1125EB2B0168974759BB9AF658061C1B68DE394
SHA-512:	ED49E6642D23FE1A69F4C0C5D56D4BC9874529A0084D6C6CE35D1B0A66F83FE00E72706D041AAFDC0320ED785FE12E6E2F204148FD10B3370E01ED0215D65AFE
Malicious:	false
Reputation:	low
Preview:	/*.. jQuery Equal Heights.. /..(function($) {...$.fn.equalHeights = function(minHeight, maxHeight) {....tallest = (minHeight) ? minHeight : 0;....this.each(function() {.....$(this).css('height', 'auto');.....if($(this).outerHeight() > tallest) {......tallest = $(this).outerHeight();.....}....});....if((maxHeight) && tallest > maxHeight) {.....tallest = maxHeight;....}....return this.each(function() {.....$(this).css( 'min-height', tallest ).css("overflow","auto");....});...};..})(jQuery);..../ jQuery CounTo */....(function(a){a.fn.countTo=function(g){g=g\|\|{};return a(this).each(function(){function e(a){a=b.formatter.call(h,a,b);f.html(a)}var b=a.extend({},a.fn.countTo.defaults,{from:a(this).data("from"),to:a(this).data("to"),speed:a(this).data("speed"),refreshInterval:a(this).data("refresh-interval"),decimals:a(this).data("decimals")},g),j=Math.ceil(b.speed/b.refreshInterval),l=(b.to-b.from)/j,h=this,f=a(this),k=0,c=b.from,d=f.data("countTo")\|\|{};f.data("countTo",d);d.interval&&cl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mautic-form[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	20347
Entropy (8bit):	5.145575194478137
Encrypted:	false
SSDEEP:	384:HIHq0Hn3OgOZxmk9yVA37reVh4/PniVT5qEWaf1ydsxMmkIwH9LtDqAMFV6I6QDP:HIhH3OgOZsXCiuLrIwHhQVR17sVeB
MD5:	75BC0F69F95032EC5EC58F30E107B91B
SHA1:	05EC7664438E4AB8430940149C4510CE6F43E0F6
SHA-256:	92D1004698F5834D8769C9B7DE37DB1FEF906B80367D0A6D837037EA5FE74604
SHA-512:	88AAE909421B0A12088E94E6D5571A9BAABF14B18FB08C7F15A706270E4A2A61632A2308766107B16C6EDCFCE028F4958F1F5B83095010F96664682777AC004C
Malicious:	false
Reputation:	low
Preview:	(function(window){'use strict';function define_library(){var Core={};var Modal={closeButton:null,modal:null,overlay:null,defaults:{className:'fade-and-drop',closeButton:true,content:"",width:'600px',height:'480px',overlay:true}};var Form={clickEvents:[]};var Profiler={};var config={devmode:false,debug:false};Profiler.startTime=function(){this._startTime=performance.now();};Profiler.runTime=function(){this._endTime=performance.now();this._runtime=this._endTime-this._startTime;if(Core.debug())console.log('Execution time: '+this._runtime+' ms.');};Form.initialize=function(){var re=/{mauticform([^}]+)}/g,text;while(text=re.exec(document.body.innerHTML)){var replaceText=text[0];var replaceArgs={data:{},params:''};var tmpParams=[];text[1].trim().split(/\s+/).forEach(function(strAttribute){var tmpAtr=strAttribute.split('=');replaceArgs.data[tmpAtr[0]]=tmpAtr[1];if(tmpAtr[0]!='id').tmpParams.push(tmpAtr[0]+'='+encodeURIComponent(tmpAtr[1]));});tmpParams.push('html=1');replaceArgs.params=tmpPar

