Analysis Report https://www.ctc.ca.gov/educator-prep/program-accred-sch-act

There are no high impact signatures.

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 134.186.81.178:443 -> 192.168.2.4:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 134.186.81.178:443 -> 192.168.2.4:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 134.186.81.178:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.12.157:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.12.157:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.155:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.155:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.130.35:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.130.35:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.218.112:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.218.112:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.230.89:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.230.89:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.4:49790 version: TLS 1.2

Networking:

Found strings which match to known social media urls

Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: <a href="/" title="Home" class="utility-home-icon ca-gov-icon-home"><span class="sr-only">Home</span></a><a class="utility-social-facebook ca-gov-icon-facebook" href="https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.ca.gov%2F&display=popup" title="Share via Facebook" target="_blank"><span class="sr-only">Facebook</span></a><a class="utility-social-twitter ca-gov-icon-twitter" href="https://twitter.com/intent/tweet?text=CA.Gov%20:%20Services&amp;url=https%3A%2F%2Fwww.ca.gov%2FServices" title="Share via Twitter" target="_blank"><span class="sr-only">Twitter</span></a> equals www.facebook.com (Facebook)
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: <a href="/" title="Home" class="utility-home-icon ca-gov-icon-home"><span class="sr-only">Home</span></a><a class="utility-social-facebook ca-gov-icon-facebook" href="https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.ca.gov%2F&display=popup" title="Share via Facebook" target="_blank"><span class="sr-only">Facebook</span></a><a class="utility-social-twitter ca-gov-icon-twitter" href="https://twitter.com/intent/tweet?text=CA.Gov%20:%20Services&amp;url=https%3A%2F%2Fwww.ca.gov%2FServices" title="Share via Twitter" target="_blank"><span class="sr-only">Twitter</span></a> equals www.twitter.com (Twitter)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: facebookItem = facebookItem.replace("www.facebook.com/", ""); equals www.facebook.com (Facebook)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: textToDisplay += "<a aria-label=\"YouTube Information for " + this.apiData[r].FriendlyName + "\" href=\"https://www.youtube.com/" + equals www.youtube.com (Youtube)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: textToDisplay += "<a aria-label=\"Facebook Information for " + this.apiData[r].FriendlyName + "\" href=\"https://www.facebook.com/" + equals www.facebook.com (Facebook)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: twitterItem = twitterItem.replace("www.twitter.com/", ""); equals www.twitter.com (Twitter)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: youTubeItem = youTubeItem.replace("www.youtube.com/", ""); equals www.youtube.com (Youtube)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: cardToBuild += "<a aria-label=\"Facebook Information for " + agencyFriendlyName + "\" href=\"https://www.facebook.com/" + thisitem2 + "\" id=\"facebook-" + agencyId + "-" + agencyAcronym.replace( ' ', '') + "\"><span class=\"ca-gov-icon-facebook\" aria-hidden=\"true\"><span class=\"sr-only\">Facebook for " + agencyFriendlyName + "</span></span></a>"; equals www.facebook.com (Facebook)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: cardToBuild += "<a aria-label=\"YouTube Information for " + agencyFriendlyName + " \" href=\"https://www.youtube.com/" + thisitem3 + "\" id=\"youtube-" + agencyId + "-" + agencyAcronym.replace( ' ', '') + "\"><span class=\"ca-gov-icon-youtube\" aria-hidden=\"true\"><span class=\"sr-only\">YouTube for " + agencyFriendlyName + "</span></span></a>"; equals www.youtube.com (Youtube)
Source: cagov.core[1].js0.2.dr	String found in binary or memory: html.attr('src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id); equals www.youtube.com (Youtube)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: thisitem1 = thisitem1.replace("www.twitter.com/", ""); equals www.twitter.com (Twitter)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: thisitem2 = thisitem2.replace("www.facebook.com/", ""); equals www.facebook.com (Facebook)
Source: cagovapplets[1].js.2.dr	String found in binary or memory: thisitem3 = thisitem3.replace("www.youtube.com/", ""); equals www.youtube.com (Youtube)
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: <iframe src="https://www.youtube.com/embed/6D19FjzPJgc" style="width:560px; max-width:100%; height:315px;" frameborder="0" allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: plugins[1].js.2.dr	String found in binary or memory: $.getScript('https://www.youtube.com/iframe_api').fail(function () { equals www.youtube.com (Youtube)
Source: cagov.core[1].js0.2.dr	String found in binary or memory: PopupCentered('https://www.facebook.com/sharer/sharer.php?u=' + docURL + '&display=popup', 'socialsharer', '658', '450'); equals www.facebook.com (Facebook)
