Play interactive tour

Edit tour

Analysis Report http://www.covid19-siparadigm.com

Overview

General Information

Sample URL:	http://www.covid19-siparadigm.com
Analysis ID:	367641
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 5640 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 580 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5640 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: Title: Log in! does not match URL
Source: https://www.covid19-siparadigm.com/en/forgot_password	HTTP Parser: Title: Forgot password! does not match URL
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: Title: Log in! does not match URL
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: Title: Log in! does not match URL
Source: https://www.covid19-siparadigm.com/en/forgot_password	HTTP Parser: Title: Forgot password! does not match URL
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: Title: Log in! does not match URL

Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="author".. found
Source: https://www.covid19-siparadigm.com/en/forgot_password	HTTP Parser: No <meta name="author".. found
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="author".. found
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="author".. found
Source: https://www.covid19-siparadigm.com/en/forgot_password	HTTP Parser: No <meta name="author".. found
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="author".. found

Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.covid19-siparadigm.com/en/forgot_password	HTTP Parser: No <meta name="copyright".. found
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.covid19-siparadigm.com/en/forgot_password	HTTP Parser: No <meta name="copyright".. found
Source: https://www.covid19-siparadigm.com/en/login	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: unknown	HTTPS traffic detected: 35.155.101.78:443 -> 192.168.2.3:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49713 version: TLS 1.2

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.covid19-siparadigm.comConnection: Keep-Alive

Source: login[1].htm.3.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=3692194074184385&ev=PageView equals www.facebook.com (Facebook)
Source: fbevents[1].js0.3.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func

Source: unknown

DNS traffic detected: queries for: www.covid19-siparadigm.com

Source: chartjs-plugin-datalabels[1].js.3.dr	String found in binary or memory: http://chartjs.org/
Source: datatables.min[1].js.3.dr	String found in binary or memory: http://datatables.net/tn/
Source: bootstrap-datepicker3.min[1].css.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: analytics[1].js.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: Sortable[1].js.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=505521
Source: forgot_password[1].htm.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/select2
Source: login[1].htm.3.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: datatables.min[1].js.3.dr	String found in binary or memory: https://datatables.net/download
Source: datatables.min[1].js.3.dr	String found in binary or memory: https://datatables.net/download/#bs4/dt-1.10.16/af-2.2.2/b-1.5.1/cr-1.4.1/fc-3.2.4/fh-3.1.3/kt-2.3.2
Source: datatables.min[1].js.3.dr	String found in binary or memory: https://datatables.net/tn/11
Source: cropper.min[1].js.3.dr	String found in binary or memory: https://fengyuanchen.github.io/cropperjs
Source: dore.light.blue[1].css.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Cairo:300
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v9/SLXGc1nY6HkvalIhTp0.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6HkvalqKbI6L59A.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6Hkvalqaa46L59A.woff)
Source: css[1].css.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6Hkvalr-ao6L59A.woff)
Source: fullcalendar.min[1].js.3.dr	String found in binary or memory: https://fullcalendar.io/
Source: bootstrap.min[1].css.3.dr, bootstrap.bundle.min[1].js.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: owl.carousel.min[1].css.3.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: typeahead.bundle[1].js.3.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: Chart.bundle.min[1].js.3.dr	String found in binary or memory: https://github.com/chartjs/Chart.js/blob/master/LICENSE.md
Source: chartjs-plugin-datalabels[1].js.3.dr	String found in binary or memory: https://github.com/chartjs/chartjs-plugin-datalabels/blob/master/LICENSE.md
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: bootstrap-notify.min[1].js.3.dr	String found in binary or memory: https://github.com/mouse0270/bootstrap-growl
Source: select2.full.min[1].js.3.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: bootstrap.min[1].css.3.dr, bootstrap.bundle.min[1].js.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.bundle.min[1].js.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: bootstrap-datepicker3.min[1].css.3.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: jquery.validate.min[1].js.3.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: analytics[1].js.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: ~DF9417F44143076A8B.TMP.1.dr	String found in binary or memory: https://www.covid19-siparadigm.com/en/forgot_password
Source: ~DF9417F44143076A8B.TMP.1.dr	String found in binary or memory: https://www.covid19-siparadigm.com/en/login
Source: {9D8214F7-82F5-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.covid19-siparadigm.com/en/loginRoot
Source: ~DF9417F44143076A8B.TMP.1.dr	String found in binary or memory: https://www.covid19-siparadigm.com/en/loginx
Source: imagestore.dat.3.dr	String found in binary or memory: https://www.covid19-siparadigm.com/favicon.ico
Source: imagestore.dat.3.dr	String found in binary or memory: https://www.covid19-siparadigm.com/favicon.ico~
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://www.google.com
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion/
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: googleAnalytics[1].js.3.dr	String found in binary or memory: https://www.googletraveladservices.com/travel/clk/pagead/conversion/

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown	HTTPS traffic detected: 35.155.101.78:443 -> 192.168.2.3:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.3:49713 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@3/75@4/2

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFD785E640233A2FFA.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5640 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5640 CREDAT:17410 /prefetch:2

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.covid19-siparadigm.com	0%	Virustotal		Browse
http://www.covid19-siparadigm.com	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
www.covid19-siparadigm.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://www.covid19-siparadigm.com/en/login	0%	Virustotal		Browse
https://www.covid19-siparadigm.com/en/loginx	0%	Avira URL Cloud	safe
https://www.covid19-siparadigm.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.covid19-siparadigm.com/en/loginRoot	0%	Avira URL Cloud	safe
http://www.covid19-siparadigm.com/	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.covid19-siparadigm.com/favicon.ico~	0%	Avira URL Cloud	safe
https://fengyuanchen.github.io/cropperjs	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scontent.xx.fbcdn.net	185.60.216.19	true	false		high
neovare-alb-285209131.us-west-2.elb.amazonaws.com	35.155.101.78	true	false		high
www.covid19-siparadigm.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false		high
favicon.ico	unknown	unknown	false		unknown
connect.facebook.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.covid19-siparadigm.com/en/login	false	0%, Virustotal, Browse	unknown
https://www.covid19-siparadigm.com/en/forgot_password	false		unknown
http://www.covid19-siparadigm.com/	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://jqueryvalidation.org/	jquery.validate.min[1].js.3.dr	false		high
https://datatables.net/tn/11	datatables.min[1].js.3.dr	false		high
https://www.googletraveladservices.com/travel/clk/pagead/conversion/	googleAnalytics[1].js.3.dr	false		high
https://github.com/chartjs/Chart.js/blob/master/LICENSE.md	Chart.bundle.min[1].js.3.dr	false		high
http://chartjs.org/	chartjs-plugin-datalabels[1].js.3.dr	false		high
https://www.covid19-siparadigm.com/en/login	~DF9417F44143076A8B.TMP.1.dr	false	0%, Virustotal, Browse	unknown
https://getbootstrap.com/)	bootstrap.min[1].css.3.dr, bootstrap.bundle.min[1].js.3.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	select2.full.min[1].js.3.dr	false		high
https://www.covid19-siparadigm.com/en/loginx	~DF9417F44143076A8B.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/mouse0270/bootstrap-growl	bootstrap-notify.min[1].js.3.dr	false		high
https://www.covid19-siparadigm.com/favicon.ico	imagestore.dat.3.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=505521	Sortable[1].js.3.dr	false		high
https://www.covid19-siparadigm.com/en/loginRoot	{9D8214F7-82F5-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://datatables.net/download/#bs4/dt-1.10.16/af-2.2.2/b-1.5.1/cr-1.4.1/fc-3.2.4/fh-3.1.3/kt-2.3.2	datatables.min[1].js.3.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	bootstrap.bundle.min[1].js.3.dr	false		high
https://www.google.%/ads/ga-audiences	analytics[1].js.3.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
http://www.apache.org/licenses/LICENSE-2.0)	bootstrap-datepicker3.min[1].css.3.dr	false		high
https://connect.facebook.net/en_US/fbevents.js	login[1].htm.3.dr	false		high
https://github.com/uxsolutions/bootstrap-datepicker)	bootstrap-datepicker3.min[1].css.3.dr	false		high
http://datatables.net/tn/	datatables.min[1].js.3.dr	false		high
https://github.com/chartjs/chartjs-plugin-datalabels/blob/master/LICENSE.md	chartjs-plugin-datalabels[1].js.3.dr	false		high
https://github.com/krux/postscribe/blob/master/LICENSE.	googleAnalytics[1].js.3.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	bootstrap.min[1].css.3.dr, bootstrap.bundle.min[1].js.3.dr	false		high
https://cdn.jsdelivr.net/npm/select2	forgot_password[1].htm.3.dr	false		high
https://stats.g.doubleclick.net/j/collect	analytics[1].js.3.dr	false		high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	typeahead.bundle[1].js.3.dr	false		high
https://datatables.net/download	datatables.min[1].js.3.dr	false		high
https://www.covid19-siparadigm.com/favicon.ico~	imagestore.dat.3.dr	false	Avira URL Cloud: safe	unknown
https://fullcalendar.io/	fullcalendar.min[1].js.3.dr	false		high
https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE	owl.carousel.min[1].css.3.dr	false		high
https://fengyuanchen.github.io/cropperjs	cropper.min[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.covid19-siparadigm.com/en/forgot_password	~DF9417F44143076A8B.TMP.1.dr	false		unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.60.216.19	scontent.xx.fbcdn.net	Ireland		32934	FACEBOOKUS	false
35.155.101.78	neovare-alb-285209131.us-west-2.elb.amazonaws.com	United States		16509	AMAZON-02US	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	367641
Start date:	11.03.2021
Start time:	21:40:58
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 28s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.covid19-siparadigm.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@3/75@4/2
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://www.covid19-siparadigm.com/en/ Browsing link: https://www.covid19-siparadigm.com/en/forgot_password
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, ielowutil.exe, backgroundTaskHost.exe, svchost.exe TCP Packets have been reduced to 100 Excluded IPs from analysis (whitelisted): 52.255.188.83, 204.79.197.200, 13.107.21.200, 93.184.220.29, 104.42.151.234, 168.61.161.212, 104.43.139.144, 172.227.100.57, 40.88.32.150, 216.58.212.174, 172.217.22.202, 216.58.207.163, 52.147.198.201, 20.82.209.183, 152.199.19.161, 151.101.2.109, 151.101.66.109, 151.101.130.109, 151.101.194.109, 23.57.80.111 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, cs9.wac.phicdn.net, arc.msn.com.nsatc.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, skypedataprdcoleus15.cloudapp.net, go.microsoft.com, ocsp.digicert.com, www-bing-com.dual-a-0001.a-msedge.net, watson.telemetry.microsoft.com, prod.fs.microsoft.com.akadns.net, dualstack.f3.shared.global.fastly.net, www.google-analytics.com, www.bing.com, fonts.googleapis.com, fs.microsoft.com, www-google-analytics.l.google.com, dual-a-0001.a-msedge.net, fonts.gstatic.com, ie9comview.vo.msecnd.net, skypedataprdcolcus17.cloudapp.net, e1723.g.akamaiedge.net, skypedataprdcolcus16.cloudapp.net, skypedataprdcoleus16.cloudapp.net, skypedataprdcoleus17.cloudapp.net, a-0001.a-afdentry.net.trafficmanager.net, blobcollector.events.data.trafficmanager.net, go.microsoft.com.edgekey.net, skypedataprdcolwus16.cloudapp.net, cs9.wpc.v0cdn.net Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\N40R6UA2\www.covid19-siparadigm[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	273
Entropy (8bit):	4.72665488363532
Encrypted:	false
SSDEEP:	6:JFK1rUFQ75q+2k3qE4T4QKC3AFq26qE4T4QKC3Wzuqaeq/qE4T4QKkb:JsrUu7Q+Zq/cQKDk26q/cQK1XZq/q/c8
MD5:	EADEA981BA79C95C3477C7A6A21ECC6C
SHA1:	82F2FD6BF4C61A5B71DC0AE2B093772CD54B811D
SHA-256:	FCC789EBD4C233A4E58BF5935417100B1EA1B68925F0704FB0DB3A62DF427001
SHA-512:	307BC6196C177452490371C35C522005D194E9058BBABD477067E28BD4783455A0DE9979F63439F9E155874E8DF78EACD5354BB7F72A36C4AA4BB7C941281675
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="dore-theme" value="dore.light.blue.css" ltime="1654077584" htime="30873346" /><item name="dore-direction" value="ltr" ltime="1654077584" htime="30873346" /><item name="dore-radius" value="rounded" ltime="1654077584" htime="30873346" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{9D8214F5-82F5-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8552177965271837
Encrypted:	false
SSDEEP:	96:rWZdZc2nWySDtyS4efySmLZXMyoBtyQbfynQfyhLMnX:rWZdZc2nWNt3fMNMXHrfUsX
MD5:	CC8534FBC7439FEBBBC0AE5C0CAF06E2
SHA1:	C2CE2AC5112C6C5A51EC5AE41C1F3BDAACE52B9C
SHA-256:	FA6F822850C587906866FB795F5100F63439C35DC844FF544242D68D958ECC5E
SHA-512:	0FF81659D2A4F6AE9E33D3437C2FB542CFFCC83BDB749BB9FD9E3DA117736D4B678C876F808C949A7A0CC6ECA3D5EBFD3C3E9261D556159788326147C3EF926A
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{9D8214F7-82F5-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	53256
Entropy (8bit):	2.157962980104294
Encrypted:	false
SSDEEP:	192:rFZyQq6tkijx2FWxMxYlri9szib79ernLy4f0Z9lW8WWph2HAvLVLs7R02:rLfVWcgcKeZi93f9QL3i9swpMgvRsj
MD5:	67E7B5D51B259C740970987945AD747B
SHA1:	ED068F588166F81435D262CD6712B64F8363ECCE
SHA-256:	980E58F330123985473F48DB886CE7C8F865A84FDD2ACFEA09900380D1115F3A
SHA-512:	ACC354401FDD414100B997FAD43E8B88A8463B297572C70F5AA44A18CF630C870B586E8FB7F24C3CC36D6C414CC8137909C00BAA5F0C5F294019438CB6BD3ADD
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A41EBAA7-82F5-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5634112050823108
Encrypted:	false
SSDEEP:	48:IwsGcprlGwpatPG4pQPdGrapbSKcGQpKgUG7HpRvTGIpG:rwZvQX6VBSK0AgfTNA
MD5:	817CDC78A1F4B11B6BE8BF689A2AEA51
SHA1:	D7E81FA2583DE34BD2D43C31C4ED0D47611DD890
SHA-256:	DA05876FFFCEEA11E89DF0AEAEE5D6994CFA947A0142233103BF30859A8D03FE
SHA-512:	DF1C99AEFAD8C95CF850BB61A1AC3935F39243981E90694D588E253D54CFA1EE3FEA161828A181E6E489F10D5421C7DE7BE3CD7BC58BC279387F33548DB53040
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	15488
Entropy (8bit):	3.3546070674060386
Encrypted:	false
SSDEEP:	96:qlP+WcqqeZ20c6Fp4YSqBcqDvTJdjdrWGcGGGGS1ZBXLTE3dAwiSw:u/FprWG71ZBMNA3P
MD5:	BAF30D639FFCBD62418BBD20F21B9128
SHA1:	BD6A8457696FC265EC0794951B0D7F9A50841674
SHA-256:	FF09470899B4E853B6230CA9053E621AC750F9BFD077DC4C0E0051C76E67D348
SHA-512:	44ACB8DA2B79176ABC8E1155C5B79B6F8F127C719A2ACA57086696B085FBAE188AC9D57BACA7A15D9C43AF47B156D3D90D809E19542DB82CF0A915138A018E21
Malicious:	false
Reputation:	low
Preview:	..h.t.t.p.s.:././.w.w.w...c.o.v.i.d.1.9.-.s.i.p.a.r.a.d.i.g.m...c.o.m./.f.a.v.i.c.o.n...i.c.o..%........00.... ..%......(...0...`..... ......$..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\3692194074184385[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	246222
Entropy (8bit):	5.4673335910197824
Encrypted:	false
SSDEEP:	6144:Rk1HWCSntDV/H4K3V/H486EPjQHWuH3Hpr:f6Eu
MD5:	A13CDF06014F27CB8A596A7B3A8C8091
SHA1:	24531986C6AA1BBD237FD7717CFDF475CDF8F580
SHA-256:	72385F177EA21DFF880FA37C1BF601510238950D9BE3A73C75E75DD64B5943BB
SHA-512:	48C449BAA4F62345A41737E1FF6D3A4216CB5F420BD231EAC9E548A8FDF06756EA3CE0AA17032413919DD1B2CC923B846A8408E5E445754A458A11B7054A58AE
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Chart.bundle.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	211133
Entropy (8bit):	5.402699610572654
Encrypted:	false
SSDEEP:	1536:UaK0ul2eJsniEfMmseMvjOmf3qKs3YHpVcPlNIRSCpvYqGl2IY8tv+YMrq94y3T1:POodfe/v/fl3M7fK6jqVcnJ9XNn
MD5:	857FC46BDCA5BF534CF9ED111E732A01
SHA1:	81639A5F38C61EDA919D85F55CDDC5BEFEC6946B
SHA-256:	5C5DBD081C14D4C58B686127B042E8814E98EAB71CE670A4861C7CF6714C2034
SHA-512:	98C5F0EBBA1C53773728B5BDA6966419114BD290BB990A5ED5123DD04FEF65729460690B79ED8222D61B116F0172D33940F4930630F96FDEECBA70531E10CC47
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/Chart.bundle.min.js?v=1.5.7
Preview:	/!. Chart.js. * http://chartjs.org/. * Version: 2.7.2. . Copyright 2018 Chart.js Contributors. * Released under the MIT license. * https://github.com/chartjs/Chart.js/blob/master/LICENSE.md. */.!function(t){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).Chart=t()}}(function(){return function t(e,i,n){function a(o,s){if(!i[o]){if(!e[o]){var l="function"==typeof require&&require;if(!s&&l)return l(o,!0);if(r)return r(o,!0);var u=new Error("Cannot find module '"+o+"'");throw u.code="MODULE_NOT_FOUND",u}var d=i[o]={exports:{}};e[o][0].call(d.exports,function(t){var i=e[o][1][t];return a(i\|\|t)},d,d.exports,t,e,i,n)}return i[o].exports}for(var r="function"==typeof require&&require,o=0;o<n.length;o++)a(n[o]);return a}({1:[function(t,e,i){var n=t(5);function a(t){if(t){var e=[0,0,0],i=1,a=t.matc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SIP-LOGO[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 702 x 167, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13817
Entropy (8bit):	7.911088599536713
Encrypted:	false
SSDEEP:	192:BhOzoxT+We1y3KLFTp31t8m28yV2BOccWLOwuWAdeM4ZKeA0Lu4Mz1CqcCWpj:6GpKLd578wyYNDL6zcZ20LuVoqcCWh
MD5:	821922DAB4D2A24FE0D9722386282742
SHA1:	2E1954871A1D563B5B286E95A6741170FA557591
SHA-256:	49481C79F5983346A3C32611B4DDD9039E5DE6BAEB1F58B60BFEC1A77759FD5F
SHA-512:	9F83AFDDC442B1152081E5640588747271D511364C0750AF681EF13B00C0262BE8496999CFCB982D66BBFE2763CD244D6E86A71613802E7A61CAB1B6DE801BB6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/oleh/img/SIP-LOGO.png
Preview:	.PNG........IHDR..............._.....tEXtSoftware.Adobe ImageReadyq.e<..5.IDATx..o#.....g..\g.,.-....8.......D.........84$.pLi..Q...I...0.Y8x.........L...l...t..SR..MV.du....jG"..O.o.>uJ........................................................................................................................................................................................5...$.........v..\|x.xw..U.....e....i..>.........~.V..<....D@..&.....'R.'..R.LT..%"<.J...$.'...........d .M...E..f....U`....!.......r..>..EE#ayF"....H.n..u,)....y\J.\|..T_.........i..y.....f.Gm....:.....V..>.........8oYZN%.O..........VX]."8.......AI.5..C.\)...E.....uX@.AD.xw.@8<.vHe..v{.&,..h^....".H..C..H1...R.`.1..........^[!.{"..U..8.w......B5..).R.w$.....X..A........Y..X..{~.s!...\1.=.'... \|!x..pi.O..C4....q..;R...j.@..0..x.b....]y. .....7..0.}a...$.7D....<q.....#.@.Z.^%.c..m...!...7..~$............]z.,.[....@..i.'.......~.R.O..J%z.N}Hq.W...UP..E...<..&{..........u.A..Sa..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SLXLc1nY6Hkvalqaa46L59A[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 25340, version 1.1
Category:	downloaded
Size (bytes):	25340
Entropy (8bit):	7.980149467781485
Encrypted:	false
SSDEEP:	384:r0nc7EXdZcx4KEqF5J7pTbcywRTs8n5PiSnzmAMxSqPRp0d761JZzxLNyJiYLNe8:yc7vx4KNJ7dVD8n550IUykZhynEhOO+
MD5:	D9E84CE704928B115F837CACE123FFC1
SHA1:	E49D105D32FE5345F3A9B89B74D69B6BBF89FA5B
SHA-256:	199BD3EBCB5123A05CABAE0C7C4BBDC7BAD0D2A305ADDFF84CE8F6035871DA85
SHA-512:	D8D26F5AD88AB128DEB93257C130578C6945435427E3E9698108B57EEEE641D49533A28F6A560CDBC414601AA566880CAC3F18F98C38EFB65F380433C16D37E5
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6Hkvalqaa46L59A.woff
Preview:	wOFF......b........0........................GDEF.......R...p....GPOS..........(T...VGSUB...........v...OS/2...t...O...`i...cmap...............cvt ...\...X......:rfpgm.......8...^>...gasp................glyf......=...s..T"'head..Zt...6...6.T.8hhea..Z........$....hmtx..Z..........d..loca..\.........?."wmaxp..^.... ... .e.bname.._....&...:,4EUpost..`,...-....2.$prep..b\........d.-fx.%.........$j..9B.F.AJ).....i.>.........!./2r[P....^t^..vd.3.]...aO/.n.........x.L....A.....X.m..m.m.Q..n...m.VT...<..r.c.@..t.U.~..F..M.....$n....d.".w...o.p...pJ.,.B....q.).\|.....(/'...A.z...j.j..j.[......?FB..5..FE.....QQ...%.xwz...}.....1=.".38..i.6/.....zf........-.p{.......w..;.42.~.y...=.=..Eo.jM....A..?.NaTL......T..fysg.UX.R8U.\|h..Z.^..T/.u/..m...j^j^...81.....AT..c.!7y.P....GO..W.e...HQ.I...DCf..F.`/...Ifr.....7Y........*.T.....V...}...`+a.a.]..2E.'J..('QO...~CC..FR..o4'A+......p.G....3Ya&33.....E...q.1..N.A3....1.....33..U.}.....N....~3...L}Yd...2.......@N"..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SLXLc1nY6Hkvalr-ao6L59A[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 26576, version 1.1
Category:	downloaded
Size (bytes):	26576
Entropy (8bit):	7.978313458929122
Encrypted:	false
SSDEEP:	768:uZ8T4OmF7dy9aoyCEhhB/i5Yk07lxNtv87RpJ+:v4OQy9a5fBH7XNp87t+
MD5:	3387DE207E454BE0F90F13AE0591D061
SHA1:	D4180BCF1744F9B43F01BA94622343A2E1E0BA81
SHA-256:	9A34815E87940A5FC5D876CE9F0E428511514BDFA8F56E6EC36178FF88BEB200
SHA-512:	434AF4F24CEBC15F1CC084FD149B3C3B79490FCA92C09592A610D07B8C8D45DC8003CC6CD087E72D01C72AE3E9156D12CD2CB63D68B5DD583A1F4055238062E7
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6Hkvalr-ao6L59A.woff
Preview:	wOFF......g.................................GDEF.......R...p....GPOS..........-..[v.GSUB...l.......v...OS/2...<...N...`i$..cmap...............cvt ...$...X......9.fpgm...\|...8...^>...gasp................glyf......?...w.V...head.._D...6...6...Hhhea.._\|.......$...[hmtx.._.... .....-%.loca..a..........v.maxp..c.... ... ._.`name..c.......N.EG.post..e....-....2.$prep..g0........d.-fx.%.........$j..9B.F.AJ).....i.>.........!./2r[P....^t^..vd.3.]...aO/.n.........x.L....A.E...ul.m[..v!.m.m..-#6'.......\.\|....k.m..F..=z"{.....0..p..B...%......#..@...V.....H...6.......,..K%.....,D\..qy.........].Z..M...?...a.a.......x...=..q.b......5...'.h(..~./..j.\|.\|g.&k.O....P.Pc.~.g.yx.......m..(>D.Gw.o....4Dk}.hM.{.r7!C:.'S.oJ..4.@f..LC.U.jnMLL..}BDn......v59n.x..A\|.....4.....!. ...".......#?z...H.`0..1..&.....h..8..8......Yx..X.Wd.2#....h)Z..w^......89.P...<..\|G'.'.p...b......r......t.]K...9..@/.^.t.>...~.q.>.t.."s\|f.O(E..:.........0.!3Jen.a..u.........N.cR"F.,.0.T0c8..dfJ\|