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\membership[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	8581
Entropy (8bit):	4.938262008064799
Encrypted:	false
SSDEEP:	96:R3uNl66KxSMgjb1d4NqyqfspOx99FqlpspuwbLBGN/UCTCacP:R3U66KhgjbYv8mOX9mpmuwsvCrP
MD5:	131DB8BA4825A2DAEC14961E286E937D
SHA1:	6B2E898DE3B9EC12C53FE5719ECB4CA7A6C1E9CC
SHA-256:	4AAECC4DF9E29B5116261FF811854C39EA5CA44CA966EA50C835400BAC56ADBA
SHA-512:	F0662697F462F660DF6BBEF27AE44C2F0A371A2F732A583621E8D8BE539F6DCE56D30B5793B522E70FD2BE060FB5B0FDBD4752FDD510A75CF85C55859E299801
Malicious:	false
Reputation:	low
Preview:	function membershipAttachEvents(){$('#membership-subscribestar-show').off('click.membership').on('click.membership',function(){$('#membership-subscribestar-modal').modal('show');});$('#membership-subscribestar-save').off('click.membership').on('click.membership',function(){membershipSubscribeStarSave();});$('#membership-renewal-show').off('click.membership').on('click.membership',function(){$('#membership-renewal-modal').modal('show');});$('#membership-renewal-save').off('click.membership').on('click.membership',function(){membershipRenewalSave();});$('#membership-claim-mug').off('click.membership').on('click.membership',function(){$('#membership-claim-mug-modal').modal('show');});$('#membership-claim-mug-modal .modal-submit').off('click.membership').on('click.membership',function(){membershipClaimMug();});$('#membership-claim-shirt').off('click.membership').on('click.membership',function(){$('#membership-claim-shirt-modal').modal('show');});$('#membership-claim-shirt-modal .modal-subm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\menu-backdrop-light[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1280 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7381
Entropy (8bit):	7.704761010974975
Encrypted:	false
SSDEEP:	192:6416Swax0F623Rj2qnMhgjWuMWXnaKALIL7wwZaOs9gEQPIvs:96Swaf+j1MhgjZMMaKAM3wwZ/EQPIvs
MD5:	1DA53B850C7D07BEC6F4383536A4E1BF
SHA1:	BA03AD51F6701E3F04EC6BA9D6F9FAC9CACE14EC
SHA-256:	3D06F5A3120947FB006AD187608FBD2838D044E62479E4C150F9BB5580336B56
SHA-512:	BEAD823EC71588445FD5484D13771F679695B1F9AF714A7CA9D90ACF4C6125A04ED9C798B71B85B43635CC8C224BAEF72599FEF2F861589E30AB8A61D1A930AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.....FR.....IDATx..i.U...( .DAQ.PQH@.Y.T4.qH..q.[c.......Q.G.:j.5.c.)......(N(.5.CT@&.....~..x..{N.}V.z.\|..{.^..Z..UU.../...).t.9s.......).7k.T...s..z.ke....,k<..c..e.........o.I..........\|.!e.6x.zM.....o.>wJ.....b....c....;.(...u.O....l_?..;.....B....!.L...(.z.;.[.Lz.b..^:?........D.@....@. ...H......U7x......v.-)....l...../..m...6.B..c1...6.....b.@..D............!..P..{...i..P...C.......[B:I..b!....._1.O.......R.". B.@. .....$..y...a.I.#B..$.......N.-..D.#.M.......=qj ...E ..".........@b.P...z....B..N...u....\......"2.G.L\|.b.........@.<."...........@. 1D(.........G.d.;..x.N&...../B.....l.#..........uW..D..........@. ..."...T&...B......z\.E....:I.e..k^m..W..K#..](....!. ........C.2.....8E....I.P.:..G..\..(.v......cg.,Oy....ta.G[u.I...K......D.@.........I.c..&:.d.k..+....2.9.2"cyI.....o..K._...yWP...s..2.p..x...@....". ...H.Q....+...0.u..k._.......!f.B$..}!.h...b.o...\F.....C.U7..L.1.<..D.@. ..........=...x....f......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\menu.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	9600
Entropy (8bit):	5.0569040606775095
Encrypted:	false
SSDEEP:	96:f2zvydSYcfiaP/tTlJ1CIxboXSqd52XNlOUKfd1UAvVcWrI9CugSBHh1o7QaRAry:f7dq7Duu8pOAQANSRgSBr0Ar/amS0WB
MD5:	C91CFFF50715441295FE7463BB5D3894
SHA1:	5BFF962538F9C204A42212705E9E2C13D80A2005
SHA-256:	88BBD6DFF28A352E8ECE64314529CC2B05C37302224FF46853376DAF74A40D9C
SHA-512:	7C58DD703C51D7CE06D0DE45AF5A098E1CFF86B99718C97D5AF1796BD3C53E95EC80F19F57EED7DAD7AABE1436C197BB40E7655ECC8D05C819D117A3FBD7F2FA
Malicious:	false
Reputation:	low
Preview:	/!. jQuery UI Menu 1.11.4. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. . http://api.jqueryui.com/menu/. /.!function(a){"function"==typeof define&&define.amd?define(["jquery","./core","./widget","./position"],a):a(jQuery)}(function(a){return a.widget("ui.menu",{version:"1.11.4",defaultElement:"<ul>",delay:300,options:{icons:{submenu:"ui-icon-carat-1-e"},items:"> ",menus:"ul",position:{my:"left-1 top",at:"right top"},role:"menu",blur:null,focus:null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.element.uniqueId().addClass("ui-menu ui-widget ui-widget-content").toggleClass("ui-menu-icons",!!this.element.find(".ui-icon").length).attr({role:this.options.role,tabIndex:0}),this.options.disabled&&this.element.addClass("ui-state-disabled").attr("aria-disabled","true"),this._on({"mousedown .ui-menu-item":function(a){a.preventDefault()},"click .ui-me

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\modal.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2629
Entropy (8bit):	4.793930888954853
Encrypted:	false
SSDEEP:	24:efNUCbnperFIzObnpernuLpBQPvRVYcrBIzOVPQLlYVPNbDtyfURptPtfWDuXEJI:efN4IWwJVYc1Iz5Ll6b
MD5:	EF50C40B2C28CE101F0E32A4BB5C8AC8
SHA1:	BC1B136AE6083EBCF0D2909B7775452BAD37A277
SHA-256:	456ABDF681EBC4CAAC61D7EB6635E21A81D1DCC10F730B98719A65C2A88FE7EE
SHA-512:	CE9913241CC7DB381FE783275409429E19B0F59D6F1D4A22CE7BF175BA236247580C79ED1AFF574C79AD49F097428E7FD1F3D08A07BDC076AB74BED158CD22BF
Malicious:	false
Reputation:	low
Preview:	.mauticForm-overlay{position:fixed;z-index:9998;top:0;left:0;opacity:0;width:100%;height:100%;-webkit-transition:1ms opacity ease;-moz-transition:1ms opacity ease;-ms-transition:1ms opacity ease;-o-transition:1ms opacity ease;transition:1ms opacity ease;background:rgba(0,0,0,.6)}.mauticForm-modal{position:absolute;z-index:9999;top:50%;left:50%;opacity:0;width:94%;padding:24px 20px;-webkit-transition:1ms opacity ease;-moz-transition:1ms opacity ease;-ms-transition:1ms opacity ease;-o-transition:1ms opacity ease;transition:1ms opacity ease;-webkit-transform:translate(-50%,-50%);-moz-transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);-o-transform:translate(-50%,-50%);transform:translate(-50%,-50%);border-radius:2px;background:#fff}.mauticForm-modal.mauticForm-open.mauticForm-anchored{top:20px;-webkit-transform:translate(-50%,0);-moz-transform:translate(-50%,0);-ms-transform:translate(-50%,0);-o-transform:translate(-50%,0);transform:translate(-50%,0)}.mauticForm-modal.mautic