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: <div><h3>Commission Webinars on the COVID-19 Actions</h3><p><span class="red-color">Webinar questions and answers can be found below the table</span></p><table class="table table-bordered k-table"><thead><tr><th>Presentation</th><th>Date </th></tr></thead><tbody><tr><td><p><a href="https://www.youtube.com/watch?v=iqODcICtloE" target="_blank">Certification Update based on Executive Order N-66-20</a></p><ul><li><a href="/docs/default-source/commission/files/n-66-20-certification-webinar.pdf?sfvrsn=a68f2eb1_2" title="Slides">Slides</a></li></ul></td><td>6/11/2020</td></tr><tr><td><p><a href="https://www.youtube.com/watch?v=07DDUQQwLSE" target="_blank">Teacher Preparation Program Update based on Executive Order N-66-20</a></p><ul><li><a href="/docs/default-source/commission/files/n-66-20-teaching-program-update.pdf?sfvrsn=6d02eb1_2" title="Slides">Slides</a></li></ul></td><td>6/8/2020</td></tr><tr><td><p><a href="https://www.youtube.com/watch?v=sS1vsIdDD0Q&amp;feature=youtu.be" target="_blank">Administrator Preparation Program Update based on Executive Order N-66-20.</a></p><ul><li><a href="/docs/default-source/commission/files/n-66-20-administative-services-program-update.pdf?sfvrsn=8bd12eb1_2" title="Slides">Slides</a></li></ul></td><td>6/5/2020</td></tr><tr><td><p><a href="https://youtu.be/xuVK4qtneKg" target="_blank">Executive Order N-66-20</a></p><ul><li><a href="/docs/default-source/commission/files/eo-n-66-20-ada.pdf?sfvrsn=d4d92fb1_2" title="Slides">Slides</a></li></ul></td><td>6/1/2020</td></tr><tr><td><p><a href="https://youtu.be/ISAE6uSg_Yc" target="_blank">Preliminary Multiple Subject, Single Subject, and Education Specialist</a></p><ul><li><a href="/docs/default-source/commission/files/ada-compliant-prelim-prog-support-webinar-pp.pdf?sfvrsn=e6f92fb1_4" title="Slides">Slides</a></li></ul></td><td>5/4/2020</td></tr><tr><td><p><a href="https://www.youtube.com/watch?v=L879qHemJ2Y" target="_blank">CalTPA</a> (Preliminary Multiple Subject &amp; Single Subject)</p><ul><li><a href="/docs/default-source/commission/files/program-update-caltpa.pdf?sfvrsn=1d132cb1_2" title="Slides">Slides</a></li></ul></td><td>4/28/2020</td></tr><tr><td><p><a href="https://www.youtube.com/watch?v=ZzTqwvCgggc" target="_blank">Teacher Induction</a></p><ul><li><a href="/docs/default-source/commission/files/induction-program-support-webinar.pdf?sfvrsn=f1122cb1_4" title="Slides">Slides</a></li></ul></td><td>4/30/2020</td></tr><tr><td><p><a href="https://www.youtube.com/watch?v=iwHbKTJHavI" target="_blank">CalAPA</a> (Preliminary Administrative Services)</p><ul><li><a href="/docs/default-source/commission/files/program-update-calapa-ada.pdf?sfvrsn=6ef92fb1_2" title="Slides">Slides</a></li></ul></td><td>4/29/2020</td></tr><tr><td><p><a href="https://youtu.be/eYF-KJrgj6U" target="_blank">Administrator Induction</a></p><ul><li><a href="/docs/default-source/commission/files/webinar-casc-ada-compliant.pdf?sfvrsn=42f92fb1_2" title="Slides">Slides</a></li></ul></td><td>5/1/2
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: <div><h3>Program Guidance for COVID-19</h3><ul><li><a href="/docs/default-source/commission/files/teacher-preparation-guidance-ada.pdf?sfvrsn=afd12eb1_10" title="Multiple Subject, Single Subject, and Education Specialist (Preliminary and Induction)">Multiple Subject, Single Subject, and Education Specialist (Preliminary and Induction)</a>&nbsp;- <em>(Updated August 13, 2020)</em></li><li><a href="/docs/default-source/commission/files/covid-19-asc-prep-pog-suport-vtw.pdf?sfvrsn=dc152cb1_8" title="Administrative Services (Preliminary and Induction)">Administrative Services (Preliminary and Induction)</a>&nbsp;- <em>(Updated August 14, 2020)</em></li><li><a href="/docs/default-source/commission/files/covid-19-preparation-prog-support-pps-slp-on-vtw.pdf?sfvrsn=d71a2cb1_2" title="Pupil Personnel Services and Speech-Language Pathology">Pupil Personnel Services and Speech-Language Pathology</a></li><li><a href="https://www.youtube.com/watch?v=ePNNPPSwffg&amp;feature=youtu.be" target="_blank">Certification Office Hours Webinar - Questions on COVID Flexibilities</a> - <em>(August 27, 2020)</em></li></ul></div> equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: (g.Sm(b,"www.youtube.com"),c=b.toString()):c=Xx(c);b=new Zx(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: )https://www.youtube.com/embed/6D19FjzPJgc equals www.youtube.com (Youtube)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x11abd8c2,0x01d70a01</date><accdate>0x11abd8c2,0x01d70a01</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x11abd8c2,0x01d70a01</date><accdate>0x11abd8c2,0x01d70a01</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x11b09d99,0x01d70a01</date><accdate>0x11b09d99,0x01d70a01</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x11b09d99,0x01d70a01</date><accdate>0x11b09d99,0x01d70a01</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x11b09d99,0x01d70a01</date><accdate>0x11b09d99,0x01d70a01</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x11b09d99,0x01d70a01</date><accdate>0x11b09d99,0x01d70a01</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: <ul class="social-links"><li><a href="http://www.facebook.com/CalCTC" target="_blank"><label class="visuallyhidden" for="facebookfooter">Facebook</label><svg aria-hidden="true" class="icon icon-facebook" focusable="false" id="facebookfooter"><use xlink:href="#icon-facebook"></use></svg></a></li><li><a href="https://twitter.com/CalCTC" target="_blank"><label class="visuallyhidden" for="twitterfooter">Twitter</label><svg aria-hidden="true" class="icon icon-twitter" focusable="false" id="facebookfooter"><use xlink:href="#icon-twitter"></use></svg></a></li></ul></div></div> equals www.facebook.com (Facebook)