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	47332
Entropy (8bit):	5.518633523108405
Encrypted:	false
SSDEEP:	768:UyC36rcBLbfsl5XqYoyPndHTkoWY3SoavVVy2WiCgYUD0FEw0stZb:UyDAZfY5hVdHTwY3SoIjw0sD
MD5:	6A10EB2BB5C90414980729F4F96FFBDA
SHA1:	8BBBD5948255549E4B691B614AA3177DEA9AF1B7
SHA-256:	0F3BE44690AE9914AE3E47B7752E1BDEA316F09938E9094F99E0DE19CCD8987A
SHA-512:	5A505CBAAEEAB8961AA0DE94767F76A09B6F03E60EB0C72954B85EC0392EE1CE383D2088939A314D3175AB24B7A69390C841CFE0237C1D1C40966B43F22AE929
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},r=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var t=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var v=window,x=document,y=function(a,b){x.addEventListener?x.addEventListener(a,b,!1):x.attachEvent&&x.attachEvent("on"+a,b)};var z={},A=function(){z.TAGGING=z.TAGGING\|\|[];z.TAGGING[1]=!0};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap-datepicker[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	57608
Entropy (8bit):	5.117629285234566
Encrypted:	false
SSDEEP:	768:CXUx6201uV3T0y44GHGIPyDsnv1vbtJ4jb14BcZxiWDEz1M5iisA7FH5y8/fEvsm:CEz00G5qIJYREzCsIe0G0yLR
MD5:	89D1F1801633D18C28A336BC3A2AE883
SHA1:	8B948AEC3C7BC82A99CD8F15D9189AFD0AA2CD32
SHA-256:	FEE49230655DFFEF96061B835C40863D214F9E7209A4680C27490B8CBFB383D5
SHA-512:	9E3C8221CCC051F3CE12632268C372493D6BF5F29494ECF7B967B409A080ED3637126FAB92EBB140DBC71E446135B59B28F512706C4EAE50D02E784712363EAC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/bootstrap-datepicker.js?v=1.5.7
Preview:	/!. Datepicker for Bootstrap v1.8.0 (https://github.com/uxsolutions/bootstrap-datepicker). . Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0). */..(function(factory){. if (typeof define === 'function' && define.amd) {. define(['jquery'], factory);. } else if (typeof exports === 'object') {. factory(require('jquery'));. } else {. factory(jQuery);. }.}(function($, undefined){..function UTCDate(){...return new Date(Date.UTC.apply(Date, arguments));..}..function UTCToday(){...var today = new Date();...return UTCDate(today.getFullYear(), today.getMonth(), today.getDate());..}..function isUTCEquals(date1, date2) {...return (....date1.getUTCFullYear() === date2.getUTCFullYear() &&....date1.getUTCMonth() === date2.getUTCMonth() &&....date1.getUTCDate() === date2.getUTCDate()...);..}..function alias(method, deprecationMsg){...return function(){....if (deprecationMsg !== undefined) {.....$.fn.datepicker.deprecated(deprecat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bootstrap.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	202976
Entropy (8bit):	5.060078106258494
Encrypted:	false
SSDEEP:	1536:3BGI6hkwrRn7V8W7c56Ru1araaE/S7bnruUtbtypSG5yh3i3muCfQNk6hNO6x:3BC7/nrhbtypSG5Yy3muCfQNk6hNO6x
MD5:	472076141D2B09EABA3482172B347A04
SHA1:	24A42D87B7B8413EBE7BF30E9BEFFADAE9C163AF
SHA-256:	E3680AD7E2D576044BD0EE1EBF998CA36159EAD8D1D970D3613E750B6D7DB550
SHA-512:	4EC4BCDEE7F380481C7A0F31627D828CE0F160C54496EE78F6E48D2028945C2E446D9FDAACF30FC7ADC67FA2F7895B61D4AE836E8FB6BE108E325E27338C2850
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/bootstrap.min.css?v=1.5.7
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */:root{--blue: #007bff;--indigo: #6610f2;--purple: #6f42c1;--pink: #e83e8c;--red: #dc3545;--orange: #fd7e14;--yellow: #ffc107;--green: #28a745;--teal: #20c997;--cyan: #17a2b8;--white: #fff;--gray: #6c757d;--gray-dark: #343a40;--primary: #007bff;--secondary: #6c757d;--success: #28a745;--info: #17a2b8;--warning: #ffc107;--danger: #dc3545;--light: #f8f9fa;--dark: #343a40;--breakpoint-xxs: 0;--breakpoint-xs: 420px;--breakpoint-sm: 576px;--breakpoint-md: 768px;--breakpoint-lg: 992px;--breakpoint-xl: 1200px;--breakpoint-xxl: 1440px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-family-monospace: SFMono-Regular, Menlo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dore.script_min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	72449
Entropy (8bit):	5.326863130428428
Encrypted:	false
SSDEEP:	1536:BD04ZYSrpmYtpEemPmTmkmoW9JKaFjvtjV+V68GSjYL3qo8qcX2jg04zdp7ehzRc:BLpAXu6jR8qcmjeklS
MD5:	E61A5985C7DB31DF5CF9B5BEC9992DED
SHA1:	F2159E8017609A83E3316A022D5A3BD39CC12BBF
SHA-256:	9813567A1F8BD7737F06A21B3122210FC1C87E343EB351062192E8E5C50268B3
SHA-512:	630F6070EF1C353A41463E36548ED7C7A354FE25E451739A2AFB41190DB7A3156BC3B8B307EB956EBF29E44F3505FEA0D7BA1AB62BC355679478B36D08436C6C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/dore.script_min.js?v=1.5.7
Preview:	$.fn.addCommas=function(e){for(var t=(e+="").split("."),a=t[0],n=t.length>1?"."+t[1]:"",o=/(\d+)(\d{3})/;o.test(a);)a=a.replace(o,"$1,$2");return a+n},function(e){e.fn.stateButton=function(t){return this.length>1?(this.each(function(){e(this).stateButton(t)}),this):(this.initialize=function(){return this},this.showSpinner=function(){return e(this).addClass("show-spinner"),e(this).addClass("active"),this},this.hideSpinner=function(){return e(this).removeClass("show-spinner"),this},this.showFail=function(t){return e(this).addClass("show-fail"),e(this).removeClass("show-spinner"),t&&e(this).find(".icon.fail").tooltip("show"),this},this.showSuccess=function(t){return e(this).addClass("show-success"),e(this).removeClass("show-spinner"),t&&e(this).find(".icon.success").tooltip("show"),this},this.reset=function(){this.hideTooltips(),this.hideSpinner(),e(this).removeClass("show-success"),e(this).removeClass("show-fail"),e(this).removeClass("active")},this.hideTooltips=function(){return this.hi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	93376
Entropy (8bit):	5.3917536957896575
Encrypted:	false
SSDEEP:	1536:5M+OWt6w6aic9MeoJ2my8LuThe7KFv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiZ:5OQRj1SVBYDG2
MD5:	1DE516A5B6B1C6033B92EE5F5D50C140
SHA1:	9E37DA5D5D789074D1DADD60977A9575A6332DD5
SHA-256:	9E7EA2B4BA8E2BCC4A964D6192E4671DC5F6863A1C7E35B52B229A3C1E67A68D
SHA-512:	99EF8E73A5D560CB3504B6BF1BC237957687280AFC99FCFF7A4B882FD2AE423B19721D6444FBD63D3ABCCFF8BD0A5CED79899CE02A2116D7710D2A89BEE370E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\forgot_password[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	7706
Entropy (8bit):	4.965533988382203
Encrypted:	false
SSDEEP:	96:3tRECHDykozu0cWY6Kb5DPSXA0ggtrOswBR8WKYZh9tipEwA1WdddGq1nu:3tHH+kozu0cWY6K5DtpvCwwwqJu
MD5:	5F8DF352C1720CFC2DFB109B76D55864
SHA1:	7017224FDCE108054C9692152E3C5930A318BD1A
SHA-256:	692A930BBCF60EA1019A9C7C8551D3E1B9A54394A4CCA4BA8CE4D6E1470F9869
SHA-512:	956FB101AFA51C82370CE929A57F6AC9D421C0C93DA8B463009530A2156AAE42B6042BE7D8575FD7D992DF7E76613F0938DCE1807047C59DB9FC052A82D04DC2
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>.<html lang="en" translate="no">..<head>...<meta charset="UTF-8">...<title>....Forgot password!..</title>...<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">...<link rel="stylesheet" href="/dore/font/iconsmind-s/css/iconsminds.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/font/simple-line-icons/css/simple-line-icons.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap.rtl.only.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap-float-label.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/fullcalendar.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/dataTables.bootstrap4.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/datatables.responsive.bootstrap4.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/perfect-scrollbar.css?v=1.5.7"/>...<lin