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mpJN5sJvczF[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	509824
Entropy (8bit):	5.407597638270931
Encrypted:	false
SSDEEP:	6144:jA+XbpPGtf57jxVNgVrlvw/QExWyd7TahPGMZZAF/f/x25c7vLtr:vXwvxV0UQExWyNDx7vLtr
MD5:	949DAC8CDDA274807074A7EF18017CDB
SHA1:	16AB4C760F75CC27D8A493420551AAD3AE0745E2
SHA-256:	8D48E68CBC0D149F89F27D9F50032A3540D4767A92A22E3D9FF77ED58D497109
SHA-512:	F2FA8E53EA54E04F8303F350CE50EB78519D1095992EF45A1423B56F61DA82F0E530953D6E90919291ADB82E2E9D47C2543F21E53EA89FF2C4D30131EE247481
Malicious:	false
Reputation:	low
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["Z3urS"]); }..Array.from\|\|(Array.from=function(a){if(a==null)throw new TypeError("Object is null or undefined");var b=arguments[1],c=arguments[2],d=this,e=Object(a),f=typeof Symbol==="function"?typeof Symbol==="function"?Symbol.iterator:"@@iterator":"@@iterator",g=typeof b==="function",h=typeof e[f]==="function",i=0,j,k;if(h){j=typeof d==="function"?new d():[];var l=e[f](),m;while(!(m=l.next()).done)k=m.value,g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j}var n=e.length;(isNaN(n)\|\|n<0)&&(n=0);j=typeof d==="function"?new d(n):new Array(n);while(i<n)k=e[i],g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j});.Array.isArray\|\|(Array.isArray=function(a){return Object.prototype.toString.call(a)=="[object Array]"});.(function(){var a=Object.prototype.toString,b=Object("a"),c=b[0]!="a";function d(a){a=+a;a!==a?a=0:a!==0&&a!==1/0&&a!==-(1/0)&&(a=(a>0\|\|-1)*Math.floor(Math.abs(a)));return a}Array.prototype.map\|\|(Array.prototype.map=functio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mpJN5sJvczF[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	509824
Entropy (8bit):	5.407597638270931
Encrypted:	false
SSDEEP:	6144:jA+XbpPGtf57jxVNgVrlvw/QExWyd7TahPGMZZAF/f/x25c7vLtr:vXwvxV0UQExWyNDx7vLtr
MD5:	949DAC8CDDA274807074A7EF18017CDB
SHA1:	16AB4C760F75CC27D8A493420551AAD3AE0745E2
SHA-256:	8D48E68CBC0D149F89F27D9F50032A3540D4767A92A22E3D9FF77ED58D497109
SHA-512:	F2FA8E53EA54E04F8303F350CE50EB78519D1095992EF45A1423B56F61DA82F0E530953D6E90919291ADB82E2E9D47C2543F21E53EA89FF2C4D30131EE247481
Malicious:	false
Reputation:	low
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["Z3urS"]); }..Array.from\|\|(Array.from=function(a){if(a==null)throw new TypeError("Object is null or undefined");var b=arguments[1],c=arguments[2],d=this,e=Object(a),f=typeof Symbol==="function"?typeof Symbol==="function"?Symbol.iterator:"@@iterator":"@@iterator",g=typeof b==="function",h=typeof e[f]==="function",i=0,j,k;if(h){j=typeof d==="function"?new d():[];var l=e[f](),m;while(!(m=l.next()).done)k=m.value,g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j}var n=e.length;(isNaN(n)\|\|n<0)&&(n=0);j=typeof d==="function"?new d(n):new Array(n);while(i<n)k=e[i],g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j});.Array.isArray\|\|(Array.isArray=function(a){return Object.prototype.toString.call(a)=="[object Array]"});.(function(){var a=Object.prototype.toString,b=Object("a"),c=b[0]!="a";function d(a){a=+a;a!==a?a=0:a!==0&&a!==1/0&&a!==-(1/0)&&(a=(a>0\|\|-1)*Math.floor(Math.abs(a)));return a}Array.prototype.map\|\|(Array.prototype.map=functio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mpJN5sJvczF[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	509824