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: <ul class="social-links"><li><a href="http://www.facebook.com/CalCTC" target="_blank"><label class="visuallyhidden" for="facebookfooter">Facebook</label><svg aria-hidden="true" class="icon icon-facebook" focusable="false" id="facebookfooter"><use xlink:href="#icon-facebook"></use></svg></a></li><li><a href="https://twitter.com/CalCTC" target="_blank"><label class="visuallyhidden" for="twitterfooter">Twitter</label><svg aria-hidden="true" class="icon icon-twitter" focusable="false" id="facebookfooter"><use xlink:href="#icon-twitter"></use></svg></a></li></ul></div></div> equals www.twitter.com (Twitter)
Source: base[1].js.2.dr	String found in binary or memory: FC("en",a.host_language);this.fj=!this.ga&&Math.random()<g.R(this.experiments,"web_player_api_logging_fraction");this.ia=!this.ga;this.enabledEngageTypes=new Set;this.deviceHasDisplay=b?!b.deviceIsAudioOnly:T(!0,a.deviceHasDisplay);this.Uc=EC(this.Uc,a.ismb);t=a;g.oA(this.experiments,"html5_qoe_intercept")?t=g.oA(this.experiments,"html5_qoe_intercept"):this.Aj?(t=t.vss_host||"s.youtube.com",this.Z("www_for_videostats")&&"s.youtube.com"===t&&(t=$C(this.W)||"www.youtube.com")):t="video.google.com"; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: LK.prototype.replace=function(a,b){for(var c=g.q(a),d=c.next();!d.done;d=c.next())delete this.i[d.value.encryptedTokenJarContents];$ka(this,b)};MK.prototype.dn=function(a){var b,c,d=null===(b=a.responseContext)||void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.i=void 0,"TVHTML5"===(null===(c=a.responseContext)||void 0===c?void 0:c.clientName)?(this.localStorage=ala(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.Rq("YT_CL",JSON.stringify({E3:d}),15552E3,void 0,!0))};var PK;g.u(OK,Mr);OK.prototype.Ft=function(a,b){var c=Mr.prototype.Ft.call(this,a,b);return Object.assign(Object.assign({},c),this.i)};var tla=/[&\?]action_proxy=1/,sla=/[&\?]token=([\w-]*)/,ula=/[&\?]video_id=([\w-]*)/,vla=/[&\?]index=([\d-]*)/,wla=/[&\?]m_pos_ms=([\d-]*)/,zla=/[&\?]vvt=([\w-]*)/,Ala=/[&\?]mt=([\d-]*)/,nla="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),xla="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "), equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: Uga=function(a,b){if(!a.i["0"]){var c=new wA("0","fakesb",void 0,new sA(0,0,0,void 0,void 0,"auto"),null,null,1);a.i["0"]=b?new hz(new Zx("http://www.youtube.com/videoplayback"),c,"fake"):new Gy(new Zx("http://www.youtube.com/videoplayback"),c,new hv(0,0),new hv(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.eO.prototype.l=function(a){var b=this;cpa(this);var c=a.Fx,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c||d.I?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.Fc(hO(this,"TOO_MANY_REQUESTS_WITH_LINK",d.ul(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c||d.I?this.Fc(g.fO(a.errorMessage)):this.Fc(hO(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c= equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.jD=function(a){a=$C(a.W);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.clone=function(){var a=new Wm;a.u=this.u;this.i&&(a.i=this.i.clone(),a.l=this.l);return a};var cn="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Bda=/\bocr\b/;var Cda=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;var fD={mX:"LIVING_ROOM_APP_MODE_UNSPECIFIED",jX:"LIVING_ROOM_APP_MODE_MAIN",iX:"LIVING_ROOM_APP_MODE_KIDS",kX:"LIVING_ROOM_APP_MODE_MUSIC",lX:"LIVING_ROOM_APP_MODE_UNPLUGGED",hX:"LIVING_ROOM_APP_MODE_GAMING"},Gya={G_:"PLAYBACK_TYPE_UNKNOWN",A_:"PLAYBACK_TYPE_APPLICATION",z_:"PLAYBACK_TYPE_ADS",E_:"PLAYBACK_TYPE_REMOTE",F_:"PLAYBACK_TYPE_SECONDARY_CAMERA",D_:"PLAYBACK_TYPE_PREROLL_INTERSTITIAL",C_:"PLAYBACK_TYPE_POSTROLL_INTERSTITIAL",B_:"PLAYBACK_TYPE_MIDROLL_INTERSTITIAL"};fn.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.i[a]!=b&&(this.i[a]=b,this.l=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.kD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.VC(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,oq&&(a=zp())&&(b.ebc=a));return g.Id(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.zD=function(a){var b=g.kD(a);!a.Z("yt_embeds_disable_new_error_lozenge_url")&&pha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: l,"Trusted Ad Domain URL");this.ga=T(!1,a.privembed);this.protocol=0===this.oc.indexOf("http:")?"http":"https";this.W=Sx((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)||"")||Sx(this.oc)||this.protocol+"://www.youtube.com/";l=b?b.eventLabel:a.el;h="detailpage";"adunit"===l?h=this.l?"embedded":"detailpage":"embedded"===l||this.u?h=DC(h,l,mha):l&&(h="embedded");this.ea=h;wp();l=null;h=b?b.playerStyle:a.ps;var m=g.db(JC,h);!h||m&&!this.u||(l=h);this.playerStyle=l;this.J=(this.I=g.db(JC,this.playerStyle))&& equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: this.V("highrepfallback");else if(a.i){var d=this.l?this.l.l.B:null;if(Tua(a)&&d&&d.isLocked())var e="FORMAT_UNAVAILABLE";else if(!this.i.I&&"auth"===a.errorCode&&"429"===a.details.rc){e="TOO_MANY_REQUESTS";var f="6"}this.V("playererror",a.errorCode,e,g.LA(a.details),f)}else d=/^pp/.test(this.videoData.clientPlaybackNonce),pU(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(d="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.P)(),(new xT(d, equals www.youtube.com (Youtube)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: www.ctc.ca.gov

Urls found in memory or binary data