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\iconsminds[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text
Category:	downloaded
Size (bytes):	60067
Entropy (8bit):	5.009208339678677
Encrypted:	false
SSDEEP:	384:5neKQ9WXiNLcuQT/HWd8GtTocZWzmodWuUhgVG4oP9PmxAZnjC0Ki:5+NsTHy8GtT1Yv73GLuAZnjQi
MD5:	72FE05FE893B64280E9C11B2A17A6982
SHA1:	AE22A191B094ED2CE150016EA476DCBED0DE8CCF
SHA-256:	B2FD606B66B0386FB390EB9AD1D94701454B9909D49D889E2C175CA129BAD38A
SHA-512:	9B45E2C1433FEEC62911AE8B4E04FAF11BCC14CCCD2F63564043D54D6C469868CFC3C0A31BBE0C054072278FA53EBD869D09964E760ECBDEA6266233FDC313DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/font/iconsmind-s/css/iconsminds.css?v=1.5.7
Preview:	@font-face {. font-family: 'iconsminds';. src: url('../font/iconsminds.eot?42207379');. src: url('../font/iconsminds.eot?42207379#iefix') format('embedded-opentype'),. url('../font/iconsminds.woff2?42207379') format('woff2'),. url('../font/iconsminds.woff?42207379') format('woff'),. url('../font/iconsminds.ttf?42207379') format('truetype'),. url('../font/iconsminds.svg?42207379#iconsminds') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'iconsminds';. src: url('../font/iconsminds.svg?42207379#iconsminds') format('svg');. }.}./. . [class^="iconsminds-"]:before, [class=" iconsminds-"]:before {. font-family: "iconsminds";. font-style: normal;. font-weight: normal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10650
Entropy (8bit):	4.793135127441778
Encrypted:	false
SSDEEP:	192:HHS/yml/Pe1iaqFHQUiQOggly3AtF4JlFEtL0QhjlhFEJ6fX3r20LTQpkbVi1Rnz:wW0FKFR0
MD5:	02ECB29E1DC91BF9B4D4647D55375B09
SHA1:	14D315C7C416488F0C6E2ED3A6CD649B46D4FC45
SHA-256:	35356A63F45B480A2BD7A9975983CBBAAFFC94B5D91D06E827F5B28D24C562CB
SHA-512:	56877E861AB8D33163CF0DF330FA110F5245F6CAB4DCCEA3A71D98309D6D91AAC564808DA0DBD1F3A7773575A3D8307E22B8D2411F9288EAE32F819CE1460391
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/main.css?v=1.5.7
Preview:	html {. width: 100%;.}..body {. overflow-x: hidden !important;.}..body.show-spinner > main {. overflow: hidden !important;.}../* Hide everything under body tag /.body.show-spinner > {. opacity: 0;.}../* Spinner */.body.show-spinner::after{. content: " ";. display: inline-block;. width: 30px;. height: 30px;. border: 2px solid rgba(0, 0, 0, 0.2);. border-radius: 50%;. border-top-color: rgba(0, 0, 0, 0.3);. animation: spin 1s ease-in-out infinite;. -webkit-animation: spin 1s ease-in-out infinite;. left: calc(50% - 15px);. top: calc(50% - 15px);. position: fixed;. z-index: 1;.}..@keyframes spin {. to {. transform: rotate(360deg);. }.}..@-webkit-keyframes spin {. to {. -webkit-transform: rotate(360deg);. }.}...custom-select2 .select2-container{. width: 100% !important;.}..custom-select2 .select2-selection{. border-radius: .1rem !important;. padding: 5px 10px;. font-size: .8rem;. line-height: 1;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\owl.carousel.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	44342
Entropy (8bit):	5.0793850768725
Encrypted:	false
SSDEEP:	768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV
MD5:	F416F9031FEF25AE25BA9756E3EB6978
SHA1:	E2A600E433DF72B4CFDE93D7880E3114917A3CBE
SHA-256:	A53C43F834B32309B084EA9314DF8307E9C78CEE2202C6E07F216AE4AE5B704D
SHA-512:	6CFB3B01EEA956F84E4A221CC940A547BFEAD8E02C462A2FC38BC0917FB325BC374A101E7AA7B3AB9D11208708511ABB39ADB4AD6DA7DAAF9FC9704D714F65AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/owl.carousel.min.js?v=1.5.7
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */.!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({fil

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\progressbar.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	22496
Entropy (8bit):	5.349663444236206
Encrypted:	false
SSDEEP:	384:J15vkDeOApNztN0kk6PfRu6X/zOQgmRrabis:zBkDeOAntyOQ6X/z92n
MD5:	EE1A64236303E8B872D40FCD752BC976
SHA1:	E1C68F63673AC151A93B2700BB4607E1760FDBFC
SHA-256:	3029F6C73EB2FA7BD400B813A2AA324775CF5C19BECE555D3A962A7A2F3BF332
SHA-512:	9E000B2034FEC60C80A71B7AA54029FA057B471CA07A1A41555DC50A3B1E57FF9B53CD609A3C1D841A120D16ECF272299416A3A49A68A01951F1A8674EC594EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/progressbar.min.js?v=1.5.7
Preview:	!function(a){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=a();else if("function"==typeof define&&define.amd)define([],a);else{var b;b="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this,b.ProgressBar=a()}}(function(){var a;return function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw j.code="MODULE_NOT_FOUND",j}var k=c[g]={exports:{}};b[g][0].call(k.exports,function(a){var c=b[g][1][a];return e(c?c:a)},k,k.exports,a,b,c,d)}return c[g].exports}for(var f="function"==typeof require&&require,g=0;g<d.length;g++)e(d[g]);return e}({1:[function(b,c,d){(function(){var b=this\|\|Function("return this")(),e=function(){"use strict";function e(){}function f(a,b){var c;for(c in a)Object.hasOwnProperty.call(a,c)&&b(c)}function g(a,b){return f(b,function(c){a[c]=b[c]}),a}function h(a,b){f(b,fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\simple-line-icons[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	15604
Entropy (8bit):	4.7885863730490215
Encrypted:	false
SSDEEP:	192:s8hkf0hzTEFK51FjmY6hCQSV7BupZuGWNcLRJtBdFbbvrY:o0hzTii1FjmY6hBU7BubqNcLRJzM
MD5:	FE133CCCF11BBB98906FD0B48610023B
SHA1:	7AAC45E00F2903E99733A94599AD137A97EE69C3
SHA-256:	1E23FBC5DE093F09EBC532A59063410FDBD756719F6B72BAFE0C2DC92768DF91
SHA-512:	A653C0C7060E804218F733DABB748B158D099E289A1EDA008844B8E5E33C2AE1037BDCDD023B1B93F66A608BDD8F8B191CC408A1D87F7947ECCE1AD553D7ED2B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/font/simple-line-icons/css/simple-line-icons.css?v=1.5.7
Preview:	@font-face {. font-family: 'simple-line-icons';. src: url('../fonts/Simple-Line-Icons.eot?v=2.4.0');. src: url('../fonts/Simple-Line-Icons.eot?v=2.4.0#iefix') format('embedded-opentype'), url('../fonts/Simple-Line-Icons.woff2?v=2.4.0') format('woff2'), url('../fonts/Simple-Line-Icons.ttf?v=2.4.0') format('truetype'), url('../fonts/Simple-Line-Icons.woff?v=2.4.0') format('woff'), url('../fonts/Simple-Line-Icons.svg?v=2.4.0#simple-line-icons') format('svg');. font-weight: normal;. font-style: normal;.}./. Use the following CSS code if you want to have a class per icon.. Instead of a list of all class selectors, you can use the generic [class="icon-"] selector, but it's slower:.*/..simple-icon-user,..simple-icon-people,..simple-icon-user-female,..simple-icon-user-follow,..simple-icon-user-following,..simple-icon-user-unfollow,..simple-icon-login,..simple-icon-logout,..simple-icon-emotsmile,..simple-icon-phone,..simple-icon-call-end,..simple-icon-call-in,..simple-icon-call-out,..sim

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\3692194074184385[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	246222
Entropy (8bit):	5.4673335910197824
Encrypted:	false
SSDEEP:	6144:Rk1HWCSntDV/H4K3V/H486EPjQHWuH3Hpr:f6Eu
MD5:	A13CDF06014F27CB8A596A7B3A8C8091
SHA1:	24531986C6AA1BBD237FD7717CFDF475CDF8F580
SHA-256:	72385F177EA21DFF880FA37C1BF601510238950D9BE3A73C75E75DD64B5943BB
SHA-512:	48C449BAA4F62345A41737E1FF6D3A4216CB5F420BD231EAC9E548A8FDF06756EA3CE0AA17032413919DD1B2CC923B846A8408E5E445754A458A11B7054A58AE
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\3692194074184385[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	246222
Entropy (8bit):	5.4673335910197824
Encrypted:	false
SSDEEP:	6144:Rk1HWCSntDV/H4K3V/H486EPjQHWuH3Hpr:f6Eu
MD5:	A13CDF06014F27CB8A596A7B3A8C8091
SHA1:	24531986C6AA1BBD237FD7717CFDF475CDF8F580
SHA-256:	72385F177EA21DFF880FA37C1BF601510238950D9BE3A73C75E75DD64B5943BB
SHA-512:	48C449BAA4F62345A41737E1FF6D3A4216CB5F420BD231EAC9E548A8FDF06756EA3CE0AA17032413919DD1B2CC923B846A8408E5E445754A458A11B7054A58AE
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/3692194074184385?v=2.9.33&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\SLXGc1nY6HkvalIhTp0[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 25868, version 1.1
Category:	downloaded
Size (bytes):	25868
Entropy (8bit):	7.97994873225929
Encrypted:	false
SSDEEP:	768:5rlea6WA37dqnaikIH1s+FTnb4ex+bxeDk+:Zlet/JtIV5vh4v+
MD5:	2BDFAB9E18459439147F2F81D7E305D9
SHA1:	1E624CA75788BE195E680341671229FD5AFDB9EC
SHA-256:	94E63C42B7F69881022790DDF1BD04C38D26E5FA213EFA3E10D1AACCE715B8E2
SHA-512:	1846A87E84D0B3F7F38BF4F6C3679F00C20BE9C4DA4866A55E0C0C28234EBCB8F5C07AA9CF978BD2F8AA4A65442A5010B7708E657E70BDFA20228CBE54A2CE49
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/cairo/v9/SLXGc1nY6HkvalIhTp0.woff
Preview:	wOFF......e.................................GDEF.......R...p....GPOS..........-...L.GSUB...........v...OS/2.......N...`h`..cmap...$...........cvt .......U....._96fpgm.......8...^>...gasp...L............glyf...T..=$..p^_..head..\x...6...6..Nhhea..\........$...;hmtx..\....).....w(xloca..^..........w.@maxp..`.... ... .[._name..a....(...R..Hxpost..b<...-....2.$prep..dl........d.-fx.%.........$j..9B.F.AJ).....i.>.........!./2r[P....^t^..vd.3.]...aO/.n.........x.L..D.Q.....n.m...=.."...$IU...d.b.L&..0..2...rHf...&9..`..db}........A.........O#.-gs.+f.JHB.........2.'......L.W........M..-T!I+P...Bj.B^..Q..Q.<6ye).....`J.a6..j.mf....Zc?..-2W+.../...nD6..2......~.5j.~.?q.,q.g...+..Lt:.........1)F........,.]B..QZ#\O/...6.>.[.....fw:.....8../.dM.E...a.:dLB%@..H....`.b...!.u.c..,..l.D.pJ.qNvpIvq.:...&.h..U....].G.e......K.}.wwj).u..8....]..`+..d\..h#....^z.......W.%.......ol.zx j.....x,. <....Q"<.U....a..C.saXT.F....X..xL.DL2v2.`../6f..y.U.v.%....pMX......\

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\SLXLc1nY6HkvalqKbI6L59A[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 25652, version 1.1
Category:	downloaded
Size (bytes):	25652
Entropy (8bit):	7.977644898454956
Encrypted:	false
SSDEEP:	768:nceAu/M31FGLX7dQcwDyZ67hIH2lyJM8jUCrPv+:HMiLpQc5Z62H2mvjnL+
MD5:	6858C8D271FAB6E8B98CF0AF912A079B
SHA1:	B7DC826AC89F1B37DBB1252355033948633A25FB
SHA-256:	A9F327EB39641FC5F73BD2D868C87B38124084C0DF6FAD202685C446107AAA29
SHA-512:	D889DE1230C41BEA267A1D9600F9EB79226664344E47AF17D65D0AB70D7C0A85E217D2A5DA79A6C4AC083C90C17FA0B4BB088B167D2EA61F58FA1B881664A77C
Malicious:	false
Reputation:	low
IE Cache URL:	https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6HkvalqKbI6L59A.woff
Preview:	wOFF......d4................................GDEF.......R...p....GPOS..........-v.d.GSUB...........v...OS/2...\|...O...`h...cmap...............cvt ...d...W......8.fpgm.......8...^>...gasp................glyf......;...j....ihead..[....6...6...Xhhea..[........$.V..hmtx..\....+....g,#loca..^,..........r;maxp..` ... ... .W.ename..`@...$...<+.G<post..ad...-....2.$prep..c.........d.-fx.%.........$j..9B.F.AJ).....i.>.........!./2r[P....^t^..vd.3.]...aO/.n.........x.L...]Q....r.u5.m.m...m.5...........z..cf ..#.B...`...N....'...P.@.H@...e(......@...k.....)1.....$.)T.{e...$.U..t...I.2.i.U....k.........g..zr....T.i....Y.....fG.._=....Y7.'......b^.....;..Q'.I......Nbhb..x)U................l.-B...48...{.SC1..u4.[......Zf..i%.-....J.I.C..4......MzI.../e..@F.:.\|.@B.......(./.=....3f....b....;.`?z. nc...!V.....)H..\|b{P..D.jqo....".-D6Z.wh%...x..\|>R..(...\|..p]...5......Wq..g..."c.y..3..rk..D..a...Nkf.,...z...3.v<.}..~......d..%X.e(B1.c..+...Qb\|.1}..?&$....n.....5.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bg2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 560x740, frames 3
Category:	downloaded
Size (bytes):	36408
Entropy (8bit):	7.958585177244838
Encrypted:	false
SSDEEP:	768:2t53VRT5dhM6V/k2gXHbM9O65B5KMdK48wXftq7Os:2tk623KR5HdKuVq7l
MD5:	A4A1E64938686F601048DB1FEED42078
SHA1:	FDBA434EC894D068D771C87F329335BE29951922
SHA-256:	EDCFF7B76EDA75A99C9E55C8743FC4B477BAB35E7577A244023F4005FC1E0307
SHA-512:	618F69C31143F7CD705747F77CEE38D39945BB1E58693E6D9B4D1FE683448DD6D12D4FAA9526D5F79B26090D6F66283E6BC6852242C8AA09F51CF87D53BFA2E5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/img/bg2.jpg
Preview:	......JFIF.....d.d......Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="xmp.did:35172FB992ACE011864BA00F98C73DD4" xmpMM:DocumentID="xmp.did:9F09B0C7EC2711EA99F08509DE384C00" xmpMM:InstanceID="xmp.iid:9F09B0C6EC2711EA99F08509DE384C00" xmp:CreatorTool="Adobe Photoshop CS4 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:77B2EE7978CF11EA9BE59A1198BFE037" stRef:documentID="xmp.did:77B2EE7A78CF11EA9BE59A1198BFE037"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Medical records and stethoscope</rdf:li> </rdf:Alt

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap-datepicker3.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21100
Entropy (8bit):	4.662844011936041
Encrypted:	false
SSDEEP:	192:wFhSAJKNVF3CWG2XaKLwYSSuo/8ZtnOe2Rq4TO26M3aF3ZMBIZ:bBnOjSucHEM43ZgIZ
MD5:	9A3DB8BD91A81212BAA4AC44C241DFAD
SHA1:	C0C6D1E38B1E9277FBB49D894949E0A1B7933F4E
SHA-256:	9A52891414B58DB670C03AD90F50293BB6054BA300D570CDDFB8D9F460C50BAE
SHA-512:	2B3728F92C3B8E1D8B9078007BF97837AB53567F67E0119BCAD6B375BF42B463349F76F5A21DEDEFF277BB86409BC1A5689E28E296C1EB76990AE5475A9ABD47
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/bootstrap-datepicker3.min.css?v=1.5.7
Preview:	/!. Datepicker for Bootstrap v1.8.0 (https://github.com/uxsolutions/bootstrap-datepicker). . Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0). */...datepicker{border-radius:4px;direction:ltr}.datepicker-inline{width:220px}.datepicker-rtl{direction:rtl}.datepicker-rtl.dropdown-menu{left:auto}.datepicker-rtl table tr td span{float:right}.datepicker-dropdown{top:0;left:0;padding:4px}.datepicker-dropdown:before{content:'';display:inline-block;border-left:7px solid transparent;border-right:7px solid transparent;border-bottom:7px solid rgba(0,0,0,.15);border-top:0;border-bottom-color:rgba(0,0,0,.2);position:absolute}.datepicker-dropdown:after{content:'';display:inline-block;border-left:6px solid transparent;border-right:6px solid transparent;border-bottom:6px solid #fff;border-top:0;position:absolute}.datepicker-dropdown.datepicker-orient-left:before{left:6px}.datepicker-dropdown.datepicker-orient-left:after{left:7px}.datepicker-dropdown.datepicker-or