Entropy (8bit):	5.407597638270931
Encrypted:	false
SSDEEP:	6144:jA+XbpPGtf57jxVNgVrlvw/QExWyd7TahPGMZZAF/f/x25c7vLtr:vXwvxV0UQExWyNDx7vLtr
MD5:	949DAC8CDDA274807074A7EF18017CDB
SHA1:	16AB4C760F75CC27D8A493420551AAD3AE0745E2
SHA-256:	8D48E68CBC0D149F89F27D9F50032A3540D4767A92A22E3D9FF77ED58D497109
SHA-512:	F2FA8E53EA54E04F8303F350CE50EB78519D1095992EF45A1423B56F61DA82F0E530953D6E90919291ADB82E2E9D47C2543F21E53EA89FF2C4D30131EE247481
Malicious:	false
Reputation:	low
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["Z3urS"]); }..Array.from\|\|(Array.from=function(a){if(a==null)throw new TypeError("Object is null or undefined");var b=arguments[1],c=arguments[2],d=this,e=Object(a),f=typeof Symbol==="function"?typeof Symbol==="function"?Symbol.iterator:"@@iterator":"@@iterator",g=typeof b==="function",h=typeof e[f]==="function",i=0,j,k;if(h){j=typeof d==="function"?new d():[];var l=e[f](),m;while(!(m=l.next()).done)k=m.value,g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j}var n=e.length;(isNaN(n)\|\|n<0)&&(n=0);j=typeof d==="function"?new d(n):new Array(n);while(i<n)k=e[i],g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j});.Array.isArray\|\|(Array.isArray=function(a){return Object.prototype.toString.call(a)=="[object Array]"});.(function(){var a=Object.prototype.toString,b=Object("a"),c=b[0]!="a";function d(a){a=+a;a!==a?a=0:a!==0&&a!==1/0&&a!==-(1/0)&&(a=(a>0\|\|-1)*Math.floor(Math.abs(a)));return a}Array.prototype.map\|\|(Array.prototype.map=functio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ninja_stance[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 400 x 531, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	56477
Entropy (8bit):	7.985459621317401
Encrypted:	false
SSDEEP:	768:cjntJwZ17OiLYBNqFwqJY6peeJ7kwFNl8ounWk9q4AlRY4Xt+f7IJ/JNuLKvddu/:cJ6ZBOuCqJdVWoeJFuRDkfMbuOvdyy6
MD5:	10CA2E50C965187ADBA607375F78A56F
SHA1:	BD72A9E0082FFED8D064634F55A1457E98C411A6
SHA-256:	8030AFEAC66359B5AAFA251CE0971FD0551F4401D695A83CD20D045975564765
SHA-512:	1FB8AFD43F20DC4C3705D66117F06D8D6856E9B0CA2ED9E569579334064457FF255E1D3BD0BCF5604B083A6F62A92174042496D4E22AE5C43E3E6B04517F13B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............)sJ'...dIDATx..w`.W..sf.V5...BYZBX..]jXX..,u.v......... .-...@HH.....$.M.....%.X]...9...\..l..+.>A$.t..{.....pG[G..O.....A.N9..>.=..o..qG...YFA.....=m.k.z.f]@~.{.S....}O.\|Ac....A./RJ.^{.+fU@....[z.....s4)d." . .u..^K>.._o...Y...?......^.07)"..K.[.B........B....ow......x3" w..^z....><.....(.v..V.. ....^..fd\....7.m;sZ.....o...@..g.x0.GQ....d+.A....N...i.....4.;~..gM............].b.L.V.}... ...G.K@aLP.p...T.w..s..NH@.......g...j3....V.T:S....A.3...~.]...@+.g\..7..../w.q.$ ..w6........)`..`..{..." . .u.V,+...q.C.R`.ybp....w.1.....k...d.7....Z.U.0.Mj@.A...>q...p.;.P..m.C..l...&......E..^.\|.`....A._...... .B...2.M....Y.h........r......nf.e.RAD..0./.".-..A.O,a0....M.U....O.._........P..$T.B..#...#^@8....... .'.Q7Ob.8J..A.?......7.t........'0.,#6...0..qa.. ..0.'..J).Y...........1...#.........e....l. .B}...I.xU5..1..Ph....P..B.H2o....H.l. .B}.j]I<....b.....1....'.,..fxNJb . ......H,..b..J.6..@....X.d..^?... .B.Z .%