Source: plugins[1].js.2.dr	String found in binary or memory: http://api.jquery.com/event.namespace/
Source: plugins[1].js.2.dr	String found in binary or memory: http://api.jquery.com/jQuery.browser/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-misc-plugins/#scrollbarwidth
Source: plugins[1].js.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12140
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12273
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/6724
Source: plugins[1].js.2.dr	String found in binary or memory: http://caniuse.com/#feat=mutationobserver
Source: plugins[1].js.2.dr	String found in binary or memory: http://caniuse.com/#search=json)
Source: cse_element__en[1].js.2.dr	String found in binary or memory: http://code.google.com/apis/ajaxsearch/faq.html
Source: cagov.core[1].css0.2.dr	String found in binary or memory: http://commons.wikimedia.org/wiki/File:Blue_a_v.svg#mediaviewer/File:Blue_a_v.svg
Source: plugins[1].js.2.dr	String found in binary or memory: http://css-tricks.com/13465-persistent-headers/
Source: cagov.core[1].css0.2.dr	String found in binary or memory: http://daneden.github.io/animate.css/
Source: plugins[1].js.2.dr	String found in binary or memory: http://dev.aol.com/dhtml_style_guide/#mediaplayer
Source: plugins[1].js.2.dr	String found in binary or memory: http://dev.opera.com/articles/accessible-drag-and-drop/
Source: plugins[1].js.2.dr	String found in binary or memory: http://dev.w3.org/html5/spec-author-view/video.html
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://fancyapps.com/fancybox/
Source: plugins[1].js.2.dr	String found in binary or memory: http://html5doctor.com/u-element/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-destroy
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-find-by-element
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-refresh
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/destroy
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/destroy-all
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/disable
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/disable-all
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/enable
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/enable-all
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/first
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/group
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/last
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/next
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/previous
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/refresh-all
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/viewport-height
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/viewport-width
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/waypoint
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://img.youtube.com/vi/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://jsliang.github.com/eqHeight.coffee
Source: plugins[1].js.2.dr	String found in binary or memory: http://jsonlint.com/
Source: plugins[1].js.2.dr	String found in binary or memory: http://jsperf.com/jquery-vs-instanceof-jquery/2
Source: cagovapplets[1].js.2.dr	String found in binary or memory: http://maps.google.com/?daddr=
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://oaa-accessibility.org/examplep/accordian1/
Source: plugins[1].js.2.dr	String found in binary or memory: http://regexr.com/3c3tk
Source: NGH2BVFL.htm.2.dr	String found in binary or memory: http://registertovote.ca.gov/
Source: cagovapplets[1].js.2.dr	String found in binary or memory: http://schema.org/Organization
Source: plugins[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/a/20892048/145346
Source: plugins[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/q/14990971/145346
Source: plugins[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/q/36449711/145346
Source: plugins[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/12301435/html5-video-tag-volume-support
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://stackoverflow.com/questions/17328742
Source: plugins[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3217492/list-of-language-codes-in-yaml-or-json/4900304#4900304
Source: plugins[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/5312849/jquery-find-self;
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://stackoverflow.com/questions/9361968/
Source: plugins[1].js.2.dr	String found in binary or memory: http://support.jwplayer.com/customer/portal/articles/1413089-javascript-api-reference
Source: plugins[1].js.2.dr	String found in binary or memory: http://support.jwplayer.com/customer/portal/articles/1413113-configuration-options-reference
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: http://t.co/dKP3o1e
Source: plugins[1].js.2.dr	String found in binary or memory: http://terrillthompson.com/blog/648
Source: cagov.core[1].css0.2.dr	String found in binary or memory: http://v4-alpha.getbootstrap.com/components/utilities/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://webstandards.ca.gov/tools/design-enhancements/breadcrumbs/
Source: msapplication.xml.1.dr	String found in binary or memory: http://www.amazon.com/
Source: element_main[1].js.2.dr	String found in binary or memory: http://www.broofa.com
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: http://www.ca.gov/
Source: NGH2BVFL.htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/commission/covid-19-commission-action-related-to-covid-19