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap-tagsinput.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8860
Entropy (8bit):	5.1783666079257715
Encrypted:	false
SSDEEP:	192:EPrfvAaIaFCe0JJlas0mzUiQ/DhBVOoTFkG0asg:EjfoaIaFC5zlMRiQ9BUoIVg
MD5:	65BE147263EF1BA6A002AFFB197B2B39
SHA1:	99367D8587DAB68ED78B8A9C2EB1F122E06645E4
SHA-256:	4C87907F1E5D9DDB1320719688C7112F6F87321A933D548D188E2A2B9EBE2F63
SHA-512:	273635122AAE2F645699F2B39E4EC6976E1CA86057B58B6FB5C80D2B56AF32418D1C76053623783BF7628F0520E18083DD356944FE0A51D85F35FE301CE03F1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/bootstrap-tagsinput.min.js?v=1.5.7
Preview:	/. bootstrap-tagsinput v0.6.1 by Tim Schlechter. * . */..!function(a){"use strict";function b(b,c){this.itemsArray=[],this.$element=a(b),this.$element.hide(),this.isSelect="SELECT"===b.tagName,this.multiple=this.isSelect&&b.hasAttribute("multiple"),this.objectItems=c&&c.itemValue,this.placeholderText=b.hasAttribute("placeholder")?this.$element.attr("placeholder"):"",this.inputSize=Math.max(1,this.placeholderText.length),this.$container=a('<div class="bootstrap-tagsinput"></div>'),this.$input=a('<input type="text" placeholder="'+this.placeholderText+'"/>').appendTo(this.$container),this.$element.before(this.$container),this.build(c)}function c(a,b){if("function"!=typeof a[b]){var c=a[b];a[b]=function(a){return a[c]}}}function d(a,b){if("function"!=typeof a[b]){var c=a[b];a[b]=function(){return c}}}function e(a){return a?i.text(a).html():""}function f(a){var b=0;if(document.selection){a.focus();var c=document.selection.createRange();c.moveStart("character",-a.value.length),b=c.text.le

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap.bundle.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	78586
Entropy (8bit):	5.263410089027048
Encrypted:	false
SSDEEP:	768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+z:59YeHqTEZChY223CzWpV0ea7IG
MD5:	6C9E58BD75DE51AE8C63CD00802B5DD5
SHA1:	3CB4F090A2CB698EAB3FE2CB7DDBE744A4088264
SHA-256:	F0E3F4CDC282DC2223FA74F47F49BF78CF0D5EAD8B667F6C431E390A2ABD1C19
SHA-512:	DA7A72CDB7FC8B595B96B0A1FFB0EB984BB125014843390BA0A7346EC2604347E70C301A0464947E42D11A43BC99D03DE435BC282F1783A94C64BCAA10CDCC9B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/bootstrap.bundle.min.js?v=1.5.7
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t=t\|\|self).bootstrap={},t.jQuery)}(this,function(t,p){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable}))),e.forEach(function(t){v

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\custom[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	4.2836845737290705
Encrypted:	false
SSDEEP:	12:j7Z1YmLSpTE8b4Q6IHzQoUVhgXwYmLSpxKCe0GnOiovhFuuoLwqbQTexPNQc:Rqu85/FHKz3oquo99
MD5:	0B16BCE7E5DA229927E945DE752F13D7
SHA1:	292F7B711CB2E746AE37A87F563EF1FC34E1FD9E
SHA-256:	488D4C45156AE96E832BCFB04376E21A48404E274B2CBD94FED674A4ADB4CF8A
SHA-512:	665BD0D0BCA3017EA7063F4A71BBDCDA1D881BDB3FC136EE366783154C333B9BAA3A5351B4DEDF5CFA4A86EC0F11F3A260D3F58A381F107F6E849B838BB90C24
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dashboard/js/custom.js?v=1.5.7
Preview:	// $(document).ready(function() {.// var url = window.location.href;.// if (url.indexOf('/es/') > -1) {.// $(".change_language").val("es");.// } else if (url.indexOf('/en/') > -1) {.// $(".change_language").val("en");.// }.// $(".change_language").on("change", function(){.// var lang = $(this).val();.// var url = window.location.href;.//.//.// if (lang === 'en') {.// console.log('here');.// url = url.replace('/es/', '/en/');.// } else {.// url = url.replace('/en/', '/es/');.// }.//.//.// window.location.href = url;.// });.// });.//..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\dore.light.blue[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	232007
Entropy (8bit):	5.003980423605315
Encrypted:	false
SSDEEP:	6144:IdkCm/ybMTkb5jl9rM81Wk5kRsF5PEn3pN2b/w/XMHvs:IdkCm/ybMTkb5jl9rM81Wk5kRsF5PEnR
MD5:	F015BEB6CA0B059C9E55A13CF607B71F
SHA1:	D2B32B0E535B91D1E5D5BC0E6CC949445D74CE74
SHA-256:	044E7151076143A62FAB2A691F83D7DCDD5D909DBF375B887ED5DEBE15B10113
SHA-512:	A7164DE59C6B32874BB26A1B93FC943E46982AFC6D047CC3ADBE065286619C29C22C374A7C11278397DC97A35D1A0752177614A0687CBE56997E3DD1821220BA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/dore.light.blue.css
Preview:	/* Dore Main Style ..Table of Contents..00.Variables and Imports.01.Base.02.Buttons.03.Widths.04.Borders.05.Badges.06.Breadcrumb.07.Tabs.08.Owl Carousel.09.Slick Slider.10.Navbar.11.Menu.12.Apps.13.Chat App.14.Survey App.15.Todo App.16.Main.17.Cards.18.Dashboard.19.Calendar.20.Datatable.21.Alerts.22.Forms.23.Form Wizard.24.Slider(Range).25.Navs.26.Tooltip and popover.27.Progress.28.Rating.29.Sortable.30.Spinner.31.Croppper.32.Modal.33.Authorization.34.Html Editors.35.Icons.36.Loading.37.Media Library.38.Context Menu.39.Videojs.40.Prices.41.Tables.42.Invoice Print.43.Profile Page.44.Details Page.45.Timer.46.Blog.47.Rounded.48.Rtl./../ 00.Variables and Imports /..@import url("https://fonts.googleapis.com/css?family=Cairo:300,400,600,700");./ 01.Base */..html {. width: 100%;. height: 100%;. background: #f8f8f8;.}..:root {. --theme-color-1: #003e6f;. --theme-color-2: #cdde5f;. --theme-color-3: #6f6f6e;. --theme-color-4: #365573;. --theme-color-5: #ff6666;. --theme-color-6: #8e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\dropzone.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	42957
Entropy (8bit):	5.439966647356851
Encrypted:	false
SSDEEP:	768:GGvujwKLHQFdTC6JSJKokGuCVKzFywBz1bp7aLGVSKdq39YATdWSUcERE5kKMLEQ:CPLHSTC6JSJjTVWyY1bp7aiVSKdzATQZ
MD5:	BD1B5BCF093460FEB610EBC1EB06BC9B
SHA1:	48189456EB8B3044EC6A8C712ADC125907DB600D
SHA-256:	467C64EA589AD8664B7E47B610AC0A58F8F2D2ADB0096EBA48DD602825EAB8AE
SHA-512:	16F097BC67F4D60010AA388847FABFF54EA21991B1798BA37A1D3C66117C198C162EE5D3F76A5D729085E90E6EBDCA736DBAA3BCE644B1BFE7EB29E8742F06FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/dropzone.min.js?v=1.5.7
Preview:	"use strict";function _possibleConstructorReturn(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!b\|\|"object"!=typeof b&&"function"!=typeof b?a:b}function _inherits(a,b){if("function"!=typeof b&&null!==b)throw new TypeError("Super expression must either be null or a function, not "+typeof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}}),b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function _classCallCheck(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function __guard__(a,b){return void 0!==a&&null!==a?b(a):void 0}function __guardMethod__(a,b,c){return void 0!==a&&null!==a&&"function"==typeof a[b]?c(a,b):void 0}var _createClass=function(){function a(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}return func

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93376
Entropy (8bit):	5.3917536957896575
Encrypted:	false
SSDEEP:	1536:5M+OWt6w6aic9MeoJ2my8LuThe7KFv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiZ:5OQRj1SVBYDG2
MD5:	1DE516A5B6B1C6033B92EE5F5D50C140
SHA1:	9E37DA5D5D789074D1DADD60977A9575A6332DD5
SHA-256:	9E7EA2B4BA8E2BCC4A964D6192E4671DC5F6863A1C7E35B52B229A3C1E67A68D
SHA-512:	99EF8E73A5D560CB3504B6BF1BC237957687280AFC99FCFF7A4B882FD2AE423B19721D6444FBD63D3ABCCFF8BD0A5CED79899CE02A2116D7710D2A89BEE370E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fullcalendar.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	16066
Entropy (8bit):	4.89948002325388
Encrypted:	false
SSDEEP:	192:az2wIdOWvwKKSuHIoaqUlVT1hWmreBzC/uLHBX:rTvdX5hWzBPX
MD5:	96CDA8D2E47C268081C161134B6EC616
SHA1:	D387250C99A602A2D3FA4A16BB12A5FFACD0BE7A
SHA-256:	4EEDC337EE64C2B87397384D50CB8686DDA1EDC47A01180A7187A607DBB94B30
SHA-512:	9620E73ABB1AFCDCD1FB8572590DDF073B030736A5DF7F00D557D4A50BC071DB7E78BF3C78F08E7779FD550A5D0346318B8CA09662F2FC0987F8BAF39A7D1E31
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/fullcalendar.min.css?v=1.5.7
Preview:	/!. FullCalendar v3.9.0. * Docs & License: https://fullcalendar.io/. * (c) 2018 Adam Shaw. */.fc button,.fc table,body .fc{font-size:1em}.fc-bg,.fc-row .fc-bgevent-skeleton,.fc-row .fc-highlight-skeleton{bottom:0}.fc-icon,.fc-unselectable{-webkit-touch-callout:none;-khtml-user-select:none}.fc{direction:ltr;text-align:left}.fc-rtl{text-align:right}.fc th,.fc-basic-view td.fc-week-number,.fc-icon,.fc-toolbar{text-align:center}.fc-highlight{background:#bce8f1;opacity:.3}.fc-bgevent{background:#8fdf82;opacity:.3}.fc-nonbusiness{background:#d7d7d7}.fc button{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;margin:0;height:2.1em;padding:0 .6em;white-space:nowrap;cursor:pointer}.fc button::-moz-focus-inner{margin:0;padding:0}.fc-state-default{border:1px solid;background-color:#f5f5f5;background-image:-moz-linear-gradient(top,#fff,#e6e6e6);background-image:-webkit-gradient(linear,0 0,0 100%,from(#fff),to(#e6e6e6));background-image:-webkit-linear-gradient(top,#f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fullcalendar.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	downloaded
Size (bytes):	213774
Entropy (8bit):	5.132217714551455
Encrypted:	false
SSDEEP:	1536:cZQtonWZACT4gEfgW7qk7KnOaDxCiG8mPSwr8sVqYh/rPVmz+xiAZug4elLJsB/5:LCnWqoW7qkGVd4n/sKxFZug4VnEfaiY
MD5:	6C6CAD1AC091EE3C57552592D4C98BA1
SHA1:	8A96464A74BE4E27F0F47F37A64CABC5D0AA0D37
SHA-256:	42F84FABE7AF36377C272C52394E4A2F78CF6130FBFA05957AFD4E1FBEB748BD
SHA-512:	8AEB120B07A5B52455AE33B3FB89F138BF4E5E1D940349BC29D8EC5FCFCA514889CFE4C23736A5C04D1613A7584DF1C3917B86B87AB75BD6088432CDED4341D3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/fullcalendar.min.js?v=1.5.7
Preview:	/!. FullCalendar v3.9.0. * Docs & License: https://fullcalendar.io/. * (c) 2018 Adam Shaw. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e(require("moment"),require("jquery")):"function"==typeof define&&define.amd?define(["moment","jquery"],e):"object"==typeof exports?exports.FullCalendar=e(require("moment"),require("jquery")):t.FullCalendar=e(t.moment,t.jQuery)}("undefined"!=typeof self?self:this,function(t,e){return function(t){function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=236)}([function(e,n){e.exports=t},,function(t,e){var n=Object.setPrototypeOf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\login[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	5689
Entropy (8bit):	4.85462404042284
Encrypted:	false
SSDEEP:	48:CptRGvCHDlEcOTwxkXKG2IKbPF0el82ny3hT0KpSJaH3DsZx/ffxTSXAjnLu:GtRECHDykozu0c18YmS8WhHxTSXAvu
MD5:	BCFEF94198F1335B23D33D75F059FCA0
SHA1:	2C848901B36271E1B9134FC9C552CA35B4C61135
SHA-256:	6153DADD4AD835814C9A7EB2674EB9E12077856BB37F105476E694094B0607B5
SHA-512:	3A7E5E7F94266BE874FEB7D524C40E26E58C6A65A2E49C35BCEAA06E05CBCFB444D745124A2F41834983EA17FF0DEED781BE67DF9CD0954E0B44D7944E73B873
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>.<html lang="en" translate="no">..<head>...<meta charset="UTF-8">...<title>....Log in!..</title>...<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">...<link rel="stylesheet" href="/dore/font/iconsmind-s/css/iconsminds.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/font/simple-line-icons/css/simple-line-icons.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap.rtl.only.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap-float-label.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/fullcalendar.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/dataTables.bootstrap4.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/datatables.responsive.bootstrap4.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/perfect-scrollbar.css?v=1.5.7"/>...<link rel="st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\owl.carousel.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	4.914211238199009
Encrypted:	false
SSDEEP:	48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
MD5:	B2752A850D44F50036628EEAEF3BFCFA
SHA1:	FBA46353CF90450EF3D362A123F1E7AF3E8C561E
SHA-256:	521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
SHA-512:	B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/owl.carousel.min.css?v=1.5.7
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\perfect-scrollbar[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	2617
Entropy (8bit):	4.902017209284283
Encrypted:	false
SSDEEP:	24:PS8vqRkxtExSZa5MqRkxtExwwdwBanaSu1RcUxcTUUgRgXG6U/FzgFy9VAvHiOfG:PRvZ0j5MZ0n1ZgRg2dFzgFyy9RJBS95
MD5:	881E99BCA5E7BC7E63FD44D1AFF6F4DA
SHA1:	07EF2B3448F01E3D38B918F5E749E608F7B2DAA0
SHA-256:	BCCBB2172EDAC964DB819164EAF09C23749CA656B9B2490A46ABB499AD00E9EA
SHA-512:	240DB565DE514B42387699905888FD3429761CBB8B944AFE81630E429ECC6F2494223558298B0F2798A79EC4F820EB9296CCB10D1D8579A77A67BBD65F2ED0C7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/perfect-scrollbar.css?v=1.5.7
Preview:	/. Container style. /..ps {. overflow: hidden !important;. overflow-anchor: none;. -ms-overflow-style: none;. touch-action: auto;. -ms-touch-action: auto;.}../. * Scrollbar rail styles. /..ps__rail-x {. display: none;. opacity: 0;. transition: background-color .2s linear, opacity .2s linear;. -webkit-transition: background-color .2s linear, opacity .2s linear;. height: 15px;. / there must be 'bottom' or 'top' for ps__rail-x /. bottom: 0px;. / please don't change 'position' /. position: absolute;.}...ps__rail-y {. display: none;. opacity: 0;. transition: background-color .2s linear, opacity .2s linear;. -webkit-transition: background-color .2s linear, opacity .2s linear;. width: 15px;. / there must be 'right' or 'left' for ps__rail-y /. right: 0;. / please don't change 'position' */. position: absolute;.}...ps--active-x > .ps__rail-x,..ps--active-y > .ps__rail-y {. display: block;. background-color: transparent;.}...ps:hover > .ps__rail-x,..ps:hover

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\select2.full.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	78627
Entropy (8bit):	5.304949316338334
Encrypted:	false
SSDEEP:	768:io52DFnru7/eGGG2nqwi8hnARlaDRGookOlxN97crtKCBQOu7uq7dnWKAskWZEpm:9s62nARrkOvjqE7JgqZ3h
MD5:	D53E9F5D63ED6E33DD7C368B85851658
SHA1:	364E381DB0E161BF830AEF37361650FFF0458177
SHA-256:	BEE70B9AB8DD7E2F58C23198FF7090EC79DC705492FD7452D4CFF793F1435C9C
SHA-512:	248CBF973F1D00EFD3CA442CF958CCA5DDB2B46C4F720F954AA410FB78B91A1E681F6F5B26E5E57B7125D26C9A951C31A0957B5279C418F2BD8C7F493CC44E00
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/custom_libraries/select2/select2.full.min.js?v=1.5.7
Preview:	/! Select2 4.0.12 \| https://github.com/select2/select2/blob/master/LICENSE.md /.!function(n){"function"==typeof define&&define.amd?define(["jquery"],n):"object"==typeof module&&module.exports?module.exports=function(e,t){return void 0===t&&(t="undefined"!=typeof window?require("jquery"):require("jquery")(e)),n(t),t}:n(jQuery)}(function(d){var e=function(){if(d&&d.fn&&d.fn.select2&&d.fn.select2.amd)var e=d.fn.select2.amd;var t,n,i,h,o,s,f,g,m,v,y,_,r,a,w,l;function b(e,t){return r.call(e,t)}function c(e,t){var n,i,r,o,s,a,l,c,u,d,p,h=t&&t.split("/"),f=y.map,g=f&&f["*"]\|\|{};if(e){for(s=(e=e.split("/")).length-1,y.nodeIdCompat&&w.test(e[s])&&(e[s]=e[s].replace(w,"")),"."===e[0].charAt(0)&&h&&(e=h.slice(0,h.length-1).concat(e)),u=0;u<e.length;u++)if("."===(p=e[u]))e.splice(u,1),u-=1;else if(".."===p){if(0===u\|\|1===u&&".."===e[2]\|\|".."===e[u-1])continue;0<u&&(e.splice(u-1,2),u-=2)}e=e.join("/")}if((h\|\|g)&&f){for(u=(n=e.split("/")).length;0<u;u-=1){if(i=n.slice(0,u).join("/"),h)for(d=h.len

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\select2.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	14966
Entropy (8bit):	4.771466859662571
Encrypted:	false
SSDEEP:	192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF
MD5:	9F54E6414F87E0D14B9E966F19A174F9
SHA1:	AE5735562FAABD1A2D9803BBD7BF4C502B5E4F51
SHA-256:	15D6AD4DFDB43D0AFFAD683E70029F97A8F8FC8637A28845009EE0542DCCDF81
SHA-512:	9CC365A6E6833EBAA5125B37217FD0E7A1F7EAABC1012C1BDE2A6EA373317966EC401D7CF35A31D1C46FED43D380196B8AAA329EDDF92A313080651E51720F9F
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.jsdelivr.net/npm/select2@4.0.13/dist/css/select2.min.css
Preview:	.select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--single .select2-selection__rendered{display:block;padding-left:8px;padding-right:20px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.select2-container .select2-selection--single .select2-selection__clear{position:relative}.select2-container[dir="rtl"] .select2-selection--single .select2-selection__rendered{padding-right:8px;padding-left:20px}.select2-container .select2-selection--multiple{box-sizing:border-box;cursor:pointer;display:block;min-height:32px;user-select:none;-webkit-user-select:none}.select2-container .select2-selection--multiple .select2-selection__rendered{display:inline-block;overflow:hidden;padding-left:8px;text-overflow:ellipsis;white-space:nowrap}.select2-cont

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Sortable[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text
Category:	downloaded
Size (bytes):	35423
Entropy (8bit):	5.062454315576028
Encrypted:	false
SSDEEP:	384:GE6g7ZY6C/pXmW26njZP5Rw2E8A/eoi1OZ8/A2b63piCPSg/Eo4/UJtIiwrb9cO6:f4P/+Zn2Oyqy89U0sS91deOi9qP
MD5:	DA8EDAEA9AA40564E0497860AE7313BE
SHA1:	CA14CA33A587D188B1FA44A01E7AD896CBF9F60F
SHA-256:	4B065A2D2AEB5AAA97E1D446C680B96C46212215F801B33D2F951B14ED14326F
SHA-512:	775B5A0BDE75A6B2A1E9223064B609F838076DC3FE7F9F61B832A2C0A5524B3D7127ABDC26F01C60BE03F7241E39B085FEBED5B17FC40B607900401ACCD1509C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/Sortable.js?v=1.5.7
Preview:	/*!. Sortable. * @author.RubaXa <trash@rubaxa.org>. * @license MIT. /..(function sortableModule(factory) {.."use strict";...if (typeof define === "function" && define.amd) {...define(factory);..}..else if (typeof module != "undefined" && typeof module.exports != "undefined") {...module.exports = factory();..}..else {.../ jshint sub:true /...window["Sortable"] = factory();..}.})(function sortableFactory() {.."use strict";...if (typeof window == "undefined" \|\| !window.document) {...return function sortableError() {....throw new Error("Sortable.js requires a window with a document");...};..}...var dragEl,...parentEl,...ghostEl,...cloneEl,...rootEl,...nextEl,...lastDownEl,....scrollEl,...scrollParentEl,...scrollCustomFn,....lastEl,...lastCSS,...lastParentCSS,....oldIndex,...newIndex,....activeGroup,...putSortable,....autoScroll = {},....tapEvt,...touchEvt,....moved,..../* @const */...R_SPACE = /\s+/g,...R_FLOAT = /left\|right\|inline/,....expando = 'Sortable' + (new Date).getTime(),

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bg1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, frames 3
Category:	downloaded
Size (bytes):	145982
Entropy (8bit):	7.7933207111786205
Encrypted:	false
SSDEEP:	3072:1boCgQmy7aU0VEdVGzg64Dgg6K476ubZEFxDnWhtMOwmUm+eKe0oJ:n4rU3V6LBRvCfrAM3Fb38J
MD5:	A4A39FF6BEA05BA9489FF1ED16927CAC
SHA1:	AFC933ACC54CE6F7C4510F0F09B567CBE18C2317
SHA-256:	9B262AF6371AB67443072A1E8E4ABE85A7BCDB370D13AE5E48BA5BC04FA435D6
SHA-512:	113A693FA81F118124149252D2B197229D3CF37F6FEA491D95F59DA2466A0F9CA133A95731857F94EE884A35056B01E66FE2B9D628DA2791A7062C2E150CFCC1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/img/bg1.jpg
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmpMM:InstanceID="xmp.iid:0C15CF8FEC2811EAB036C1F6265DF823" xmpMM:DocumentID="xmp.did:0C15CF90EC2811EAB036C1F6265DF823"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0C15CF8DEC2811EAB036C1F6265DF823" stRef:documentID="xmp.did:0C15CF8EEC2811EAB036C1F6265DF823"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap-float-label.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4751
Entropy (8bit):	4.8132819528991755
Encrypted:	false
SSDEEP:	48:RQEjV/loFHqlHQgMWGIPQEjUIzFIlkIKuIHQL5tVfXLGD:V0FgJPRBhI2iKD
MD5:	6004A0676F4766F453E9B57871D22C69
SHA1:	B6AACAE90635D91C69EC77E461B75B567F740394
SHA-256:	CDBE293C2FCC357A96B0FDF21612B3A099226AE821A5B0D571615EA277649DED
SHA-512:	A35EDE2BB2E7A1F5180DD1D3B6B60BAD28E5E8427FB901A64CCA400EC9421D739888DC70AB6DF77C1C5577E83C770DDFE2F329FC846D873C89EDFAFB43D51C3F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/bootstrap-float-label.min.css?v=1.5.7
Preview:	.has-float-label {. display: block;. position: relative;.}..has-float-label label,..has-float-label > span:last-of-type {. position: absolute;. cursor: text;. font-size: 90%;. opacity: 1;. top: -0.4em;. left: 0.75rem;. z-index: 3;. line-height: 1;. padding: 0 1px;.}..has-float-label label::after,..has-float-label > span::after {. content: " ";. display: block;. position: absolute;. height: 5px;. top: 3px;. left: -0.2em;. right: -0.2em;. z-index: -1;.}..has-float-label .form-control::-webkit-input-placeholder {. opacity: 1;.}..has-float-label .form-control::-moz-placeholder {. opacity: 1;.}..has-float-label .form-control:-ms-input-placeholder {. opacity: 1;.}..has-float-label .form-control::placeholder {. opacity: 1;.}..has-float-label. .form-control:placeholder-shown:not(:focus)::-webkit-input-placeholder {. opacity: 0;.}..has-float-label .form-control:placeholder-shown:not(:focus)::-moz-placeholder {. opacity: 0;.}..has-float-label. .form-control:placeholder

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap-tagsinput[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1317
Entropy (8bit):	4.91185251492348
Encrypted:	false
SSDEEP:	12:UPIYJ14nmbDL+xevUREh2C8KZ1O7fGMhRcBgWLAkJ5wLAXgpLA1SNKZwmTIdevN9:gUn8DLuKrb47uqedJ5pv/ceFBQ58Z6di
MD5:	01A1887ADE863EF0E0943FC5440617BE
SHA1:	E28CD86BC71C5CCFB3B7F7306331C67A04346875
SHA-256:	F9D29846B772F9C28FE4A0FFE266BF4411A7E7B4650898353AF2731A4B3F1359
SHA-512:	DEE56981BA57DF737F5E1C83DDE5A53A015502B6869F701FA71CB07CE4C441E04307227F27B1E42EF9789891357EF02B1A1E327B51223DF4819C9A367E07D99A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/bootstrap-tagsinput.css?v=1.5.7
Preview:	.bootstrap-tagsinput {. background-color: #fff;. border: 1px solid #ccc;. box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.075);. display: inline-block;. padding: 4px 6px;. color: #555;. vertical-align: middle;. border-radius: 4px;. max-width: 100%;. line-height: 22px;. cursor: text;.}..bootstrap-tagsinput input {. border: none;. box-shadow: none;. outline: none;. background-color: transparent;. padding: 0 6px;. margin: 0;. width: auto;. max-width: inherit;.}..bootstrap-tagsinput.form-control input::-moz-placeholder {. color: #777;. opacity: 1;.}..bootstrap-tagsinput.form-control input:-ms-input-placeholder {. color: #777;.}..bootstrap-tagsinput.form-control input::-webkit-input-placeholder {. color: #777;.}..bootstrap-tagsinput input:focus {. border: none;. box-shadow: none;.}..bootstrap-tagsinput .tag {. margin-right: 2px;. color: white;.}..bootstrap-tagsinput .tag [data-role="remove"] {. margin-left: 8px;. cursor: pointer;.}..bootstrap-tagsinput .tag [data-ro

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap.rtl.only.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	27324
Entropy (8bit):	4.55424557465124
Encrypted:	false
SSDEEP:	768:93y1miUuFc0Kr5x95okubEcq2FltvN/XcAcA7:93yGAcA7
MD5:	34FE5B5195DE33B9C1EB48B2F7DB7833
SHA1:	22DD22EDF5C69E4B913F50BF9D8D910A70B480CA
SHA-256:	DCE1D13CFA37A401BE7944C0ADCF4C24C20F611B5EBE2121AFE1F083091F58CB
SHA-512:	CC5885EFF8D13CA54533C0A8C10F2C3933E126BEA43637DF9487E9102B9E415603A8DA76F41329A59C4A377C336D549F084D12EC6E5FD192A9E636E29E49543B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/bootstrap.rtl.only.min.css?v=1.5.7
Preview:	..rtl {. text-align: right;. direction: rtl;.}...rtl .nav {. padding-right: 0;.}...rtl .navbar-nav .nav-item {. float: right;.}...rtl .navbar-nav .nav-item + .nav-item {. margin-right: 1rem;. margin-left: inherit;.}...rtl th {. text-align: right;.}...rtl .alert-dismissible {. padding-right: 1.25rem;. padding-left: 4rem;.}...rtl .dropdown-menu {. right: 0;. text-align: right;.}...rtl .checkbox label {. padding-right: 1.25rem;. padding-left: inherit;.}....rtl .custom-control-label::after,..rtl .custom-control-label::before {. right: 0;. left: inherit;.}...rtl .custom-select {. padding: 0.375rem 0.75rem 0.375rem 1.75rem;. background: #fff url("data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E") no-repeat left 0.75rem center;. background-size: 8px 10px;.}...rtl .custom-control {. padding-right: 1.5rem;. padding-left: inherit;. margin-right: inherit;. margin-le

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\cropper.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	35550
Entropy (8bit):	5.295811357271679
Encrypted:	false
SSDEEP:	768:tnJy0QsdggKZ3uSlJ8hmhz9JrZ2U9IeDHc:rypZ3zlYg9JrZ2wIeD8
MD5:	97CD7F22E801FB43667D2DD99B5669B5
SHA1:	B159480635DD641AB16B816E74238E61FD1F4387
SHA-256:	3BC88C6363A317ADF2BE8E64151965C8ECAE2AD8ABB88F5E2A65F314CC8F41A3
SHA-512:	A758799B03AD63271E7CA16995027538B8488C9F0625F9647605AF68F1CC2C932525C69F7645C530696F80D936CE10E8F975EFB6201B352400551500CB3F05C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/cropper.min.js?v=1.5.7
Preview:	/!. Cropper.js v1.4.0. * https://fengyuanchen.github.io/cropperjs. . Copyright 2015-present Chen Fengyuan. * Released under the MIT license. . Date: 2018-06-01T15:18:18.692Z. */.!function(t,i){"object"==typeof exports&&"undefined"!=typeof module?module.exports=i():"function"==typeof define&&define.amd?define(i):t.Cropper=i()}(this,function(){"use strict";var n="undefined"!=typeof window,h=n?window:{},d="cropper",k="all",T="crop",W="move",N="zoom",E="e",H="w",L="s",O="n",z="ne",Y="nw",X="se",R="sw",r=d+"-crop",t=d+"-disabled",S=d+"-hidden",l=d+"-hide",o=d+"-modal",p=d+"-move",m=d+"Action",g=d+"Preview",s="crop",c="move",u="none",a="crop",f="cropend",v="cropmove",w="cropstart",x="dblclick",b=h.PointerEvent?"pointerdown":"touchstart mousedown",y=h.PointerEvent?"pointermove":"touchmove mousemove",M=h.PointerEvent?"pointerup pointercancel":"touchend touchcancel mouseup",C="ready",D="resize",B="wheel mousewheel DOMMouseScroll",A="zoom",I=/^(?:e\|w\|s\|n\|se\|sw\|ne\|nw\|all\|crop\|move\|zoom)$