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\notification[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	6956
Entropy (8bit):	4.841638857252342
Encrypted:	false
SSDEEP:	192:Wkd5IYbksJZdBjbkt54v1Bd654XB9kYILUzZWOkDFH3Mkli/7iEbqR:WkbRZdBjbkryMmB9ko1WOkDFXMklA7in
MD5:	662043CDA9300E46EF844F540F5C4099
SHA1:	FC28555B1D08386261381F36CBD7E09D0F64402A
SHA-256:	EBC0CC12FD7F1B4AE05385FF7AC3CDE2159DE376E458D9DA85B3D745F08E2925
SHA-512:	73416098F58348B5BE5BA754DF7319C608CBB2C2E292B609316D04690A681A737761E989035FD2383DF4AC803167681E5F574090D45C2819D0F43E8AE0386602
Malicious:	false
Reputation:	low
Preview:	function notificationAttachEvents(){$('.notification-view').off('click.notification').on('click.notification',function(event){var elem=$(this);if(event.ctrlKey\|\|event.shiftKey\|\|event.metaKey\|\|(event.button&&event.button==1)){$('#notification-'+elem.data('notification')+' .notification-read').removeClass('hidden');$('#notification-'+elem.data('notification')+' .notification-unread').addClass('hidden');$('#notification-'+elem.data('notification')+' .notification-toggle-read').addClass('unread');$('#notification-'+elem.data('notification')+' .notification-toggle-read .fa-envelope').addClass('hidden');$('#notification-'+elem.data('notification')+' .notification-toggle-read .fa-envelope-open').removeClass('hidden');}else event.preventDefault();if(!elem.hasClass('disabled')){elem.addClass('disabled');$.post({url:'/notification/view/',data:{'notification':elem.data('notification'),'csrfmiddlewaretoken':Cookies.get('csrftoken')},success:function(result){if(result.success){if(!(event.ctrlKey\|\|e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\p2p-media-loader-core.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	143751
Entropy (8bit):	5.27806608451565
Encrypted:	false
SSDEEP:	3072:nD3fpQc9nd2HRI5pFtpEgB5thhppAiph/cVreihq:nD3AqpEStzsQ
MD5:	C9A8B05945FCE050129E32F96C4C9344
SHA1:	732E594DAAAE33E3141C4401EEB00E24D6255489
SHA-256:	6169AAE21CD0EF9813B6BDA9EC902DEE165C4C70202C37AF6EB0BC45CED0A872
SHA-512:	6FD7879ECDE5094AC89348B57F853B7A1143E2A9366DDCE50D267261B168A7513C2B72A14026BC4309584BD11906F6DC2830BE515A7E8F92F3F19EB7968D659F
Malicious:	false
Reputation:	low
Preview:	require=function e(t,n,r){function i(o,a){if(!n[o]){if(!t[o]){var u="function"==typeof require&&require;if(!a&&u)return u(o,!0);if(s)return s(o,!0);var c=new Error("Cannot find module '"+o+"'");throw c.code="MODULE_NOT_FOUND",c}var h=n[o]={exports:{}};t[o][0].call(h.exports,function(e){return i(t[o][1][e]\|\|e)},h,h.exports,e,t,n,r)}return n[o].exports}for(var s="function"==typeof require&&require,o=0;o<r.length;o++)i(r[o]);return i}({1:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0});const r=1e3,i=6e4;class s{constructor(e,t){this.value=e,this.timeStamp=t}}n.BandwidthApproximator=class{constructor(){this.lastBytes=[],this.currentBytesSum=0,this.lastBandwidth=[]}addBytes(e,t){for(this.lastBytes.push(new s(e,t)),this.currentBytesSum+=e;t-this.lastBytes[0].timeStamp>r;)this.currentBytesSum-=this.lastBytes.shift().value;this.lastBandwidth.push(new s(this.currentBytesSum/r,t))}getBandwidth(e){for(;0!=this.lastBandwidth.length&&e-this.lastBandwidth[0].timeStamp>i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pemberleyhousecarehome-Deaths2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 956x602, frames 3
Category:	dropped
Size (bytes):	201766
Entropy (8bit):	7.941429300570867
Encrypted:	false
SSDEEP:	6144:852nhYLNjB+qT7LmGoZmBDrQDQML7o95j4YDL8:85Kw9B3osrQzg7hDL8
MD5:	47646EC91175CCCE89BF3FD0CF807B88
SHA1:	5F10CDD8FF14898FC577FBF3745AE35015FFCCCD
SHA-256:	DC8E8BD234BAFDA23E7927FB01FAF358E7C8156799D96FFF3A51EE2842EFF364
SHA-512:	E763D22B2A1EDA457631DC833BEC602FEDBC43B8E010C617B1322B040C03591CF47F4ABD4DC330BFDBA2078AB48AA77CADE30EBD006510A5EFFDC782EECF4C48
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....."Exif..MM..........................?CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality.....C....................................................................C.......................................................................Z...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(.......o..1...$....\|..m7...f[o.x....7ex&.T..d.G..,.V....A\|N...7..k...Z.P....>6.........+....7....... .u.U"..j......>3...g...;X._.\|=..W.Z..g.4.F....0...U..U... .yz.2R\...(..Y+0.._...\|.W.[......\|........zv.l.)v<..........x..C.j?.4......gO.\|N.'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\playlist[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	11204
Entropy (8bit):	4.910794701315072
Encrypted:	false
SSDEEP:	192:Pdx3dFwR8RX2Ymm1m1ctmAmVmymWmt5zdmymF8gmFTmr:Pdx3dFwR8RXXH1m1GmAmVmymWmjdmymT
MD5:	9AF0EACCACD2539793569550809BBECB
SHA1:	0A14C8734EF8F7AAF5B775B23D9709FAE22C81F2
SHA-256:	1AC88238BD59BC1C7CD9BE15CB3FCF7F61874DCBDC8A618B58B3E2F34F88608B
SHA-512:	7CF47966A25FA722A2099C172C14298EE2B4E3A0282E58975AB54DE564528DFD9B6C1E1F50590E048313A996217602567496E7E617A059E69E2CD01CF06B48E6
Malicious:	false
Reputation:	low
Preview:	function playlistAttachEvents(){$('.playlist-play').off('click.playlist').on('click.playlist',function(){var elem=$(this);if(!elem.hasClass('disabled')){elem.addClass('disabled');$.post({url:'/playlist/play/',data:{'playlist':elem.data('playlist'),'csrfmiddlewaretoken':Cookies.get('csrftoken')},success:function(result){if(result.success){if(useSPA){window.history.replaceState({'url':window.location.href},'',window.location.href);spaChangePage(result.url,true);}else{window.location.href=result.url;}}else{toastr.error('Failed to watch playlist');}},complete:function(){elem.removeClass('disabled');}});}});$('.playlist-randomize').off('click.playlist').on('click.playlist',function(){var elem=$(this);if(!elem.hasClass('disabled')){elem.addClass('disabled');$.post({url:'/playlist/randomize/',data:{'playlist':elem.data('playlist'),'csrfmiddlewaretoken':Cookies.get('csrftoken')},success:function(result){if(result.success){if(useSPA){window.history.replaceState({'url':window.location.href},'',w