Source: credentials[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials
Source: apply[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/apply
Source: clear-credential[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/clear-credential
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/complete-recommend
Source: ctc-online-written-instructions[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/ctc-online-written-instructions
Source: extend[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/extend
Source: NGH2BVFL.htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/renew
Source: req-credentials[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/req-credentials
Source: apply[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/req-credentials.html
Source: apply[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/credentials/submit-online.html
Source: program-accred-sch-act[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/educator-prep/program-accred-sch-act
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/search-results/credentials-search/credentials
Source: program-accred-sch-act[1].htm.2.dr	String found in binary or memory: http://www.ctc.ca.gov/search-results/program-sponsors-search/program-sponsors
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://www.gianlucaguarini.com/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://www.goodwebpractices.com/roi/track-downloads-in-google-analytics-automatically.html
Source: cse_element__en[1].js.2.dr	String found in binary or memory: http://www.google.com
Source: msapplication.xml1.1.dr	String found in binary or memory: http://www.google.com/
Source: cse_element__en[1].js.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: cagov.core[1].js0.2.dr	String found in binary or memory: http://www.hnldesign.nl/work/code/check-if-element-is-visible/
Source: plugins[1].js.2.dr	String found in binary or memory: http://www.javascripttoolbox.com/lib/table/examples.php
Source: plugins[1].js.2.dr	String found in binary or memory: http://www.javascripttoolbox.com/temp/table_cellindex.html
Source: plugins[1].js.2.dr	String found in binary or memory: http://www.kellegous.com/j/2013/02/27/innertext-vs-textcontent/
Source: msapplication.xml2.1.dr	String found in binary or memory: http://www.live.com/
Source: msapplication.xml3.1.dr	String found in binary or memory: http://www.nytimes.com/
Source: plugins[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: msapplication.xml4.1.dr	String found in binary or memory: http://www.reddit.com/
Source: msapplication.xml5.1.dr	String found in binary or memory: http://www.twitter.com/
Source: plugins[1].js.2.dr	String found in binary or memory: http://www.w3schools.com/tags/tag_ruby.asp
Source: msapplication.xml6.1.dr	String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.1.dr	String found in binary or memory: http://www.youtube.com/
Source: base[1].js.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://COVID19.CA.gov
Source: base[1].js.2.dr	String found in binary or memory: https://admin.youtube.com
Source: gtm[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: gtm[1].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: cagovapplets[1].js.2.dr	String found in binary or memory: https://api.stateentityprofile.ca.gov/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Summer/Day/Summer-Day-G
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Summer/Day/Summer-Day-M
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Summer/Day/Summer-Day-O
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Summer/Night/Summer-Nig
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Winter/Day/GettyImages-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Winter/Day/Parks-090-P9
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Bay-Area/Winter/Night/GettyImage
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Summer/Day/GettyIm
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Summer/Day/Summer-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Summer/Night/Getty
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Summer/Night/Summe
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Winter/Day/Bixby-B
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Winter/Day/Parks-0
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Coast/Winter/Night/Getty
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Sierra/Summer/Day/Day-Su
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Sierra/Summer/Day/Summer
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Sierra/Summer/Night/Summ
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Sierra/Winter/Day/GettyI
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Sierra/Winter/Day/Parks-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Sierra/Winter/Night/Gett
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Valley/Summer/Day/Summer
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Valley/Summer/Night/Summ
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Valley/Winter/Day/GettyI
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Valley/Winter/Night/Gett
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Central-Valley/Winter/Night/SRA-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Inland-Empire/Summer/Day/Summer-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Inland-Empire/Summer/Night/Summe
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Inland-Empire/Winter/Day/GettyIm
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Inland-Empire/Winter/Night/Getty