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	696
Entropy (8bit):	5.095554499844632
Encrypted:	false
SSDEEP:	12:jFcSO6ZN6pjCtqFcSO6ZRoT6pj6qFcSO6Z0/T6pjC/cYqFcSO6ZN76pjC4jYY:5cSOYNUcSOYsccSOYUT74cSOYN78jt
MD5:	1568D3C9A5BE898C777B0FB846603DD1
SHA1:	B79B8530B8C4AB156E19C097F8F9B6FB456DE54D
SHA-256:	437DF9B897631B714FAD139CD108684832C3B7496447EE3B6D3A2CC00A876A03
SHA-512:	9C312505D4411F2F97AC558C383955F1282C14B05EC0D02BBD0F66F82D79AE7ABA98FD3487E6ABBED3BD3051685907F0CE0946A766F81127F4BD35BC4B4994D1
Malicious:	false
Reputation:	low
Preview:	@font-face {. font-family: 'Cairo';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6HkvalqKbI6L59A.woff) format('woff');.}.@font-face {. font-family: 'Cairo';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/cairo/v9/SLXGc1nY6HkvalIhTp0.woff) format('woff');.}.@font-face {. font-family: 'Cairo';. font-style: normal;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6Hkvalr-ao6L59A.woff) format('woff');.}.@font-face {. font-family: 'Cairo';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/cairo/v9/SLXLc1nY6Hkvalqaa46L59A.woff) format('woff');.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\dataTables.bootstrap4.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5034
Entropy (8bit):	4.654315342575702
Encrypted:	false
SSDEEP:	48:y7jgFxGhG1RR1Dz31Ysw7i/oI+gZLQDe/hiogL6w/I+ZQiofLHZmHSmIgSmMZSJf:ygFxG4RrDnrbdZBbD/Y4nRT3+
MD5:	DA05621C19688241057EA5B1B3852E77
SHA1:	373E1D9AC771636B809A5BF3E542B4BC23AF2D6E
SHA-256:	2E9CA44DD8CC9BE8D52E90D68983A41FC6D88A2B616F881A8CC627227823D76F
SHA-512:	3435AFE27DAFE7D10EA23F9D0EF5DF0F8B8619308E5E42C09E6F83850B72631A592F894C4B29935F91C3F22E4D11C17ED582C1920BC1C9AADD62C25A0355BA30
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/dataTables.bootstrap4.min.css?v=1.5.7
Preview:	table.dataTable{clear:both;margin-top:6px !important;margin-bottom:6px !important;max-width:none !important;border-collapse:separate !important}table.dataTable td,table.dataTable th{-webkit-box-sizing:content-box;box-sizing:content-box}table.dataTable td.dataTables_empty,table.dataTable th.dataTables_empty{text-align:center}table.dataTable.nowrap th,table.dataTable.nowrap td{white-space:nowrap}div.dataTables_wrapper div.dataTables_length label{font-weight:normal;text-align:left;white-space:nowrap}div.dataTables_wrapper div.dataTables_length select{width:75px;display:inline-block}div.dataTables_wrapper div.dataTables_filter{text-align:right}div.dataTables_wrapper div.dataTables_filter label{font-weight:normal;white-space:nowrap;text-align:left}div.dataTables_wrapper div.dataTables_filter input{margin-left:0.5em;display:inline-block;width:auto}div.dataTables_wrapper div.dataTables_info{padding-top:0.85em;white-space:nowrap}div.dataTables_wrapper div.dataTables_paginate{margin:0;white-spa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	3.300829040385864
Encrypted:	false
SSDEEP:	96:j2P+WcqqeZ20c6Fp4YSqBcqDvTJHjdrWGcGGGGS1ZBXLTExdAwiSH:jy/FpFWG71ZBMTA3A
MD5:	4CA9983F34F91EFF31C8AA46967F4DBE
SHA1:	560FD22275900356D1B6A64128E24E18098296E8
SHA-256:	71CD683F276EB53C04C71033EF8B7BE815853C252A2400BEAF8AA8EBCC3E6CA1
SHA-512:	FCC42B4DEFC1F7B60D44F0741BA33894338202548768BFFD6D0087C4146D224D58659157A35C32DB5C8CFAA5E70C40E3722581EE2567EB01F92A9754AC78CD29
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery-3.3.1.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/jquery-3.3.1.min.js?v=1.5.7
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.barrating.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5777
Entropy (8bit):	5.065440885456091
Encrypted:	false
SSDEEP:	96:1krBplL6dU1GHIV+6YnX8Hmd//fWmgJ0Fhht6QnD1H1lFCOLA:OrBplIZ0BYnX8HmdPgJ0FhH6QD1H17hM
MD5:	9C1A04CD4A8ABCB9677E9E372F692712
SHA1:	260DD4D4752EB57B8F770F0A1604BB814CB3E7C8
SHA-256:	28ECA032AA32DE5D2AD0E3851D957357F1A393DD40B01598B40C11443D853CD9
SHA-512:	6B8124BDDD2E7D7F6C7E274AA30951C578D79C116180C2BE2329A6FD5A5FD32C2E204A537BDB52380CFA0E1502424B8CD99ADF83C2F5BD3653A6F1EFE1FBAC75
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/jquery.barrating.min.js?v=1.5.7
Preview:	!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&module.exports?module.exports=t(require("jquery")):t(jQuery)}(function(t){var e=function(){function e(){var e=this,n=function(){var n=["br-wrapper"];""!==e.options.theme&&n.push("br-theme-"+e.options.theme),e.$elem.wrap(t("<div />",{"class":n.join(" ")}))},i=function(){e.$elem.unwrap()},a=function(n){return t.isNumeric(n)&&(n=Math.floor(n)),t('option[value="'+n+'"]',e.$elem)},r=function(){var n=e.options.initialRating;return n?a(n):t("option:selected",e.$elem)},o=function(){var n=e.$elem.find('option[value="'+e.options.emptyValue+'"]');return!n.length&&e.options.allowEmpty?(n=t("<option />",{value:e.options.emptyValue}),n.prependTo(e.$elem)):n},l=function(t){var n=e.$elem.data("barrating");return"undefined"!=typeof t?n[t]:n},s=function(t,n){null!==n&&"object"==typeof n?e.$elem.data("barrating",n):e.$elem.data("barrating")[t]=n},u=function(){var t=r(),n=o(),i=t.val(),a=t.data("html")?t.data(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\scripts[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2525
Entropy (8bit):	4.778028720733374
Encrypted:	false
SSDEEP:	48:95AcGw6RBgmJ7YxodYcNjXscxj3Bcr+Ovdy6BsINmet:9zBwtJy+pgt
MD5:	5B8BAF56A608F2E9D264D84A54DF8FF7
SHA1:	F6D75BB9121A4F1EDF3E70BF8D336B43041536B8
SHA-256:	E6F25BC5269C949407D81532AA93885C4D700610F57CADC5BA4E2A4216E1D597
SHA-512:	BA82533949F3230F73DA18DC707BC24FB1D742DC00EB775CCAC46BC89C3A4279880779B6FEEA482E62FDFD230384DE43649A317F92340FA3483AF017AB57D7EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/scripts.js?v=1.5.7
Preview:	/* Dore Theme Select & Initializer Script ..Table of Contents..01. Css Loading Util.02. Theme Selector And Initializer./../ 01. Css Loading Util /.function loadStyle(href, callback) {. for (var i = 0; i < document.styleSheets.length; i++) {. if (document.styleSheets[i].href == href) {. return;. }. }. var head = document.getElementsByTagName("head")[0];. var link = document.createElement("link");. link.rel = "stylesheet";. link.type = "text/css";. link.href = href;. if (callback) {. link.onload = function () {. callback();. };. }. var mainCss = $(head).find('[href$="main.css"]');. if (mainCss.length !== 0) {. mainCss[0].before(link);. } else {. head.appendChild(link);. }.}../ 02. Theme Selector, Layout Direction And Initializer /.(function ($) {. if ($().dropzone) {. Dropzone.autoDiscover = false;. }.... / Default Theme Color, Border Radius and Direction */. var theme = "dore.light.blue.css";. var direction = "ltr";. var radius =

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\select.from.library[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5723
Entropy (8bit):	4.78762704065638
Encrypted:	false
SSDEEP:	96:QPnRBClIy4GjNCKwv8yUSWHzBBI7yZVaFz/m08yT/Hsya+r+yhF+gT1Bt8E:ERB6IyLjNCKwvxUS+zBBI7yDaFz/m0xX
MD5:	E138C20474C162234B9D9CE6F01690B5
SHA1:	6B735F180F3562A751E70F96382083E1CB3BEEDD
SHA-256:	DE33F7F24E9C253164642469230366FBD8595286CCFFA29D641464445EA045B8
SHA-512:	73A8F4E147C4BF25D797B336ED9521893446ECDBF21E554A00101F59E15EFD648314C023629612F9C1D2FDA1D8AA00D86D54C49B306160914FDEC6126E057F25
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/dore-plugins/select.from.library.js?v=1.5.7
Preview:	/* .Plugin : Select Image From Library.Version : 0.0.1.Description : Select from a modal which contains list of media items..*/.$.selectFromLibrary = function(element, options) {. var plugin = this;. var defaults = {. // Sets how many items can be selected from library. Set to -1 disable selection limit.. count: 1,.. // Modal id from which items will be selected. libraryId: "#modal",.. // Submit button class in library modal.. submitButtonClass: ".sfl-submit",.. // Container class for library item. itemContainerClass: ".sfl-item-container",.. // Selected item template class. selectedItemClass: ".sfl-selected-item",.. // Selected item template class to distinction. selectedItemClassActive: ".sfl-selected-item-active",.. // Selected item template image class. selectedItemImageClass: ".sfl-selected-item-image",.. // Selected item template label class. selectedItemLabelClass: ".sfl-selected-item-label",.. // Selected item delete class.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\typeahead.bundle[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12901
Entropy (8bit):	5.05639343595436
Encrypted:	false
SSDEEP:	192:nprBvDV+qDpr8BebyCp7bIe+pCxMW8BKtg3won0JwfI3:nprBB+qDprFbDbbUNH3R4wfI3
MD5:	14E9ABD66295B25D5B1465B2C81B8313
SHA1:	DEDE188EA66748BB6CBA6248E1AFC4358E30EEB9
SHA-256:	26B93D8F31EEE7225F121E2CA021994DEDD7ECE99F8CAC6ECB7C62895675E772
SHA-512:	0D8CDD7C40FFACBFC684F202CB473B6A77E50E176C777E2D429F26C0EC7B90654AD8E7084267F19350108E42673D17496A8874E1D71DE0CAF1DEC496EED6D8A7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/typeahead.bundle.js?v=1.5.7
Preview:	.//https://github.com/bassjobsen/Bootstrap-3-Typeahead.!function(root,factory){"use strict";"undefined"!=typeof module&&module.exports?module.exports=factory(require("jquery")):"function"==typeof define&&define.amd?define(["jquery"],function($){return factory($)}):factory(root.jQuery)}(this,function($){"use strict";var Typeahead=function(element,options){this.$element=$(element),this.options=$.extend({},Typeahead.defaults,options),this.matcher=this.options.matcher\|\|this.matcher,this.sorter=this.options.sorter\|\|this.sorter,this.select=this.options.select\|\|this.select,this.autoSelect="boolean"!=typeof this.options.autoSelect\|\|this.options.autoSelect,this.highlighter=this.options.highlighter\|\|this.highlighter,this.render=this.options.render\|\|this.render,this.updater=this.options.updater\|\|this.updater,this.displayText=this.options.displayText\|\|this.displayText,this.itemLink=this.options.itemLink\|\|this.itemLink,this.itemTitle=this.options.itemTitle\|\|this.itemTitle,this.followLinkOnSelect=th

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\XSE5RR0Z.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	134
Entropy (8bit):	4.430792362806456
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIwcWWGu:q43tISl6kXiMIWSU6XlIpfGu
MD5:	4AA7A432BB447F094408F1BD6229C605
SHA1:	1965C4952CC8C082A6307ED67061A57AAB6632FA
SHA-256:	34CCDC351DC93DBF30A8630521968421091E3ED19C31A16E32C2EABB55C6A73A
SHA-512:	497BA6D8EC6BF2267FE6133A432F0E9AB12B982C06BB23E3DE6E5A94D036509D2556BA822E3989D8CD7E240D9BAE8096FC5BE8A948E3E29FE29CAB1FEA1FE31C
Malicious:	false
Reputation:	low
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap-notify.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8122
Entropy (8bit):	5.076407209199658
Encrypted:	false
SSDEEP:	96:8U1nEB5DuECqBDmmqGJts9tnK39YkwvF6uILhQUnnjFvJVdnVgeEicg1r5hLrKmp:fnE7DPtmmDjctngOeLdnVFVgeVcgLFyI
MD5:	35EB2C2185524EECB2B772B667552014
SHA1:	A9EDF0014D98A9CB514C61B34D2A4BABB4A1D4C9
SHA-256:	2DB9DE4F5FC27837D4295DF39D94C34CCC336C31D02322F7F7CAD69AE8E338DA
SHA-512:	77466C240C97B179697833408578F899B6AAA4B7DDCA839A40599A1551BF2A87599C0695ADD3AC3BD2A21BAD95EDD715FAC1C815BED54CC9A4079267B40A2AF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/bootstrap-notify.min.js?v=1.5.7
Preview:	/* Project: Bootstrap Growl = v3.1.3 \| Description: Turns standard Bootstrap alerts into "Growl-like" notifications. \| Author: Mouse0270 aka Robert McIntosh \| License: MIT License \| Website: https://github.com/mouse0270/bootstrap-growl */.!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t("object"==typeof exports?require("jquery"):jQuery)}(function(t){function e(e,i,n){var i={content:{message:"object"==typeof i?i.message:i,title:i.title?i.title:"",icon:i.icon?i.icon:"",url:i.url?i.url:"#",target:i.target?i.target:"-"}};n=t.extend(!0,{},i,n),this.settings=t.extend(!0,{},s,n),this._defaults=s,"-"==this.settings.content.target&&(this.settings.content.target=this.settings.url_target),this.animations={start:"webkitAnimationStart oanimationstart MSAnimationStart animationstart",end:"webkitAnimationEnd oanimationend MSAnimationEnd animationend"},"number"==typeof this.settings.offset&&(this.settings.offset={x:this.settings.offset,y:this.settings.offset}),this.init()}var

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap-stars[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	799
Entropy (8bit):	4.671030179968652
Encrypted:	false
SSDEEP:	12:AWw314mbnC0nK24n+5cMK00k14en9edZBbZ7FaAgwYPwynLTVtOp:Ag8C0nKvk4Tfen9A1FyxLc
MD5:	EB774A674334E53F37C34CC6C9E74876
SHA1:	8AA2173ADF5F597FC886156FB3C2D4702374BAF2
SHA-256:	2BB6AB50269B445424551594377459C34FEA150551778056E6E75413FC37F453
SHA-512:	F925BD5CF4524C49FF991C51912FC311B045A56323E5C460AFD7B363D9CAB445F3CA1DBDDCEB2F2310D0EECDC2136130577AF8009B87B8CF80B144BD34F2C448
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/bootstrap-stars.css?v=1.5.7
Preview:	.br-wrapper {. display: inline-block;. vertical-align: top;.}...br-theme-bootstrap-stars .br-widget {. height: 28px;. white-space: nowrap;.}..br-theme-bootstrap-stars .br-widget a {. font-family: "simple-line-icons";. font-size: 16px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;. text-rendering: auto;. -webkit-font-smoothing: antialiased;. text-decoration: none;. margin-right: 2px;.}..br-theme-bootstrap-stars .br-widget a:after {. content: "\e09b";. color: #d2d2d2;.}...br-theme-bootstrap-stars .br-widget .br-current-rating {. display: none;.}..br-theme-bootstrap-stars .br-readonly a {. cursor: default;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\chartjs-plugin-datalabels[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8677
Entropy (8bit):	5.194490826752831
Encrypted:	false
SSDEEP:	192:CbdOxYi6N4AGGqEJ2Vsvq1Rr2cuQTaO+rkp5CKjtt/lju/:CbdOx04HGqE4sy1FVatgjljtttju/
MD5:	E87E5E7879E13B4D94E1C09508DD5D00
SHA1:	C98D2FE55084E172648C8DDD4B949D648386D095
SHA-256:	BC43093DCB8C8666F25E661E29B2E0ABCC2334561CD12650EDD4A4C09120AB6C
SHA-512:	300D71B992A19A7AFE0E696D8C22489852496F334CBAD7FC5B964BEB127082F38C75C92EEF0BE6D659FA4A832F51C2E9BC12B1F46D696111E7F8936E02B2B83E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/chartjs-plugin-datalabels.js?v=1.5.7
Preview:	/!. @license. * chartjs-plugin-datalabels. * http://chartjs.org/. * Version: 0.3.0. . Copyright 2018 Chart.js Contributors. * Released under the MIT license. * https://github.com/chartjs/chartjs-plugin-datalabels/blob/master/LICENSE.md. /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(require("chart.js")):"function"==typeof define&&define.amd?define(["chart.js"],e):e(t.Chart)}(this,function(l){"use strict";var t=(l=l&&l.hasOwnProperty("default")?l.default:l).helpers,i=function(){this._rect=null,this._rotation=0};t.extend(i.prototype,{update:function(t,e,n){var a=t.x,r=t.y,i=a+e.x,o=r+e.y;this._rotation=n,this._rect={x0:i-1,y0:o-1,x1:i+e.w+2,y1:o+e.h+2,cx:a,cy:r}},contains:function(t,e){var n,a,r,i,o,l=this._rect;return!!l&&(n=l.cx,a=l.cy,r=this._rotation,i=n+(t-n)Math.cos(r)+(e-a)Math.sin(r),o=a-(t-n)Math.sin(r)+(e-a)*Math.cos(r),!(i<l.x0\|\|o<l.y0\|\|i>l.x1\|\|o>l.y1))}});var r=l.helpers,g={toTextLines:function(t){var e,n=[];for(t=[].concat(t);t.length;)"str

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\component-custom-switch.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6618
Entropy (8bit):	5.230714826125619
Encrypted:	false
SSDEEP:	192:HUS9USSUSgUS2US1USxuUSGUSOUSuUSdUS6USx2USeUSNUSxjUSxwUSxqUSxYHUX:01A+ClgoUapesk3sAqIN0+MNUvTw
MD5:	DB4E5EC19FB2D76F982FA8222FD62E5E
SHA1:	9510C1189F25A40268CDCFE86DE0229CC9CF5B06
SHA-256:	DA354292BA92485D07718219A7367B1625B1ED3D585B6E4916E7DC728D39D5F5
SHA-512:	2FCDDDBD60261FC0E0EBE9ACE940A335B1B481E9656B063F831041E0A5D6CF9A10799A36DB14E9649C11396E6D7D5FA7FC43239954F8D90801493EE1AB82475B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/component-custom-switch.min.css?v=1.5.7
Preview:	.custom-switch .custom-switch-input {. display: none;.}..custom-switch .custom-switch-input,..custom-switch .custom-switch-input *,..custom-switch .custom-switch-input :after,..custom-switch .custom-switch-input :before,..custom-switch .custom-switch-input + .custom-switch-btn,..custom-switch .custom-switch-input:after,..custom-switch .custom-switch-input:before {. box-sizing: border-box;.}..custom-switch .custom-switch-input :after:selection,..custom-switch .custom-switch-input :before:selection,..custom-switch .custom-switch-input :selection,..custom-switch .custom-switch-input + .custom-switch-btn:selection,..custom-switch .custom-switch-input:after:selection,..custom-switch .custom-switch-input:before:selection,..custom-switch .custom-switch-input:selection {. background: 0 0;.}..custom-switch .custom-switch-input + .custom-switch-btn {. outline: 0;. display: inline-block;. position: relative;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\custom2[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19894
Entropy (8bit):	4.99941876726878
Encrypted:	false
SSDEEP:	192:MKoqwqfcl5+mqcqvqZqE21beF3XgzUgEWhv4m1CMTWSLWWVkeVBgFISjgzOXYhNX:xoqwqo+mqcqvqZqquOF5j4OgLFFj18LS
MD5:	79559E92849750E4404356D466BC047E
SHA1:	833C62B5CDA7734E6C19EEA2BA065236F5E51458
SHA-256:	7AB3329DD5505EEAF31533C70A390D4C76D55CCF29855858523CC0CE6D995917
SHA-512:	4AC316D02196364F2690036A58BCA01A3223108D2E0496AF6242823A817ED18360A3851F9007D312A5A92A6139B9C12045276F8029326A39CFAB3B5FE1E38629
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/css/custom2.css?v=1.5.7
Preview:	.pull-search-left {. float: left !important;.}..pull-search-right {. float: right !important;.}...email_warning {. background-color: #ccb633;. color: #fff;.}..buttons-html5 {. background-color: #003e6f !important;. border-color: #003e6f !important;. color: #fff !important;.}..buttons-html5:hover {. color: #fff !important;. background-color: #2babab !important;. border-color: #2babab !important;.}...customer-action{. padding:3px 5px;. margin-top:-10px;. border-radius:15px;. background-color: #003e6f;. color:#fff;.}..table.dataTable.dtr-inline.collapsed>tbody>tr[role="row"]>td:first-child:before, table.dataTable.dtr-inline.collapsed>tbody>tr[role="row"]>th:first-child:before{. top:22px!important;.}..input.select2-search__field{. min-width:100px !important;.}..span.select2-selection.select2-selection--multiple.form-control{. padding: 0.5rem 0.75rem;.}...submit-button{. margin-top: 20px;. min-width: 100px;.}..@media(max-width:767px){. .list-link{. margin-left:20px;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\custom_temp[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	474
Entropy (8bit):	4.840459274039578
Encrypted:	false
SSDEEP:	12:0o7DqTRbhTtbRFqwFIL46FOjFOzFO+hcXNs8A3K2bDA:0RhlXa46w46qH9DA
MD5:	2C3A77EC10482B966B6C46D9DF60F828
SHA1:	587A6E0D502CA2B0ECC65E890F12B841F9EDA0CD
SHA-256:	241DA66F5ACAA879E18D55C1C218FEDDD7CF5C856A50BA43CF4D720251CE01C2
SHA-512:	42D3FF2D827E383A1627B0BF46B63989FEB6E4D93DC9D4E0203C3A8DA608FF1507C70E775938F940D28B20A12C72ABEB21FC56F74DE8C806E7985BA02D6FD5E0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/css/custom_temp.css?v=1.5.7
Preview:	.register-patient-page .card{. width:90%; !important;. min-height: 10vh; !important;.}./.questionBox{/./* min-height: 40rem;/./}*/...list-group-item{. padding-top: 0.5rem;. padding-right: 1.25rem;. padding-bottom: 0.5rem;. padding-left: 1.25rem;.}...card{. box-shadow: 0 1px 15px rgb(0 0 0 / 21%), 0 1px 6px rgba(0, 0, 0, 0.04); !important;.}...selectRadio{. margin-right: 10px;. height: 22px;. width: 22px;. vertical-align: middle;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\datatables.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	207225
Entropy (8bit):	5.32805433305057
Encrypted:	false
SSDEEP:	6144:QwZ3arr87JlG27/WDUSB6fi6trGJTVralbuFD:pk87JQ27/QU+iwTVralbuFD
MD5:	6EF72003834C8A7B64AD7622523B9A5C
SHA1:	BD68DB21D7DE95BC8BBC4B9048D67C76A0363B8C
SHA-256:	A7EF0B0553A4CD9FB7692888F2942A73ACF50B20ECC8CBC43E1CB63C519B210F
SHA-512:	64CFEDD3C04732C3F5929EAD94E2BB497B953E621CA55B8E7CB533FC3A2DD29370892E1A01CFDF8DDE83E662CDDF2D6A5D68363EBBC929708AC1F755275ED2E5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/datatables.min.js?v=1.5.7
Preview:	/. This combined file was created by the DataTables downloader builder:. * https://datatables.net/download. . To rebuild or modify this file with the latest versions of the included. * software please visit:. * https://datatables.net/download/#bs4/dt-1.10.16/af-2.2.2/b-1.5.1/cr-1.4.1/fc-3.2.4/fh-3.1.3/kt-2.3.2/r-2.2.1/rg-1.0.2/rr-1.2.3/sc-1.4.4/sl-1.2.5. . Included libraries:. * DataTables 1.10.16, AutoFill 2.2.2, Buttons 1.5.1, ColReorder 1.4.1, FixedColumns 3.2.4, FixedHeader 3.1.3, KeyTable 2.3.2, Responsive 2.2.1, RowGroup 1.0.2, RowReorder 1.2.3, Scroller 1.4.4, Select 1.2.5. /../!. DataTables 1.10.16. .2008-2017 SpryMedia Ltd - datatables.net/license.*/.(function(h){"function"===typeof define&&define.amd?define(["jquery"],function(E){return h(E,window,document)}):"object"===typeof exports?module.exports=function(E,G){E\|\|(E=window);G\|\|(G="undefined"!==typeof window?require("jquery"):require("jquery")(E));return h(G,E,E.document)}:h(jQuery,window,document)})(funct

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\datatables.responsive.bootstrap4.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3993
Entropy (8bit):	4.917538871810611
Encrypted:	false
SSDEEP:	48:X3bqdVqLqdSqDdRaAvRS+21QNAVnAHLoV9RaAvRS+2KnDtDvyykKNakflwAw:7qjqLq4qD+wrjSLewrfDphkKXw
MD5:	7D8EB4F81E79C8CFB1F95C50D9E43BFE
SHA1:	A177FB404C6258A20D2B7E43F23DF0ADA95CCA83
SHA-256:	42BA549624C73F034D969840FB0355FB3456565B600D3E84834717540074E212
SHA-512:	A13F6F2BB1BDABDA39226CEEB86625E670EC596C50DA223EFB9BEF1333F94DE6C6D5A7DE3AA13A116D08DB61A95E53F098DCC19D7F4597AE005F27FF5FD27250
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/datatables.responsive.bootstrap4.min.css?v=1.5.7
Preview:	table.dataTable.dtr-inline.collapsed>tbody>tr>td.child,table.dataTable.dtr-inline.collapsed>tbody>tr>th.child,table.dataTable.dtr-inline.collapsed>tbody>tr>td.dataTables_empty{cursor:default !important}table.dataTable.dtr-inline.collapsed>tbody>tr>td.child:before,table.dataTable.dtr-inline.collapsed>tbody>tr>th.child:before,table.dataTable.dtr-inline.collapsed>tbody>tr>td.dataTables_empty:before{display:none !important}table.dataTable.dtr-inline.collapsed>tbody>tr[role="row"]>td:first-child,table.dataTable.dtr-inline.collapsed>tbody>tr[role="row"]>th:first-child{position:relative;padding-left:30px;cursor:pointer}table.dataTable.dtr-inline.collapsed>tbody>tr[role="row"]>td:first-child:before,table.dataTable.dtr-inline.collapsed>tbody>tr[role="row"]>th:first-child:before{top:12px;left:4px;height:14px;width:14px;display:block;position:absolute;color:white;border:2px solid white;border-radius:14px;box-shadow:0 0 3px #444;box-sizing:content-box;text-align:center;text-indent:0 !important;fon

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93376
Entropy (8bit):	5.3917536957896575
Encrypted:	false
SSDEEP:	1536:5M+OWt6w6aic9MeoJ2my8LuThe7KFv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiZ:5OQRj1SVBYDG2
MD5:	1DE516A5B6B1C6033B92EE5F5D50C140
SHA1:	9E37DA5D5D789074D1DADD60977A9575A6332DD5
SHA-256:	9E7EA2B4BA8E2BCC4A964D6192E4671DC5F6863A1C7E35B52B229A3C1E67A68D
SHA-512:	99EF8E73A5D560CB3504B6BF1BC237957687280AFC99FCFF7A4B882FD2AE423B19721D6444FBD63D3ABCCFF8BD0A5CED79899CE02A2116D7710D2A89BEE370E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\googleAnalytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	94460
Entropy (8bit):	5.509645783280431
Encrypted:	false
SSDEEP:	1536:JKiXlDkhqB0oYp/HRzrJDHMn+4mdddfODv2Cdw6NtvV1X9NKPop7AG8Kf3tzu:JKiXlDcqB0/9zXdfx6NRJRu
MD5:	C4F4D04F067F5BCBF84331575F3354D7
SHA1:	425982AC55BCE895A5EAA65DB837D8A009BFCA28
SHA-256:	B3A3056391CB654FCCBE3E9D40B57317542EC0EB7EAC0C73D7378B2F5801B890
SHA-512:	C42BD4494752ADED6CE9BBA6D635BF52E8A51BC8FB9A1BFB600FCDF7E2B24E67D5821623FE3F097DF4BFF8859C7BED76BAFB65712693772BDF75AF3A27032031
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/custom_libraries/google/googleAnalytics.js
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},da;if("function"==typeof Object.setPrototypeOf)da=Object.setPrototypeOf;else{var ea;a:{var fa={fg:!0},ha={};try{ha.__proto__=fa;ea=ha.fg;break a}catch(a){}ea=!1}da=ea?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}.var ja=da,la=function(a,b){a.prototype=ba(b.pro

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.validate.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	24376
Entropy (8bit):	5.225452287268131
Encrypted:	false
SSDEEP:	384:Q6mrHpFLFWB6/tX2lHJdkMiYnFpg5SLwaE2fSNAc0Eny+RWuK7NeB2wV/vtrx+OE:mWB6/8lHJdkMioFpg5SUB2yQEny+NNxO
MD5:	8A25965D822705F957A243443D219787
SHA1:	0DA4C535B50BDB4DFFA3B5FAE3E999AEEE137CB5
SHA-256:	B0F074179D185032B4A2D0E7B1F3476B0626039334A638D47F84EF44990616B2
SHA-512:	D100CB509D082E7927B107586231BBBF68FCC044642AE7EF8C13669E0FC4751FECFD213B5FC710F72D3EC0CCEE413D257D743F3611BECE198734E593512DE430
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/jquery.validate/jquery.validate.min.js?v=1.5.7
Preview:	/! jQuery Validation Plugin - v1.19.1 - 6/15/2019. https://jqueryvalidation.org/. * Copyright (c) 2019 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.sub

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\login[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	5689
Entropy (8bit):	4.85462404042284
Encrypted:	false
SSDEEP:	48:CptRGvCHDlEcOTwxkXKG2IKbPF0el82ny3hT0KpSJaH3DsZx/ffxTSXAjnLu:GtRECHDykozu0c18YmS8WhHxTSXAvu
MD5:	BCFEF94198F1335B23D33D75F059FCA0
SHA1:	2C848901B36271E1B9134FC9C552CA35B4C61135
SHA-256:	6153DADD4AD835814C9A7EB2674EB9E12077856BB37F105476E694094B0607B5
SHA-512:	3A7E5E7F94266BE874FEB7D524C40E26E58C6A65A2E49C35BCEAA06E05CBCFB444D745124A2F41834983EA17FF0DEED781BE67DF9CD0954E0B44D7944E73B873
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html>.<html lang="en" translate="no">..<head>...<meta charset="UTF-8">...<title>....Log in!..</title>...<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">...<link rel="stylesheet" href="/dore/font/iconsmind-s/css/iconsminds.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/font/simple-line-icons/css/simple-line-icons.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap.rtl.only.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/bootstrap-float-label.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/fullcalendar.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/dataTables.bootstrap4.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/datatables.responsive.bootstrap4.min.css?v=1.5.7"/>...<link rel="stylesheet" href="/dore/css/vendor/perfect-scrollbar.css?v=1.5.7"/>...<link rel="st

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	51654
Entropy (8bit):	5.4474207310651055
Encrypted:	false
SSDEEP:	768:tewhmLu0lbRUK0j97LghmAascxj7Jh5mj4P3mTtViza:IHLLbR70j94hQsct4j4PWzZ
MD5:	1F0BBCB4AFCD2BE9560F4910C5229760
SHA1:	859F0365C78D8472D8882A96781AEAB35C561E88
SHA-256:	F5802E076567159349FA529FA5A43774A413F7F0B48F755495AEFA8476E2545F
SHA-512:	703D737CE97D1918C25A27EC15254985451B0C9C3DF6054161265192A0C595EC11ABBA244E384E5DC7902B95DA80FD068316712796C67DE9B7D1940C70E62A55
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/moment.min.js?v=1.5.7
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,function(){"use strict";var e,t;function n(){return e.apply(null,arguments)}function s(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function i(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function r(e){return void 0===e}function a(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function o(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function u(e,t){var n,s=[];for(n=0;n<e.length;++n)s.push(t(e[n],n));return s}function l(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function d(e,t){for(var n in t)l(t,n)&&(e[n]=t[n]);return l(t,"toString")&&(e.toString=t.toString),l(t,"valueOf")&&(e.valueOf=t.valueOf),e}function h(e,t,n,s){return Ot(e,t,n,s,!0).utc()}function c(e){return null==e._pf&&(e._pf={emp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mousetrap.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4871
Entropy (8bit):	5.469372365471852
Encrypted:	false
SSDEEP:	96:Z/j20SJVgsc8VW5OUIt68onpO4MNREieJpSm3Eufih3xkMBByO/ZyS3+:Zb2jQscn5OvtAO4QREie/1ah3GPO+
MD5:	C267E0135826E8B2871A1F3619736C88
SHA1:	20A3FF7D5695B759E561EEA508261D2510A8FE99
SHA-256:	7C7CE3B1A8C8830583BE7DEB7F76F52317575F83E822697BEB7FFF29C41A038E
SHA-512:	247B2E571AC511A90BAADD7B97C9C18AA89D47E4C8E7A517ECF321125F3263B52121FD0AF34DF5D074A7001CDBA6375D36244E05FB6762C45B5D724472ACC0EA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/mousetrap.min.js?v=1.5.7
Preview:	/* mousetrap v1.6.2 craig.is/killing/mice */.(function(p,t,h){function u(a,b,d){a.addEventListener?a.addEventListener(b,d,!1):a.attachEvent("on"+b,d)}function y(a){if("keypress"==a.type){var b=String.fromCharCode(a.which);a.shiftKey\|\|(b=b.toLowerCase());return b}return m[a.which]?m[a.which]:q[a.which]?q[a.which]:String.fromCharCode(a.which).toLowerCase()}function E(a){var b=[];a.shiftKey&&b.push("shift");a.altKey&&b.push("alt");a.ctrlKey&&b.push("ctrl");a.metaKey&&b.push("meta");return b}function v(a){return"shift"==a\|\|"ctrl"==a\|\|"alt"==a\|\|."meta"==a}function z(a,b){var d,e=[];var c=a;"+"===c?c=["+"]:(c=c.replace(/\+{2}/g,"+plus"),c=c.split("+"));for(d=0;d<c.length;++d){var k=c[d];A[k]&&(k=A[k]);b&&"keypress"!=b&&B[k]&&(k=B[k],e.push("shift"));v(k)&&e.push(k)}c=k;d=b;if(!d){if(!n){n={};for(var h in m)95<h&&112>h\|\|m.hasOwnProperty(h)&&(n[m[h]]=h)}d=n[c]?"keydown":"keypress"}"keypress"==d&&e.length&&(d="keydown");return{key:k,modifiers:e,action:d}}function C(a,b){return null===a\|\|a===t?!