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 4, 2021 14:51:45.871903896 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:45.872026920 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.071675062 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.071784019 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.072449923 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.072557926 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.077343941 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.077790976 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.278819084 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.279046059 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.279908895 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.279959917 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280000925 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280014992 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280033112 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280040979 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280066967 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280069113 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280080080 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280098915 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280122995 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280148983 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280162096 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.280173063 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280175924 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.280214071 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.342951059 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.342997074 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.353204012 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.542845011 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.542943001 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.543926954 CET	443	49723	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.544020891 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.563831091 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.563885927 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.563924074 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.563927889 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.563949108 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.563971996 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.563996077 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.564012051 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.564014912 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.564055920 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.564069033 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.564097881 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.564102888 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.564138889 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.564140081 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.564182997 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.564184904 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.564224005 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.742713928 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.742798090 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.742822886 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.743182898 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764096022 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764178038 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764271021 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764298916 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764348030 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764353991 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764391899 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764453888 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764472961 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764534950 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764584064 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764656067 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764698982 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764770985 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764786959 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764831066 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764888048 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764947891 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.764950991 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.764987946 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765000105 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765028954 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765052080 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765090942 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765111923 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765129089 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765186071 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765193939 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765244961 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765301943 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765316010 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765322924 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765364885 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.765368938 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.765434027 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.849750996 CET	49723	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.853668928 CET	49726	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.854670048 CET	49727	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.855782032 CET	49728	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.856735945 CET	49729	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.942517042 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.942583084 CET	443	49724	54.191.156.9	192.168.2.3
Feb 4, 2021 14:51:46.942677975 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.942711115 CET	49724	443	192.168.2.3	54.191.156.9
Feb 4, 2021 14:51:46.942934990 CET	443	49724	54.191.156.9	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 4, 2021 14:51:45.798711061 CET	192.168.2.3	8.8.8.8	0x946e	Standard query (0)	healthimpactnews.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:47.094293118 CET	192.168.2.3	8.8.8.8	0x247	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:47.365466118 CET	192.168.2.3	8.8.8.8	0xcdce	Standard query (0)	campaigns.healthimpactnews.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:47.761588097 CET	192.168.2.3	8.8.8.8	0xe4db	Standard query (0)	s0.wp.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:48.894284964 CET	192.168.2.3	8.8.8.8	0xddcd	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:49.796355963 CET	192.168.2.3	8.8.8.8	0xe14e	Standard query (0)	w.likebtn.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.386991024 CET	192.168.2.3	8.8.8.8	0x4462	Standard query (0)	l.sharethis.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.417156935 CET	192.168.2.3	8.8.8.8	0xf5f0	Standard query (0)	ws.sharethis.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.601453066 CET	192.168.2.3	8.8.8.8	0xe029	Standard query (0)	l.sharethis.mgr.consensu.org	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.655606985 CET	192.168.2.3	8.8.8.8	0xa64e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.660567999 CET	192.168.2.3	8.8.8.8	0x5bab	Standard query (0)	amplify.outbrain.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.108766079 CET	192.168.2.3	8.8.8.8	0x9b48	Standard query (0)	tr.outbrain.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.393399954 CET	192.168.2.3	8.8.8.8	0x4e3d	Standard query (0)	www.bitchute.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.466897964 CET	192.168.2.3	8.8.8.8	0xe4a0	Standard query (0)	api.sharetrackr.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.801151037 CET	192.168.2.3	8.8.8.8	0xe67d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.844928026 CET	192.168.2.3	8.8.8.8	0xeccb	Standard query (0)	cdn.polyfill.io	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:52.222979069 CET	192.168.2.3	8.8.8.8	0xdf1f	Standard query (0)	jetpack.wordpress.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:52.560522079 CET	192.168.2.3	8.8.8.8	0x33f9	Standard query (0)	static-3.bitchute.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.262072086 CET	192.168.2.3	8.8.8.8	0x6739	Standard query (0)	seed132.bitchute.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.395308018 CET	192.168.2.3	8.8.8.8	0x6508	Standard query (0)	vaccineimpact.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.411077023 CET	192.168.2.3	8.8.8.8	0x3d12	Standard query (0)	medicalkidnap.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.354399920 CET	192.168.2.3	8.8.8.8	0x4637	Standard query (0)	pv.likebtn.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.389477015 CET	192.168.2.3	8.8.8.8	0xc359	Standard query (0)	wi.likebtn.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.914752007 CET	192.168.2.3	8.8.8.8	0x96a5	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.253278971 CET	192.168.2.3	8.8.8.8	0x4b8f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.394386053 CET	192.168.2.3	8.8.8.8	0x4c7a	Standard query (0)	1.gravatar.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.404504061 CET	192.168.2.3	8.8.8.8	0x14d1	Standard query (0)	0.gravatar.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.543229103 CET	192.168.2.3	8.8.8.8	0xaae9	Standard query (0)	public-api.wordpress.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:57.279457092 CET	192.168.2.3	8.8.8.8	0xc7eb	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:57.399040937 CET	192.168.2.3	8.8.8.8	0x7188	Standard query (0)	cdn.mewe.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:06.432055950 CET	192.168.2.3	8.8.8.8	0x9b98	Standard query (0)	healthimpactnews.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:09.117575884 CET	192.168.2.3	8.8.8.8	0xae19	Standard query (0)	commentfreely.bitchute.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:09.524532080 CET	192.168.2.3	8.8.8.8	0xc04a	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:15.796366930 CET	192.168.2.3	8.8.8.8	0x9d7f	Standard query (0)	gab.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:16.554127932 CET	192.168.2.3	8.8.8.8	0x1206	Standard query (0)	media.gab.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:17.854952097 CET	192.168.2.3	8.8.8.8	0x6393	Standard query (0)	www.minds.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:18.643591881 CET	192.168.2.3	8.8.8.8	0x33aa	Standard query (0)	cdn-assets.minds.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:24.216635942 CET	192.168.2.3	8.8.8.8	0x7555	Standard query (0)	cdn.minds.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.280896902 CET	192.168.2.3	8.8.8.8	0xb8f3	Standard query (0)	mewe.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.909066916 CET	192.168.2.3	8.8.8.8	0x3ade	Standard query (0)	secure.mewe.com	A (IP address)	IN (0x0001)
Feb 4, 2021 14:53:26.719316959 CET	192.168.2.3	8.8.8.8	0x2c51	Standard query (0)	cdn.onenote.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 4, 2021 14:51:45.861747026 CET	8.8.8.8	192.168.2.3	0x946e	No error (0)	healthimpactnews.com		54.191.156.9	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:47.140013933 CET	8.8.8.8	192.168.2.3	0x247	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:47.432126999 CET	8.8.8.8	192.168.2.3	0xcdce	No error (0)	campaigns.healthimpactnews.com		52.26.29.255	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:47.810096025 CET	8.8.8.8	192.168.2.3	0xe4db	No error (0)	s0.wp.com		192.0.77.32	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:48.956310034 CET	8.8.8.8	192.168.2.3	0xddcd	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:48.956310034 CET	8.8.8.8	192.168.2.3	0xddcd	No error (0)	stats.l.doubleclick.net		108.177.15.156	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:48.956310034 CET	8.8.8.8	192.168.2.3	0xddcd	No error (0)	stats.l.doubleclick.net		108.177.15.155	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:48.956310034 CET	8.8.8.8	192.168.2.3	0xddcd	No error (0)	stats.l.doubleclick.net		108.177.15.157	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:48.956310034 CET	8.8.8.8	192.168.2.3	0xddcd	No error (0)	stats.l.doubleclick.net		108.177.15.154	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:49.842097044 CET	8.8.8.8	192.168.2.3	0xe14e	No error (0)	w.likebtn.com		104.26.15.69	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:49.842097044 CET	8.8.8.8	192.168.2.3	0xe14e	No error (0)	w.likebtn.com		172.67.72.191	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:49.842097044 CET	8.8.8.8	192.168.2.3	0xe14e	No error (0)	w.likebtn.com		104.26.14.69	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.456933022 CET	8.8.8.8	192.168.2.3	0x4462	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:50.456933022 CET	8.8.8.8	192.168.2.3	0x4462	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.195.238.30	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.456933022 CET	8.8.8.8	192.168.2.3	0x4462	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		52.29.155.194	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.456933022 CET	8.8.8.8	192.168.2.3	0x4462	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.124.48.224	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.477216005 CET	8.8.8.8	192.168.2.3	0xf5f0	No error (0)	ws.sharethis.com	d3mdrpbbs8qfxa.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:50.477216005 CET	8.8.8.8	192.168.2.3	0xf5f0	No error (0)	d3mdrpbbs8qfxa.cloudfront.net		13.224.194.50	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.477216005 CET	8.8.8.8	192.168.2.3	0xf5f0	No error (0)	d3mdrpbbs8qfxa.cloudfront.net		13.224.194.57	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.477216005 CET	8.8.8.8	192.168.2.3	0xf5f0	No error (0)	d3mdrpbbs8qfxa.cloudfront.net		13.224.194.126	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.477216005 CET	8.8.8.8	192.168.2.3	0xf5f0	No error (0)	d3mdrpbbs8qfxa.cloudfront.net		13.224.194.56	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.659652948 CET	8.8.8.8	192.168.2.3	0xe029	No error (0)	l.sharethis.mgr.consensu.org		18.196.106.79	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.659652948 CET	8.8.8.8	192.168.2.3	0xe029	No error (0)	l.sharethis.mgr.consensu.org		3.124.49.113	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.659652948 CET	8.8.8.8	192.168.2.3	0xe029	No error (0)	l.sharethis.mgr.consensu.org		52.28.127.56	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.711245060 CET	8.8.8.8	192.168.2.3	0xa64e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:50.711245060 CET	8.8.8.8	192.168.2.3	0xa64e	No error (0)	scontent.xx.fbcdn.net		185.60.216.19	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:50.718832970 CET	8.8.8.8	192.168.2.3	0x5bab	No error (0)	amplify.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:51.154298067 CET	8.8.8.8	192.168.2.3	0x9b48	No error (0)	tr.outbrain.com	alldcs.outbrain.com		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:51.154298067 CET	8.8.8.8	192.168.2.3	0x9b48	No error (0)	alldcs.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:51.154298067 CET	8.8.8.8	192.168.2.3	0x9b48	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:51.154298067 CET	8.8.8.8	192.168.2.3	0x9b48	No error (0)	nydc1.outbrain.org		70.42.32.127	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.454071045 CET	8.8.8.8	192.168.2.3	0x4e3d	No error (0)	www.bitchute.com		104.26.6.35	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.454071045 CET	8.8.8.8	192.168.2.3	0x4e3d	No error (0)	www.bitchute.com		104.26.7.35	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.454071045 CET	8.8.8.8	192.168.2.3	0x4e3d	No error (0)	www.bitchute.com		172.67.68.161	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.523402929 CET	8.8.8.8	192.168.2.3	0xe4a0	No error (0)	api.sharetrackr.com		35.163.180.5	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.849579096 CET	8.8.8.8	192.168.2.3	0xe67d	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.849579096 CET	8.8.8.8	192.168.2.3	0xe67d	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:51.893671036 CET	8.8.8.8	192.168.2.3	0xeccb	No error (0)	cdn.polyfill.io	dualstack.f3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:52.268641949 CET	8.8.8.8	192.168.2.3	0xdf1f	No error (0)	jetpack.wordpress.com		192.0.78.32	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:52.268641949 CET	8.8.8.8	192.168.2.3	0xdf1f	No error (0)	jetpack.wordpress.com		192.0.78.33	