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Los-Angeles/Summer/Day/GettyImag
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Los-Angeles/Summer/Day/Summer-Da
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Los-Angeles/Summer/Night/GettyIm
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Los-Angeles/Summer/Night/Summer-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Los-Angeles/Winter/Day/GettyImag
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Los-Angeles/Winter/Night/GettyIm
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Orange-County/Summer/Day/Summer-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Orange-County/Summer/Night/Getty
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Orange-County/Summer/Night/Summe
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Orange-County/Winter/Day/GettyIm
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Orange-County/Winter/Day/SP-090-
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Orange-County/Winter/Night/Getty
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Sacramento-Region/Summer/Day/Sum
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Sacramento-Region/Summer/Night/G
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Sacramento-Region/Summer/Night/S
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Sacramento-Region/Winter/Day/Get
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Sacramento-Region/Winter/Day/Win
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/Sacramento-Region/Winter/Night/G
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/San-Diego-Imperial/Summer/Day/Ge
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/San-Diego-Imperial/Summer/Day/Su
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/San-Diego-Imperial/Summer/Night/
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/San-Diego-Imperial/Winter/Day/Ge
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/San-Diego-Imperial/Winter/Day/Wi
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/San-Diego-Imperial/Winter/Night/
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Summer/Day/Summer-Day-Ge
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Summer/Day/Summer-Day-Hu
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Summer/Night/Summer-Nigh
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Summer/Night/Weed-Califo
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Winter/Day/GettyImages-1
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Winter/Day/GettyImages-6
Source: js4geo[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/Hero-Banner-Images/UpState/Winter/Night/GettyImages
Source: cagovapplets[1].js.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/images/Uploads
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/js/cagovapplets.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/CAgovPortal/offline/dialog_cagov-final.css
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/css/cagov.core.css
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/css/colorscheme-oceanside.css
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-114x114.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-120x120.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-144x144.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-152x152.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-180x180.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-57x57.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-72x72.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon-precomposed.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/images/apple-touch-icon.png
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/js/libs/html5shiv.min.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/js/libs/jquery-migrate.min.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/js/libs/jquery.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/js/libs/respond.min.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://california.azureedge.net/cdt/statetemplate/6.0.1/js/libs/selectivizr-min.js
Source: gtm[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.4.1.min.js
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-migrate-3.1.0.min.js
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://codepen.io/lemagus/pen/RWxEYz
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://cse.google.com/?ref=b&hl=en
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://cse.google.com/cse.js?cx=
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://cse.google.com/cse/element/v1
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://cse.google.com/cse?cx=
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://csqr-autopush.corp.google.com/cse/element/v1
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://css-tricks.com/slightly-careful-sub-elements-clickable-things/
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://data.ca.gov/api/3/action/package_list
Source: custom[1].css.2.dr	String found in binary or memory: https://datatables.net/download
Source: custom[1].css.2.dr	String found in binary or memory: https://datatables.net/download/#dt/dt-1.10.12
Source: js4geo[1].js.2.dr	String found in binary or memory: https://dev.virtualearth.net/REST/v1/Locations
Source: plugins[1].js.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/dev/dev_jscript
Source: plugins[1].js.2.dr	String found in binary or memory: https://developers.google.com/apis-explorer/#s/youtube/v3/
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://developers.google.com/custom-search/docs/element.