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nouislider.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3843
Entropy (8bit):	5.098554418993622
Encrypted:	false
SSDEEP:	48:CpK7c3o7Hb9lgog6W2Sz/WOCef9/e6/vdcq+iRgFVvrMkBrLo9u0:pcgEuEF/e6/lcpegvvrRw99
MD5:	747F2FE367DE3FA7711A0D76A832CBD8
SHA1:	AAF34B3BD290C91B335C80DC684ACC2A9AB7E646
SHA-256:	B64629ABE5DDAB83D034D1910CFB47DC6E796AE641E3E921FD103CD006E781AC
SHA-512:	53D7B77A52A29BB1E563F6E3499EA98ADD165811C5ADE2368B6BAADC6D24690C72AEAE2B3CA837B3EEFE90DC28CB1DC11382BA1DA900960AF4E10F60D64FC935
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/css/vendor/nouislider.min.css?v=1.5.7
Preview:	/! nouislider - 11.1.0 - 2018-04-02 11:18:13 /.noUi-target,.noUi-target {-webkit-touch-callout:none;-webkit-tap-highlight-color:transparent;-webkit-user-select:none;-ms-touch-action:none;touch-action:none;-ms-user-select:none;-moz-user-select:none;user-select:none;-moz-box-sizing:border-box;box-sizing:border-box}.noUi-target{position:relative;direction:ltr}.noUi-base,.noUi-connects{width:100%;height:100%;position:relative;z-index:1}.noUi-connects{overflow:hidden;z-index:0}.noUi-connect,.noUi-origin{will-change:transform;position:absolute;z-index:1;top:0;left:0;height:100%;width:100%;-ms-transform-origin:0 0;-webkit-transform-origin:0 0;transform-origin:0 0}html:not([dir=rtl]) .noUi-horizontal .noUi-origin{left:auto;right:0}.noUi-vertical .noUi-origin{width:0}.noUi-horizontal .noUi-origin{height:0}.noUi-handle{position:absolute}.noUi-state-tap .noUi-connect,.noUi-state-tap .noUi-origin{-webkit-transition:transform .3s;transition:transform .3s}.noUi-state-drag {cursor:inherit!importa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\nouislider.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	22056
Entropy (8bit):	5.3624384323506
Encrypted:	false
SSDEEP:	384:8AV95TZWN1+06jtwVZx4ro0ZtyLdmsjLG8WugerrBx4twBh1782RWtzFgp535nIL:ZV95twb30ZtyLdmsjLG8WugenBx4twB4
MD5:	EEC731F0AFC75DB94584CA89AB39D838
SHA1:	C2601CDCD6D455FA15F8E245E49470166C5439BA
SHA-256:	201E76E12BE19DEAA5FA7BF5C1057B38AB1C707361C7C3AFB0699B17A58268CD
SHA-512:	F7B6ACDC38004F57C8B8185BBF772D98094F104A7B76C1BC67CDDDC7320FF82045D477C7C71B7627A03C1D991E529BC7338A896AE3ECFE2FD59FD13AC0D5138B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/nouislider.min.js?v=1.5.7
Preview:	/! nouislider - 11.1.0 - 2018-04-02 11:18:13 /..!function(a){"function"==typeof define&&define.amd?define([],a):"object"==typeof exports?module.exports=a():window.noUiSlider=a()}(function(){"use strict";function a(a){return"object"==typeof a&&"function"==typeof a.to&&"function"==typeof a.from}function b(a){a.parentElement.removeChild(a)}function c(a){return null!==a&&void 0!==a}function d(a){a.preventDefault()}function e(a){return a.filter(function(a){return!this[a]&&(this[a]=!0)},{})}function f(a,b){return Math.round(a/b)b}function g(a,b){var c=a.getBoundingClientRect(),d=a.ownerDocument,e=d.documentElement,f=p(d);return/webkit.Chrome.*Mobile/i.test(navigator.userAgent)&&(f.x=0),b?c.top+f.y-e.clientTop:c.left+f.x-e.clientLeft}function h(a){return"number"==typeof a&&!isNaN(a)&&isFinite(a)}function i(a,b,c){c>0&&(m(a,b),setTimeout(function(){n(a,b)},c))}function j(a){return Math.max(Math.min(a,100),0)}function k(a){return Array.isArray(a)?a:[a]}function l(a){a=String(a);var b=a.spli

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\perfect-scrollbar.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	18034
Entropy (8bit):	5.15872387955137
Encrypted:	false
SSDEEP:	384:CycVDWoZLgQMEi4emvwt3/d4VJgveh/BDlP1oaKjTUrkMn1CeF+Rd6gjZDVe+/+K:jcVngQMEi4JocVJgkP1LeIajZZ
MD5:	3D20CACCC3D9ADF7E0509F4390140FE4
SHA1:	050B4BECCA5865C78B48C3BB16A33339ECB33402
SHA-256:	9B237657BA86B4F520DCBE7AF367B6B566B07E66385258442FD219A80D58629E
SHA-512:	6D4ED4D094FF024F7D4FF68AF9326882BFD66A5B2F7DBEFBC9BE4628673632BF5C29BD87303F18C2EAC746578DDEADAAB9FDC08C37A277F942BFCB9D2426AE9F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.covid19-siparadigm.com/dore/js/vendor/perfect-scrollbar.min.js?v=1.5.7
Preview:	/!. perfect-scrollbar v1.3.0. * (c) 2017 Hyunje Jun. * @license MIT. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.PerfectScrollbar=e()}(this,function(){"use strict";function t(t){return getComputedStyle(t)}function e(t,e){for(var i in e){var r=e[i];"number"==typeof r&&(r+="px"),t.style[i]=r}return t}function i(t){var e=document.createElement("div");return e.className=t,e}function r(t,e){if(!v)throw new Error("No element matching method supported");return v.call(t,e)}function l(t){t.remove?t.remove():t.parentNode&&t.parentNode.removeChild(t)}function n(t,e){return Array.prototype.filter.call(t.children,function(t){return r(t,e)})}function o(t,e){var i=t.element.classList,r=m.state.scrolling(e);i.contains(r)?clearTimeout(Y[e]):i.add(r)}function s(t,e){Y[e]=setTimeout(function(){return t.isAlive&&t.element.classList.remove(m.state.scrolling(e))},t.settings.scrollingThreshold)}function a(t,e){

C:\Users\user\AppData\Local\Temp\~DF08F569E9D6AF613D.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.2893941777481388
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA:kBqoxxJhHWSVSEab
MD5:	B80CEBE7A36CF7728D27AD3146D686E7
SHA1:	A29047BF1CC21FEEFA6D8D9DDA4BE0EDB65922D8
SHA-256:	EC7C57333C52F47E820D02032548E9BA7AE6A3A624D279DEF25B1B3E0C87C5E8
SHA-512:	7D00CC6501D66099DA38FF9C7BA593AEB9B9ADF36AB75C1D6F7F85DD25E32AB66CF4944AE1C612BA05622D180D768EFCB3F3970F37B9CE1D3F91C75C515ED4E4
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF9417F44143076A8B.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	55243
Entropy (8bit):	0.8164093974981227
Encrypted:	false
SSDEEP:	192:kBqoxKAuqR+j9PGNpS9sk9sCsr9lCkV6s:kBqoxKAuqR+j9PGNpS9r93sr9gkV6
MD5:	89901460C3471AF5310EEC60EF894EBD
SHA1:	E40AA84C2C2FAB8C968C6E66A82C4688694623FC
SHA-256:	CE45B2E1C2DEBC9796F178F7AC39AD5AAA243CCA58217E126ACE00B6D4BECCB5
SHA-512:	E3929941E8D7A4A8466C22313CF8D1E6FAEB72024FFBFB698CB4810658FF49A2BF7FC30E832779D87A249779B52C725E7AF439BE4CA68FE6D4AB83134B39C11A
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD785E640233A2FFA.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.47951861309600063
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9loJF9loL9lWSSNoO:kBqoIsySSNoO
MD5:	ED08DF63049DFE4CF6E8E9FD92129B09
SHA1:	85D20AFB98C23AC2556FAB61235798C704EF48FA
SHA-256:	CB9D098413C369C4E4EB9E950818DF7888E5959656441CDEF95FD0D0E749A5D6
SHA-512:	7EB58D58F500EDC403B8496CC8B90E52EB020D69544C343BCEC281E67C4E60B91CDD49695237AAB9929DECD5EC4679C4D45652DBA84B91F287A5E274057809FE
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2021 21:41:41.449306011 CET	49708	80	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:41.449563026 CET	49709	80	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:41.652472019 CET	80	49708	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:41.652587891 CET	49708	80	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:41.652996063 CET	80	49709	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:41.653079033 CET	49709	80	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:41.654337883 CET	49708	80	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:41.857515097 CET	80	49708	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:41.862482071 CET	80	49708	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:41.862607956 CET	49708	80	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:41.877180099 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.080948114 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.081188917 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.087301970 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.291614056 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.292582035 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.292624950 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.292663097 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.292701960 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.292728901 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.292732000 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.292790890 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.292798042 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.292802095 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.292807102 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.390366077 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.395793915 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.395845890 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.594228029 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.594254971 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.594418049 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.596868038 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.599245071 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.599373102 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.599507093 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.623677969 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.623723984 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.623879910 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.624830961 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.650120974 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.657310009 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.860779047 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.886065960 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.886118889 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.886156082 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:42.886293888 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.888850927 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.959368944 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.959781885 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.960477114 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.961107969 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.961577892 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.962018013 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.962459087 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.962918043 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.963345051 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.963788986 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.964226961 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.964668036 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.965120077 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.965583086 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.966025114 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.966463089 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.966902018 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.972357988 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.972862005 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.973316908 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.973778963 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:42.974209070 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.001053095 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.001887083 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.163454056 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.164450884 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.167531013 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.170260906 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.175952911 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.175976038 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.175987959 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.175996065 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.176003933 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.176276922 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.185065985 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.186433077 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.186458111 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.186474085 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.186496019 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.186513901 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.186542988 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.186594963 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.186609983 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.205360889 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.379901886 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.379961014 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.380000114 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.380055904 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.380115032 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.380135059 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.380165100 CET	443	49710	35.155.101.78	192.168.2.3
Mar 11, 2021 21:41:43.380181074 CET	49710	443	192.168.2.3	35.155.101.78
Mar 11, 2021 21:41:43.380187988 CET	49710	443	192.168.2.3	35.155.101.78

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2021 21:41:33.693351030 CET	60985	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:33.742155075 CET	53	60985	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:34.467881918 CET	50200	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:34.516807079 CET	53	50200	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:34.628213882 CET	51281	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:34.688121080 CET	53	51281	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:34.867929935 CET	49199	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:34.933672905 CET	53	49199	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:35.988734961 CET	50620	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:36.054187059 CET	53	50620	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:37.067212105 CET	64938	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:37.129000902 CET	53	64938	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:38.608544111 CET	60152	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:38.660586119 CET	53	60152	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:39.814131021 CET	57544	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:39.866177082 CET	53	57544	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:40.316643000 CET	55984	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:40.377990007 CET	53	55984	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:41.317308903 CET	64185	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:41.351306915 CET	65110	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:41.368185043 CET	53	64185	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:41.429723024 CET	53	65110	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:42.112106085 CET	58361	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:42.175179958 CET	53	58361	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:44.134083033 CET	63492	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:44.193478107 CET	53	63492	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:44.310036898 CET	60831	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:44.358789921 CET	53	60831	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:44.882951021 CET	60100	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:44.934129000 CET	53	60100	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:45.051250935 CET	53195	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:45.108844995 CET	53	53195	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:45.326853037 CET	50141	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:45.361552000 CET	53023	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:45.387604952 CET	53	50141	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:45.413299084 CET	53	53023	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:46.585208893 CET	49563	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:46.634066105 CET	53	49563	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:47.516201019 CET	51352	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:47.568135977 CET	53	51352	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:48.398663998 CET	59349	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:48.450333118 CET	53	59349	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:49.243097067 CET	57084	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:49.293868065 CET	53	57084	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:50.387681007 CET	58823	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:50.436563969 CET	53	58823	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:51.528896093 CET	57568	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:51.582668066 CET	53	57568	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:52.575485945 CET	50540	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:52.626071930 CET	53	50540	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:53.659703016 CET	54366	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:53.712069988 CET	53	54366	8.8.8.8	192.168.2.3
Mar 11, 2021 21:41:55.793179989 CET	53034	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:41:55.842171907 CET	53	53034	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:07.807029963 CET	57762	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:07.856026888 CET	53	57762	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:08.928997993 CET	55435	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:08.992373943 CET	53	55435	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:10.452236891 CET	50713	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:10.514496088 CET	53	50713	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:11.067123890 CET	56132	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:11.134036064 CET	53	56132	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:11.462027073 CET	50713	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:11.519161940 CET	53	50713	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:12.072160959 CET	56132	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:12.123852968 CET	53	56132	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:12.504465103 CET	50713	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:12.553267956 CET	53	50713	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:13.089108944 CET	56132	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:13.140716076 CET	53	56132	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:14.499824047 CET	50713	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:14.548849106 CET	53	50713	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:15.094109058 CET	56132	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:15.154274940 CET	53	56132	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:15.512729883 CET	58987	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:15.565541029 CET	53	58987	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:17.238377094 CET	56579	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:17.300637007 CET	53	56579	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:18.496984959 CET	50713	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:18.547713995 CET	53	50713	8.8.8.8	192.168.2.3
Mar 11, 2021 21:42:19.106456041 CET	56132	53	192.168.2.3	8.8.8.8
Mar 11, 2021 21:42:19.166574955 CET	53	56132	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Mar 11, 2021 21:41:41.351306915 CET	192.168.2.3	8.8.8.8	0x616f	Standard query (0)	www.covid19-siparadigm.com	A (IP address)	IN (0x0001)
Mar 11, 2021 21:41:44.134083033 CET	192.168.2.3	8.8.8.8	0x73c7	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Mar 11, 2021 21:42:08.928997993 CET	192.168.2.3	8.8.8.8	0x6bfd	Standard query (0)	favicon.ico	A (IP address)	IN (0x0001)
Mar 11, 2021 21:42:15.512729883 CET	192.168.2.3	8.8.8.8	0x5d91	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Mar 11, 2021 21:41:41.429723024 CET	8.8.8.8	192.168.2.3	0x616f	No error (0)	www.covid19-siparadigm.com	neovare-alb-285209131.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 11, 2021 21:41:41.429723024 CET	8.8.8.8	192.168.2.3	0x616f	No error (0)	neovare-alb-285209131.us-west-2.elb.amazonaws.com		35.155.101.78	A (IP address)	IN (0x0001)
Mar 11, 2021 21:41:41.429723024 CET	8.8.8.8	192.168.2.3	0x616f	No error (0)	neovare-alb-285209131.us-west-2.elb.amazonaws.com		54.185.153.192	A (IP address)	IN (0x0001)
Mar 11, 2021 21:41:41.429723024 CET	8.8.8.8	192.168.2.3	0x616f	No error (0)	neovare-alb-285209131.us-west-2.elb.amazonaws.com		54.69.133.107	A (IP address)	IN (0x0001)
Mar 11, 2021 21:41:44.193478107 CET	8.8.8.8	192.168.2.3	0x73c7	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Mar 11, 2021 21:41:44.193478107 CET	8.8.8.8	192.168.2.3	0x73c7	No error (0)	scontent.xx.fbcdn.net		185.60.216.19	A (IP address)	IN (0x0001)
Mar 11, 2021 21:42:08.992373943 CET	8.8.8.8	192.168.2.3	0x6bfd	Name error (3)	favicon.ico	none	none	A (IP address)	IN (0x0001)
Mar 11, 2021 21:42:15.565541029 CET	8.8.8.8	192.168.2.3	0x5d91	No error (0)	cdn.jsdelivr.net	dualstack.f3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)

HTTP Request Dependency Graph

www.covid19-siparadigm.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49708	35.155.101.78	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Mar 11, 2021 21:41:41.654337883 CET	1027	OUT	GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.covid19-siparadigm.com Connection: Keep-Alive
Mar 11, 2021 21:41:41.862482071 CET	1030	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Thu, 11 Mar 2021 20:41:41 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://www.covid19-siparadigm.com:443/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Mar 11, 2021 21:41:42.292701960 CET	35.155.101.78	443	192.168.2.3	49710	CN=*.siparadigm-covid19.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Mon Dec 07 01:00:00 CET 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Thu Jan 06 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 11, 2021 21:41:44.281616926 CET	185.60.216.19	443	192.168.2.3	49712	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 11, 2021 21:41:44.281616926 CET	185.60.216.19	443	192.168.2.3	49712	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 11, 2021 21:41:44.281725883 CET	185.60.216.19	443	192.168.2.3	49713	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 11, 2021 21:41:44.281725883 CET	185.60.216.19	443	192.168.2.3	49713	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5640 Parent PID: 792

General

Start time:	21:41:39
Start date:	11/03/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff6f6550000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 580 Parent PID: 5640

General

Start time:	21:41:39
Start date:	11/03/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5640 CREDAT:17410 /prefetch:2
Imagebase:	0x930000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report http://www.covid19-siparadigm.com

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5640 Parent PID: 792

General

Analysis Process: iexplore.exe PID: 580 Parent PID: 5640

General

Disassembly