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:52.630109072 CET	8.8.8.8	192.168.2.3	0x33f9	No error (0)	static-3.bitchute.com	bcimg.b-cdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:52.630109072 CET	8.8.8.8	192.168.2.3	0x33f9	No error (0)	bcimg.b-cdn.net		185.59.220.196	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.321702003 CET	8.8.8.8	192.168.2.3	0x6739	No error (0)	seed132.bitchute.com		192.187.126.2	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.321702003 CET	8.8.8.8	192.168.2.3	0x6739	No error (0)	seed132.bitchute.com		204.12.220.141	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.321702003 CET	8.8.8.8	192.168.2.3	0x6739	No error (0)	seed132.bitchute.com		204.12.220.117	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.453428030 CET	8.8.8.8	192.168.2.3	0x6508	No error (0)	vaccineimpact.com		54.191.156.9	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:53.467175007 CET	8.8.8.8	192.168.2.3	0x3d12	No error (0)	medicalkidnap.com		54.191.156.9	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.408843040 CET	8.8.8.8	192.168.2.3	0x4637	No error (0)	pv.likebtn.com		104.26.15.69	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.408843040 CET	8.8.8.8	192.168.2.3	0x4637	No error (0)	pv.likebtn.com		104.26.14.69	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.408843040 CET	8.8.8.8	192.168.2.3	0x4637	No error (0)	pv.likebtn.com		172.67.72.191	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.443573952 CET	8.8.8.8	192.168.2.3	0xc359	No error (0)	wi.likebtn.com		172.67.72.191	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.443573952 CET	8.8.8.8	192.168.2.3	0xc359	No error (0)	wi.likebtn.com		104.26.14.69	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.443573952 CET	8.8.8.8	192.168.2.3	0xc359	No error (0)	wi.likebtn.com		104.26.15.69	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:54.963280916 CET	8.8.8.8	192.168.2.3	0x96a5	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.314062119 CET	8.8.8.8	192.168.2.3	0x4b8f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:55.314062119 CET	8.8.8.8	192.168.2.3	0x4b8f	No error (0)	star-mini.c10r.facebook.com		185.60.216.35	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.446533918 CET	8.8.8.8	192.168.2.3	0x4c7a	No error (0)	1.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.456480980 CET	8.8.8.8	192.168.2.3	0x14d1	No error (0)	0.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.593946934 CET	8.8.8.8	192.168.2.3	0xaae9	No error (0)	public-api.wordpress.com		192.0.78.23	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:55.593946934 CET	8.8.8.8	192.168.2.3	0xaae9	No error (0)	public-api.wordpress.com		192.0.78.22	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:57.326535940 CET	8.8.8.8	192.168.2.3	0xc7eb	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:57.466048002 CET	8.8.8.8	192.168.2.3	0x7188	No error (0)	cdn.mewe.com	d1wttixtkwe5qj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:51:57.466048002 CET	8.8.8.8	192.168.2.3	0x7188	No error (0)	d1wttixtkwe5qj.cloudfront.net		143.204.93.51	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:57.466048002 CET	8.8.8.8	192.168.2.3	0x7188	No error (0)	d1wttixtkwe5qj.cloudfront.net		143.204.93.36	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:57.466048002 CET	8.8.8.8	192.168.2.3	0x7188	No error (0)	d1wttixtkwe5qj.cloudfront.net		143.204.93.39	A (IP address)	IN (0x0001)
Feb 4, 2021 14:51:57.466048002 CET	8.8.8.8	192.168.2.3	0x7188	No error (0)	d1wttixtkwe5qj.cloudfront.net		143.204.93.117	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:06.499102116 CET	8.8.8.8	192.168.2.3	0x9b98	No error (0)	healthimpactnews.com		54.191.156.9	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:09.171763897 CET	8.8.8.8	192.168.2.3	0xae19	No error (0)	commentfreely.bitchute.com		104.26.7.35	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:09.171763897 CET	8.8.8.8	192.168.2.3	0xae19	No error (0)	commentfreely.bitchute.com		104.26.6.35	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:09.171763897 CET	8.8.8.8	192.168.2.3	0xae19	No error (0)	commentfreely.bitchute.com		172.67.68.161	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:09.573096991 CET	8.8.8.8	192.168.2.3	0xc04a	No error (0)	cdn.jsdelivr.net	dualstack.f3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:52:15.853939056 CET	8.8.8.8	192.168.2.3	0x9d7f	No error (0)	gab.com		104.16.122.96	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:15.853939056 CET	8.8.8.8	192.168.2.3	0x9d7f	No error (0)	gab.com		104.16.121.96	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:16.613353014 CET	8.8.8.8	192.168.2.3	0x1206	No error (0)	media.gab.com		104.16.121.96	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:16.613353014 CET	8.8.8.8	192.168.2.3	0x1206	No error (0)	media.gab.com		104.16.122.96	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:17.920870066 CET	8.8.8.8	192.168.2.3	0x6393	No error (0)	www.minds.com		34.232.233.228	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:17.920870066 CET	8.8.8.8	192.168.2.3	0x6393	No error (0)	www.minds.com		34.200.65.15	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:18.700975895 CET	8.8.8.8	192.168.2.3	0x33aa	No error (0)	cdn-assets.minds.com		13.224.194.116	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:18.700975895 CET	8.8.8.8	192.168.2.3	0x33aa	No error (0)	cdn-assets.minds.com		13.224.194.46	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:18.700975895 CET	8.8.8.8	192.168.2.3	0x33aa	No error (0)	cdn-assets.minds.com		13.224.194.14	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:18.700975895 CET	8.8.8.8	192.168.2.3	0x33aa	No error (0)	cdn-assets.minds.com		13.224.194.102	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:24.277574062 CET	8.8.8.8	192.168.2.3	0x7555	No error (0)	cdn.minds.com		143.204.93.22	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:24.277574062 CET	8.8.8.8	192.168.2.3	0x7555	No error (0)	cdn.minds.com		143.204.93.88	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:24.277574062 CET	8.8.8.8	192.168.2.3	0x7555	No error (0)	cdn.minds.com		143.204.93.14	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:24.277574062 CET	8.8.8.8	192.168.2.3	0x7555	No error (0)	cdn.minds.com		143.204.93.52	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.248724937 CET	8.8.8.8	192.168.2.3	0x4b16	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:52:25.342952013 CET	8.8.8.8	192.168.2.3	0xb8f3	No error (0)	mewe.com		52.31.37.62	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.342952013 CET	8.8.8.8	192.168.2.3	0xb8f3	No error (0)	mewe.com		63.35.246.130	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.342952013 CET	8.8.8.8	192.168.2.3	0xb8f3	No error (0)	mewe.com		54.77.36.103	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.342952013 CET	8.8.8.8	192.168.2.3	0xb8f3	No error (0)	mewe.com		52.209.47.210	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.342952013 CET	8.8.8.8	192.168.2.3	0xb8f3	No error (0)	mewe.com		52.48.141.12	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.342952013 CET	8.8.8.8	192.168.2.3	0xb8f3	No error (0)	mewe.com		52.50.78.63	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.964624882 CET	8.8.8.8	192.168.2.3	0x3ade	No error (0)	secure.mewe.com		54.154.132.64	A (IP address)	IN (0x0001)
Feb 4, 2021 14:52:25.964624882 CET	8.8.8.8	192.168.2.3	0x3ade	No error (0)	secure.mewe.com		52.49.161.12	A (IP address)	IN (0x0001)
Feb 4, 2021 14:53:26.780386925 CET	8.8.8.8	192.168.2.3	0x2c51	No error (0)	cdn.onenote.net	cdn.onenote.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Feb 4, 2021 14:56:25.171272039 CET	8.8.8.8	192.168.2.3	0x9d9b	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)

HTTP Request Dependency Graph

healthimpactnews.com

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5780 Parent PID: 792

General

Start time:	14:51:43
Start date:	04/02/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff7b6c50000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 5060 Parent PID: 5780

General

Start time:	14:51:44
Start date:	04/02/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5780 CREDAT:17410 /prefetch:2
Imagebase:	0x1080000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://healthimpactnews.com/2020/doctors-around-the-world-issue-dire-warning-do-not-get-the-covid-vaccine/

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5780 Parent PID: 792

General

Analysis Process: iexplore.exe PID: 5060 Parent PID: 5780

General

Disassembly