Source: plugins[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference
Source: plugins[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/player_parameters?playerVersion=HTML5
Source: plugins[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/v3
Source: plugins[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/v3/docs/captions/download
Source: base[1].js.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: complete-recommend[1].htm.2.dr, ctc-online-written-instructions[1].htm.2.dr	String found in binary or memory: https://educator.ctc.ca.gov/esales_enu/start.swe?SWECmd=GotoView&SWEView=CTC
Source: NGH2BVFL.htm.2.dr	String found in binary or memory: https://educator.ctc.ca.gov/esales_enu/start.swe?SWECmd=GotoView&SWEView=Login
Source: NGH2BVFL.htm.2.dr	String found in binary or memory: https://educator.ctc.ca.gov/siebel/app/esales/enu?SWECmd=GotoView&SWEView=CTC
Source: complete-recommend[1].htm.2.dr, NGH2BVFL.htm.2.dr	String found in binary or memory: https://educator.ctc.ca.gov/siebel/app/esales/enu?SWECmd=GotoView&SWEView=Login
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Asap
Source: custom[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/asapcondensed/v7/pxidypY1o9NHyXh3WvSbGSggdOeMaEo.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/asapcondensed/v7/pxieypY1o9NHyXh3WvSbGSggdO9TTFlDim0.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu51xIIzQ.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9fBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v14/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v14/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdo.woff)
Source: program-accred-sch-act[1].htm.2.dr	String found in binary or memory: https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ctc.ca.gov%2Feducator-prep%2Fp
Source: cagov.core[1].css0.2.dr	String found in binary or memory: https://getbootstrap.com/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: plugins[1].js.2.dr	String found in binary or memory: https://gist.github.com/paulirish/5558557
Source: plugins[1].js.2.dr	String found in binary or memory: https://gist.github.com/purtuga/8257269
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/issues/373).
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/FezVrasta/popper.js/pull/715
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/Keyamoon/svgxuse
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/css-filters.js
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/svg-filters.js
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/OwlFonk/OwlCarousel2
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/ableplayer/ableplayer/issues/162
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/ableplayer/ableplayer/issues/81
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blog/master/licenses.txt
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/jmosbech/StickyTableHeaders
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/jsliang/eqHeight.coffee
Source: gtm[1].js.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/louisremi/jquery-smartresize/blob/master/jquery.debouncedresize.js
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/mattyork/fuzzy
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/nico3333fr/van11y-accessible-accordion-aria/blob/master/LICENSE
Source: plugins[1].js.2.dr	String found in binary or memory: https://github.com/overset/javascript-natural-sort
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/24251
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://goo.gl/Gs1KIc.
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://goo.gl/pxwQGp)
Source: program-accred-sch-act[1].htm.2.dr	String found in binary or memory: https://info.ctc.ca.gov/fmp/accreditation/accreditation_reports.php
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://info.ctc.ca.gov/fmp/program-sponsors-contact/all.php
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.5/css/bootstrap.min.css
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://modernizr.com/download/?-flexbox-setclasses
Source: gtm[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: base[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://plus.google.com/share?url=
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://popper.js.org
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://popper.js.org/)
Source: widgets[1].js.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: cagovapplets[1].js.2.dr	String found in binary or memory: https://stateentityprofile.ca.gov/Uploads
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: element_main[1].js.2.dr	String found in binary or memory: https://translate.google.com
Source: cagovapplets[1].js.2.dr	String found in binary or memory: https://twitter.com/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://van11y.net/accessible-accordion/
Source: base[1].js.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://vimeo.com/:id
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ca.gov/
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ca.gov/%%www.ca.gov
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ca.gov/Hwww.ca.gov
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.ca.gov/agency/
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.ca.gov/images/apple-touch-icon-192x192.pngkG
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ca.gov/ov
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ca.gov/ov/educator-prep/program-accred-sch-act#main-anchorcovid-19(
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.ca.gov/service/
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/Root
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/commission/covid-19-commission-action-related-to-covid-19Root
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentials/applyRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentials/clear-credentialn-ls/complete-recommend
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentials/complete-recommendRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentials/ctc-online-written-ls/complete-recommend
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentials/extenddentialsn-ls/complete-recommend
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentials/req-credentialsn-ls/complete-recommend
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/credentialspplyRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.c/educator-prep/program-accred-sch-act#main-anchorcovid-19Root
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.cRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ctc-online-written-instructions[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov//www.ctc.ca.gov/favicon.ico
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/commission/covid-19-commission-action-related-to-covid-19
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentiaRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/apply
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/apply0Apply
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/applyls
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/applyr
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/clear-credential
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/clear-credentialn-instructions
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#help
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#more
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#pfq
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#program
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#recommend
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#return
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend#video
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/complete-recommend8Complete
Source: apply[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/ctc-online---login-help
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr, ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/ctc-online-written-instructions
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/ctc-online-written-instructionszCTC
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/extend
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/extend(Extensions
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/extenddentialsn-instructions
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/extenddentialsn-instructionst
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/req-credentials
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/req-credentials.Credential
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials/req-credentialsn-instructions
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentials2Credentialing
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentialspply
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/credentialspplyc.ca.gov/credentials/apply
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/docs/default-source/commission/files/accessibility-cert-2019-07-01.pdf
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/docs/default-source/leaflets/41-nc.pdf
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/ducator-prep/program-accred-sch-act#main-anchorcovid-19tps://www.ca.gov/%%www
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sRoot
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sch-act
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sch-act#main-anchor
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sch-act#main-anchorcovid-19
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sch-act&
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sch-actJAccreditation
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred-sch-actRoot
Source: program-accred-sch-act[1].htm.2.dr	String found in binary or memory: https://www.ctc.ca.gov/educator-prep/program-accred/annual-data-submission
Source: ~DFC50940B530D7E907.TMP.1.dr	String found in binary or memory: https://www.ctc.ca.gov/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.ctc.ca.gov/favicon.ico~
Source: {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.ctc.cch-act
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: cse_element__en[1].js.2.dr, gtm[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://www.google.com/cse/static
Source: f[1].txt.2.dr	String found in binary or memory: https://www.google.com/cse/static/element/%
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://www.google.com/cse/static/images/1x/
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://www.google.com/cse/static/images/2x/
Source: f[1].txt.2.dr	String found in binary or memory: https://www.google.com/cse/static/style/look/%
Source: element_main[1].js.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: element_main[1].js.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: base[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/customsearch/v1element?key=AIzaSyCVAXiUzRYsML1Pv6RwSG1gunmMikTzQqY&rsz=
Source: cse_element__en[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/generate_204
Source: gtm[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PZGPNNV
Source: NGH2BVFL.htm.2.dr	String found in binary or memory: https://www.gov.ca.gov
Source: remote[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: element_main[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: element_main[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: element_main[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.surveymonkey.com/r/GFDXW5B?source=ca
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.surveymonkey.com/r/GFDXW5B?source=ca&src=
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.surveymonkey.com/r/K8JNQF3?source=ca
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.surveymonkey.com/r/T2V3FMJ?source=ca
Source: DRHAAZ24.htm.2.dr	String found in binary or memory: https://www.surveymonkey.com/r/YF8KGLW?source=ca&src=
Source: cagovapplets[1].js.2.dr	String found in binary or memory: https://www.youtube.com/
Source: complete-recommend[1].htm.2.dr, {3885491A-75F4-11EB-90EB-ECF4BBEA1588}.dat.1.dr	String found in binary or memory: https://www.youtube.com/embed/6D19FjzPJgc
Source: base[1].js.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: plugins[1].js.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=07DDUQQwLSE
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=L879qHemJ2Y
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=ZzTqwvCgggc
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=ePNNPPSwffg&feature=youtu.be
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=iqODcICtloE
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=iwHbKTJHavI
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=sS1vsIdDD0Q&feature=youtu.be
Source: complete-recommend[1].htm.2.dr	String found in binary or memory: https://wwwedit.ctc.ca.gov/credentials
Source: ctc-online-written-instructions[1].htm.2.dr	String found in binary or memory: https://wwwedit.ctc.ca.gov/images/default-source/cert-images/ctc-online-help/apps-payments/app---ren
Source: ctc-online-written-instructions[1].htm.2.dr	String found in binary or memory: https://wwwedit.ctc.ca.gov/images/default-source/cert-images/ctc-online-help/apps-payments/app---sel
Source: base[1].js.2.dr	String found in binary or memory: https://youtu.be/
Source: cagov.core[1].js0.2.dr	String found in binary or memory: https://youtu.be/:id
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://youtu.be/ISAE6uSg_Yc
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://youtu.be/P4qBIGBKP5s
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://youtu.be/eYF-KJrgj6U
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://youtu.be/s61CVECGQHI
Source: covid-19-commission-action-related-to-covid-19[1].htm.2.dr	String found in binary or memory: https://youtu.be/xuVK4qtneKg
Source: base[1].js.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: base[1].js.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.2.dr	String found in binary or memory: https://yurt.corp.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 134.186.81.178:443 -> 192.168.2.4:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 134.186.81.178:443 -> 192.168.2.4:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 134.186.81.178:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.12.157:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.12.157:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.155:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.206.155:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.130.35:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.130.35:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.218.112:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.218.112:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.230.89:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.230.89:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.4:49790 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: clean0.win@3/136@14/8

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{38854918-75F4-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF358A34EB9D432497.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4980 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4980 CREDAT:17410 /prefetch:2			Jump to behavior

Tries to open an application configuration file (.cfg)

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior