Analysis Report http://covid19-immunization-learning-program-2021.ca

Phishing:

Found iframes

Source: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09	HTTP Parser: Iframe src: /en-us/authentication/silentsignin?ru=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fsilentsigninhandler
Source: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09	HTTP Parser: Iframe src: /en-us/authentication/silentsignin?ru=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fsilentsigninhandler

META author tag missing

Source: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09	HTTP Parser: No <meta name="author".. found
Source: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09	HTTP Parser: No <meta name="copyright".. found
Source: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 162.241.217.204:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.253.133:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.253.133:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.217.204:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.91:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.91:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.89:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.89:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.210.184.158:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.43:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.43:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49812 version: TLS 1.2

Networking:

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: covid19-immunization-learning-program-2021.caConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /en-US/kb/enable-and-disable-cookies-website-preferences HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: support.mozilla.orgConnection: Keep-Alive

Found strings which match to known social media urls

Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: <a id="ocFacebookButton" class="ocShareButton" target="_blank" data-bi-bhvr="SOCIALSHARE" data-bi-name="facebook" data-bi-slot="1" ms.interactiontype="1" ms.ea_offer="SOC" ms.cmpgrp="Share" ms.ea_action="Goto" ms.pgarea="Body" href="https://www.facebook.com/sharer.php?u=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fmicrosoft-edge%2Fdelete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09"> equals www.facebook.com (Facebook)
Source: lightgallery[1].js.2.dr	String found in binary or memory: video = '<iframe class="lg-video-object lg-youtube ' + addClass + '" width="560" height="315" src="//www.youtube.com/embed/' + isVideo.youtube[1] + a + '" frameborder="0" allowfullscreen></iframe>'; equals www.youtube.com (Youtube)
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: <li><a class="youtube" href="https://www.youtube.com/firefoxchannel">YouTube<span> (firefoxchannel)</span></a></li> equals www.youtube.com (Youtube)
Source: style[1].css.2.dr	String found in binary or memory: Description: <strong>A superflexible and responsive Business Theme by Tranmautritam team</strong> - <br/>Update notifications available on twitter and facebook:<br/> <a href='https://twitter.com/tranmautritam'>Follow me on twitter</a><br/> - <a href='https://www.facebook.com/tranmautritam.designer'>Join the Facebook Group</a> A theme by <a href="http://themeforest.net/user/tranmautritam?ref=tranmautritam">Tranmautritam Team</a>. equals www.facebook.com (Facebook)
Source: style[1].css.2.dr	String found in binary or memory: Description: <strong>A superflexible and responsive Business Theme by Tranmautritam team</strong> - <br/>Update notifications available on twitter and facebook:<br/> <a href='https://twitter.com/tranmautritam'>Follow me on twitter</a><br/> - <a href='https://www.facebook.com/tranmautritam.designer'>Join the Facebook Group</a> A theme by <a href="http://themeforest.net/user/tranmautritam?ref=tranmautritam">Tranmautritam Team</a>. equals www.twitter.com (Twitter)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: covid19-immunization-learning-program-2021.ca

URLs found in memory or binary data

Source: cesis_transition[1].js.2.dr	String found in binary or memory: http://blog.alexmaccaw.com/css-transitions
Source: style[2].css.2.dr	String found in binary or memory: http://cesis.co
Source: style[1].css.2.dr	String found in binary or memory: http://cesis.co/
Source: fonticonpicker[1].js.2.dr	String found in binary or memory: http://codeb.it/fontIconPicker
Source: layerslider.transitions[1].js.2.dr	String found in binary or memory: http://codecanyon.net/licenses/
Source: layerslider.kreaturamedia.jquery[1].js.2.dr	String found in binary or memory: http://codecanyon.net/licenses/standard
Source: fitvids[1].js.2.dr	String found in binary or memory: http://css-tricks.com
Source: style[1].css.2.dr	String found in binary or memory: http://css-tricks.com/inheriting-box-sizing-probably-slightly-better-best-practice/
Source: animate.min[1].css.2.dr	String found in binary or memory: http://daneden.me/animate
Source: cesis_fittext[1].js.2.dr, fitvids[1].js.2.dr	String found in binary or memory: http://daverupert.com
Source: clientlib-site-min[1].css.7.dr, font-awesome-social[1].css.2.dr	String found in binary or memory: http://fontawesome.io
Source: clientlib-site-min[1].css.7.dr	String found in binary or memory: http://fontawesome.io/license
Source: appleicons_text[1].ttf.2.dr	String found in binary or memory: http://fontello.com
Source: appleicons_text[1].ttf.2.dr	String found in binary or memory: http://fontello.comappleicons_textRegularappleicons_textappleicons_textVersion
Source: appleicons_thin[1].ttf.2.dr	String found in binary or memory: http://fontello.comappleicons_thinRegularappleicons_thinappleicons_thinVersion
Source: appleicons_ultralight[1].ttf.2.dr	String found in binary or memory: http://fontello.comappleicons_ultralightRegularappleicons_ultralightappleicons_ultralightVersion
Source: cesis_collapse[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#collapse
Source: cesis_transition[1].js.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#transitions
Source: 17-f90ef1[1].js.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: 2.d97c81c1.chunk[1].css.2.dr	String found in binary or memory: http://github.com/semantic-org/semantic-ui/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://greensock.com
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://greensock.com/club/
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://greensock.com/standard-license
Source: cesis_easing[1].js.2.dr	String found in binary or memory: http://gsgd.co.uk/sandbox/jquery/easing/
Source: isotope[1].js.2.dr	String found in binary or memory: http://isotope.metafizzy.co
Source: effect.min[1].js.2.dr	String found in binary or memory: http://jquery.org/license
Source: screen.845fb9a46a00[1].css.2.dr, effect.min[1].js.2.dr	String found in binary or memory: http://jqueryui.com
Source: screen.845fb9a46a00[1].css.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&
Source: authorize[1].htm.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://labs.skinkers.com/touchSwipe/
Source: mac[1].htm.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: 2.d97c81c1.chunk[1].css.2.dr, animate.min[1].css.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: app-apd-route[1].js.2.dr	String found in binary or memory: http://purl.eligrey.com/github/classList.js/blob/master/classList.js
Source: lightgallery[1].js.2.dr	String found in binary or memory: http://sachinchoolur.github.io/lightGallery
Source: cesis_plugins[1].css.2.dr	String found in binary or memory: http://sachinchoolur.github.io/lightGallery/
Source: cesis_fittext[1].js.2.dr, fitvids[1].js.2.dr	String found in binary or memory: http://sam.zoy.org/wtfpl/
Source: 7TBY4BLD.htm.7.dr	String found in binary or memory: http://schema.org
Source: mac[1].htm.2.dr	String found in binary or memory: http://schema.org/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: http://schema.org/Organization
Source: scrollmagic[1].js.2.dr	String found in binary or memory: http://scrollmagic.io
Source: the-grid.min[1].js.2.dr	String found in binary or memory: http://theme-one.com/the-grid/
Source: style[1].css.2.dr	String found in binary or memory: http://themeforest.net/user/tranmautritam?ref=tranmautritam
Source: smartmenus[1].js.2.dr	String found in binary or memory: http://vadikom.com/
Source: lightgallery[1].js.2.dr	String found in binary or memory: http://vk.com/video_ext.php?
Source: fitvids[1].js.2.dr	String found in binary or memory: http://www.alistapart.com/articles/creating-intrinsic-ratios-for-video/
Source: launch[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: post-office-logo[1].svg.2.dr, target-icon[1].svg.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: cesis_transition[1].js.2.dr	String found in binary or memory: http://www.modernizr.com/)
Source: smartmenus[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: authorize[1].htm.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: smartmenus[1].js.2.dr	String found in binary or memory: http://www.smartmenus.org/
Source: settings[1].css.2.dr	String found in binary or memory: http://www.themepunch.com
Source: js[1].js0.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: js[1].js0.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: 7931d9d5_panel-en-gb[1].js.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: privacy-policy[1].htm.2.dr, 1BTS334A.htm.2.dr	String found in binary or memory: https://api.w.org/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.3.5.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1122305#c8
Source: js[1].js0.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://channel9.msdn.com/
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://cookienotice.a
Source: {34120186-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr, ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://cookienotice.astrazeneca.com/
Source: {34120186-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://cookienotice.astrazeneca.com/Root
Source: imagestore.dat.7.dr	String found in binary or memory: https://cookienotice.astrazeneca.com/etc/designs/digital/assets/favicons/icon-favicon.ico
Source: imagestore.dat.7.dr	String found in binary or memory: https://cookienotice.astrazeneca.com/etc/designs/digital/assets/favicons/icon-favicon.ico~
Source: {34120186-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://cookienotice.astrazeneca.com/l
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://cookienotice.astrazeneca.com/program-2021.ca/index.html
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://cookienotice.azation-learning-program-2021.ca/index.html
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-ia.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectslug=enable-and
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-ig/firefox/new/?utm_source=support.mozilla.org&utm_medium=referral&utm_campaign=non-
Source: imagestore.dat.2.dr, ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://covid19-immunization-learning-program-2021.ca/favicon.ico
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr, L8PN3ZQY.htm.2.dr	String found in binary or memory: https://covid19-immunization-learning-program-2021.ca/index.html
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://covid19-immunization-learning-program-2021.ca/index.htmlPPractical
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-immunization-learning-program-2021.ca/index.htmlRoot
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-ioft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-is://www.digitalcontrolroom.com/
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-istrazeneca.com/program-2021.ca/index.htmlRoot
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-itrolroom.com//program-2021.ca/index.htmlRoot
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://covid19-itrolroom.com/privacy-policy/Root
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://dcr1.wpengine.com/wp-content/uploads/2018/09/hero-header-home.jpg?id=77)
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://dcr1.wpengine.com/wp-content/uploads/2018/09/products-bg.jpg?id=90)
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://dcr1.wpengine.com/wp-content/uploads/2018/09/rawpixel-733989-unsplash.jpg?id=23)
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://dcr1.wpengine.com/wp-content/uploads/2018/12/footer-logo.png
Source: scripts[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://disconnect.me/trackerprotection
Source: mac[1].htm.2.dr	String found in binary or memory: https://discussions.apple.com/welcome
Source: main.1f02b685.chunk[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Raleway:wght
Source: 2.d97c81c1.chunk[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Lato:400
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat%3A300%2C600%2C500%2C700%7CRoboto%3A500%2C700%2C40
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Poppins%3A400%2C500%2C600%2C70%7COpen
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u8w4BMUTPHjxsAXC-s.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh6UVSwiPHw.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI5wq_Gwfr.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6uyw4BMUTPHjx4wWA.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_ZpC3gnD-A.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_bZF3gnD-A.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_cJD3gnD-A.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_dJE3gnD-A.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOXOhv.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN_r8OXOhv.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOXOhv.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFW50d.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLEj6Z1JlEw.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLEj6Z1xlEw.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1JlEw.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiEyp8kv8JHgFVrJJnedA.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pYCM.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVuEooCM.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvoooCM.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmEU9fBBc-.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmEU9fChc-.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfChc-.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmYUtfChc-.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: css[1].css0.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu7GxM.woff)
Source: css[1].css1.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v13/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjo0oSmb2Rl.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v6/dFa5ZfeM_74wlPZtksIFYoEf2Hc.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v6/dFa5ZfeM_74wlPZtksIFYpEY2Hc.woff)
Source: css2[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/zillaslab/v6/dFa5ZfeM_74wlPZtksIFYskZ2Hc.woff)
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://foundation.mozilla.org
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://fpn.firefox.com/
Source: apd-sasskit.built[1].js.2.dr	String found in binary or memory: https://github.com/ded/bonzo
Source: apd-sasskit.built[1].js.2.dr	String found in binary or memory: https://github.com/ded/qwery
Source: authorize[1].htm.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: waypoints[1].js.2.dr	String found in binary or memory: https://github.com/imakewebthings/cwaypoints/blob/master/licenses.txt
Source: waypoints.min[1].js.2.dr	String found in binary or memory: https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt
Source: effect.min[1].js.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: jquery.themepunch.tools.min[1].js.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: fonticonpicker[1].js.2.dr	String found in binary or memory: https://github.com/micc83/fontIconPicker
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://github.com/mozilla/kitsune/
Source: fitvids[1].js.2.dr	String found in binary or memory: https://github.com/toddmotto/fluidvids/blob/master/dist/fluidvids.js
Source: cesis_transition[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: mac[1].htm.2.dr	String found in binary or memory: https://help.apple.com/assets/5FC7BA6A0946225611C6FEFA/5FC7BA710946225611C6FF02/en_GB/6846073fc6f766
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: clientlib-site-min[1].js.7.dr	String found in binary or memory: https://jquery.com/
Source: clientlib-site-min[1].js.7.dr	String found in binary or memory: https://jquery.org/license
Source: clientlib-site-min[1].js.7.dr	String found in binary or memory: https://js.foundation/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.0.2.min.js
Source: mac[1].htm.2.dr	String found in binary or memory: https://km.support.apple.com/clientside/build/launch.js
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://layerslider.kreaturamedia.com
Source: layerslider.transitions[1].js.2.dr	String found in binary or memory: https://layerslider.kreaturamedia.com/
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://login.live.com/Me.htm?v=3
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://login.live.com/me.srf?wa=wsignin1.0
Source: Me[1].htm.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c1
Source: Me[1].htm.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://mix.office.com/oembed/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://mix.office.com/watch/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://office.com/start
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: js[1].js0.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: 7931d9d5_panel-en-gb[1].js.2.dr	String found in binary or memory: https://policy.cookiereports.com/consent/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://portal.office.com/AdminPortal#/support
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://products.office.com/en-us/academic/compare-office-365-education-plans
Source: vxpiframe[1].js.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE
Source: mac[1].htm.2.dr	String found in binary or memory: https://schema.org/
Source: mac[1].htm.2.dr	String found in binary or memory: https://schema.org/TechArticle
Source: clientlib-site-min[1].js.7.dr	String found in binary or memory: https://sizzlejs.com/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/build/common-min.c217f307f53c.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/build/gtm-snippet-min.98ca663fd559.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/build/questions-min.4f2aea6368f6.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/build/show-fx-download.4fef4fded9ba.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/build/wiki-min.2c7974ba20a5.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/img/pixel.gif
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/jsi18n/en-us/djangojs-min.eba373c6bfad.j
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/protocol/img/icons/reader-mode.svg
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/browserconfig.xml
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/css/screen.845fb9a46a00.css
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/apple-touch-icon.png
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/default-FFA-avatar.png
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/favicon-16x16.png
Source: imagestore.dat.2.dr, enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/favicon-32x32.png
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/favicon.ico
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/mozilla-support.svg
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/placeholder.gif
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/spinner.gif
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/img/volunteer.png
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/js/libs/html5-shiv.js
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://static-media-prod-cdn.itsre-sumo.mozilla.net/static/sumo/manifest.json
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://support.apple.
Source: accsoffer[1].js.2.dr	String found in binary or memory: https://support.apple.com/
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/clientside/build/FujiStitchPath.js
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/clientside/build/apd-sasskit.built.css
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/clientside/build/apd-sasskit.built.js
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/clientside/build/app-apd-route.js
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/clientside/build/app-apd.css
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/contact
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb
Source: defaultlinks[1].json.2.dr	String found in binary or memory: https://support.apple.com/en-gb/HT201487
Source: defaultlinks[1].json.2.dr	String found in binary or memory: https://support.apple.com/en-gb/HT202039
Source: defaultlinks[1].json.2.dr	String found in binary or memory: https://support.apple.com/en-gb/HT204204
Source: defaultlinks[1].json.2.dr	String found in binary or memory: https://support.apple.com/en-gb/HT204306
Source: defaultlinks[1].json.2.dr	String found in binary or memory: https://support.apple.com/en-gb/contact
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/apd2185d6ee5/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/aside/glos0126d795/14.0/mac/11.0
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/cpsh003/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw01514823/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw0495694f/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1005/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1012/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1015/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1020/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1039/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1060/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1068/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1069/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1089/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw1103/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw27291639/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw35004465/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw646b2ca2/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw7f78f7fe/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrw8e207504/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrwa008/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrwa6be5a8e/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrwae910b47/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrwc6580898/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrwcd8bc28e/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/ibrwf71ba236/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/prevent-cross-site-tracking-sfri40732/14.0/mac/11.0
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11471/12.0/mac/10.14
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11471/13.0/mac/10.15
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11471/14.0/mac/11.0
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11471/macokies-in-microsoft-edge-63947406-40ac-c3b8
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11576/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri11861/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri22092/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri32508/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri32632/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri35905/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri40598/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri40696/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri40722/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri40726/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri40732/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri40785/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfri47acf5d6/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/sfrid73436cb/mac
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/toc
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/en-gb/guide/safari/welcome/mac
Source: imagestore.dat.2.dr	String found in binary or memory: https://support.apple.com/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://support.apple.com/favicon.ico~
Source: mac[1].htm.2.dr	String found in binary or memory: https://support.apple.com/guide/safari/sfri11471/mac/localeselector
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://support.micros
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://support.mozill
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectslug=enabl
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://support.xbox.com/
Source: mac[1].htm.2.dr	String found in binary or memory: https://supportmetrics.apple.com/content/services/stats
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://twitter.com/dcr_news?lang=en
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://twitter.com/firefox
Source: style[1].css.2.dr	String found in binary or memory: https://twitter.com/tranmautritam
Source: settings[1].css.2.dr	String found in binary or memory: https://una.im/CSSgram/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-13-11-01-32-1dbd49
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-13-11-05-25-37ec1e
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-13-11-59-41-fc828d
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-13-12-33-58-e123dc
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-13-12-34-52-49baab
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-26-09-42-22-cb66b7
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-09-29-12-48-27-2595c7
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2019-10-16-09-26-24-6f7f2e
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-02-11-09-24-21-278ad4
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-03-30-03-28-19-af0e1d
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-04-23-12-15-03-5a09c7
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-04-23-12-56-36-6bb740
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-04-23-13-15-04-3b3ef5
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-04-23-13-40-58-be9cf5
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-04-23-13-58-44-998298
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/gallery/images/2021-04-23-15-46-59-88478d
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://user-media-prod-cdn.itsre-sumo.mozilla.net/uploads/products/2020-04-14-08-36-13-8dda6f.png
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://videoplayercdn.osi.office.net/s/js/vxp.js
Source: 7TBY4BLD.htm.7.dr	String found in binary or memory: https://www.aboutcookies.org/
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/ac/globalfooter/3/en_GB/styles/ac-globalfooter.built.css
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/ac/globalnav/5/en_GB/scripts/ac-globalnav.built.js
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/ac/globalnav/5/en_GB/styles/ac-globalnav.built.css
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/legal/privacy/en-ww/cookies/
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/search-services/suggestions/
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/uk
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/uk/legal/internet-services/terms/site.html
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/uk/legal/privacy/en-ww/
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/uk/shop/goto/help/sales_refunds
Source: mac[1].htm.2.dr	String found in binary or memory: https://www.apple.com/uk/sitemap/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://www.digitalcontrolroom.com/(Digital
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://www.digitalcontrolroom.com//program-2021.ca/index.html
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/?p=3
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/about-us/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/catalogue/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/contact-us
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/contact-us/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/content/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/cookie-policy/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/cookies/
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/covid-19-activity-recorder/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/feed/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/gdpr/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/insights/
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr, 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/privacy-policy/
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://www.digitalcontrolroom.com/privacy-policy/JPrivacy
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://www.digitalcontrolroom.com/privacy-policy/a/index.html
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/terms-and-conditions/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-admin/admin-ajax.php
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-admin/admin-ajax.php?action=dynamic_css&ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/LayerSlider/static/layerslider/css/layerslider
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/LayerSlider/static/layerslider/js/greensock.js
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/LayerSlider/static/layerslider/js/layerslider.
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/js_composer/assets/css/vc_lte_ie9.min.css
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.m
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/js_composer/assets/lib/bower/animate-css/anima
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/js_composer/assets/lib/waypoints/waypoints.min
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.r
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.t
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/the-grid/frontend/assets/css/the-grid.min.css?
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/plugins/the-grid/frontend/assets/js/the-grid.min.js?ve
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/admin/redux-extensions/extensions/dev_ico
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/css/cesis_media_queries.css?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/css/cesis_plugins.css?ver=5.7.1
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-Bold.otf
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-BoldItalic
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-Italic.otf
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-Light.otf
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-LightItali
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-Regular.ot
Source: admin-ajax[1].css.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/aileron/Aileron-SemiBold.o
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/includes/fonts/cesis_icons/cesis_icons.cs
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/cesis_collapse.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/cesis_countup.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/cesis_custom.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/cesis_easing.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/cesis_fittext.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/cesis_transition.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/fitvids.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/fonticonpicker.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/isotope.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/lightgallery.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/owlcarousel.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/scrollmagic.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/smartmenus.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/js/waypoints.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis/style.css?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/themes/cesis_child_theme/style.css?ver=5.7.1
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/astra-zeneca-logo.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/logo.svg
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/nomura-logo.svg
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/nordea-logo.svg
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/paysafe-logo.svg
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/post-office-logo.svg
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/09/visa-logo.svg
Source: imagestore.dat.2.dr, ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/10/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-content/uploads/2018/10/favicon.ico~
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-includes/css/dist/block-library/style.min.css?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-includes/js/jquery/ui/effect.min.js?ver=1.12.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-includes/js/wp-embed.min.js?ver=5.7.1
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-includes/wlwmanifest.xml
Source: privacy-policy[1].htm.2.dr, 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-json/
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.digitalcontrolroom
Source: 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-json/wp/v2/pages/16
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/wp-json/wp/v2/pages/3
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/xmlrpc.php
Source: privacy-policy[1].htm.2.dr, 1BTS334A.htm.2.dr	String found in binary or memory: https://www.digitalcontrolroom.com/xmlrpc.php?rsd
Source: 7TBY4BLD.htm.7.dr	String found in binary or memory: https://www.globalprivacy.astrazeneca.com/
Source: js[1].js0.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: js[1].js0.2.dr	String found in binary or memory: https://www.google.com
Source: js[1].js0.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-56405487-1
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/firefox
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.microsoftstore.com/store/msusa/en_US/DisplayAddEditPaymentPage/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.microsoftstore.com/store/msusa/en_US/DisplayEditProfilePage/tab.profile
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.microsoftstore.com/store/msusa/en_US/DisplayFindYourOrderPage/nextAction.DisplayAccountO
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.microsoftstore.com/store/msusa/en_US/DisplayFindYourOrderPage/nextAction.DisplayAccountR
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.microsoftstore.com/store/msusa/en_US/DisplayFindYourOrderPage/nextAction.DisplayDownload
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.microsoftstore.com/store/msusa/en_US/wishlists?Wt.mc_id=wishlist_landingpage
Source: {2E0548C9-ACB2-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.mozilla.or
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/about/legal/fraud-report/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/contact/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/accounts/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/channel/android/?utm_source=support.mozilla.org&utm_campaign=f
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/channel/desktop/?utm_source=support.mozilla.org&utm_campaign=f
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/developer/?utm_source=support.mozilla.org&utm_campaign=footer&
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/all/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/mobile/?utm_source=support.mozilla.org&utm_campaign=footer&utm_mediu
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/new/#download-fx
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/new/?utm_source=support.mozilla.org&utm_medium=referral&utm_
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/new/?utm_source=support.mozilla.org&utm_campaign=footer&utm_medium=r
Source: ~DF07B1C91B77A8F6EB.TMP.1.dr	String found in binary or memory: https://www.mozilla.org/firefox/new/?utm_source=support.mozilla.org&utm_medium=referral&utm_campaign
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox/notes
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/foundation/licensing/website-content/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/locales/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/privacy/websites/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/privacy/websites/#cookies
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.onenote.com/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09[1].htm.2.dr	String found in binary or memory: https://www.xbox.com/
Source: enhanced-tracking-protection-firefox-desktop[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/firefoxchannel

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 162.241.217.204:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.253.133:443 -> 192.168.2.3:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.107.253.133:443 -> 192.168.2.3:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.217.204:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.91:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.91:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.89:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.89:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.197.225.6:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.210.184.158:443 -> 192.168.2.3:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.43:443 -> 192.168.2.3:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.43:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.21.74:443 -> 192.168.2.3:49812 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: clean0.win@5/248@14/10

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF35E5470A96719262.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3008 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3008 CREDAT:17418 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3008 CREDAT:17410 /prefetch:2			Jump to behavior
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3008 CREDAT:17418 /prefetch:2			Jump to behavior

Found GUI installer (many successful clicks)

Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: Accept

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior