Analysis Report https://www.bredlifeof.info/

AV Detection:

Antivirus detection for URL or domain

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

Phishing site detected (based on favicon image match)

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html

Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish10

Source: Yara match

File source: 25037.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html

Matcher: Found strong image similarity, brand: Microsoft image: 25037.img.2.gfk.csv EE5C8D9FB6248C938FD0DC19370E90BD

Phishing site detected (based on logo template match)

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html

Matcher: Template: microsoft matched

HTML body contains low number of good links

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: Number of links: 0
Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: Title: Sign in to Outlook does not match URL
Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: Title: Sign in to Outlook does not match URL

Invalid 'forgot password' link found

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: Invalid link: Forgot my password
Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: Invalid link: Forgot my password

META author tag missing

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: No <meta name="author".. found
Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: No <meta name="copyright".. found
Source: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html	HTTP Parser: No <meta name="copyright".. found

Compliance:

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.155.72:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.155.72:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49914 version: TLS 1.2

Networking:

Found strings which match to known social media urls

Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: de Facebook](https://www.facebook.com/privacy/explanation) sont applicables. Si vous utilisez le G equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: dell'utente e secondo le [Condizioni di Facebook Business](https://www.facebook.com/legal/technology_terms) e la [Dichiarazione sulla privacy di Facebook](https://www.facebook.com/privacy/explanation). Se usi il Generatore di testi legali, cos equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: et aux risques de l'utilisateur. [Les conditions d'utilisation de Facebook Business](https://www.facebook.com/legal/technology_terms) et la [Politique de confidentialit equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: **Let op**: Jimdo levert alleen de technische middelen om de [Facebook Business Extension (FBE)](https://developers.facebook.com/docs/marketing-api/fbe/) met je webshop te verbinden. Het activeren en gebruiken van de FBE en andere Facebook-tools vindt volledig plaats op verantwoordelijkheid en risico van de gebruiker en de [Facebook Business voorwaarden](https://www.facebook.com/legal/technology_terms) en de [Privacyverklaring van Facebook](https://www.facebook.com/privacy/explanation) zijn van toepassing. Als je de Juridische Tekstgenerator gebruikt, raden we je aan, net als bij alle andere tools, de betreffende voorwaarden van Trusted Shops te raadplegen voordat je de FBE activeert. equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: **Please note** that Jimdo only provides the technical means to integrate the [Facebook Business Extension (FBE)](https://developers.facebook.com/docs/marketing-api/fbe/) with your Jimdo store. The activation and use of the FBE and associated Facebook tools occurs entirely at the User's own responsibility and risk and the [Facebook Business Terms](https://www.facebook.com/legal/technology_terms) and the [Facebook Privacy Policy](https://www.facebook.com/privacy/explanation) apply. If you use the Legal Text Generator, as with all additional tools, it is recommended that you consult the relevant Trusted Shops Terms, before activating the FBE. equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: +#https://www.facebook.com/policy.php equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: <https://www.youtube.com/watch?v=pB-003Fu6AI&feature=youtu.be equals www.youtube.com (Youtube)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: g)https://www.facebook.com/policies/cookies equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: gung stellt, um Facebook for Business [FacebookBusinessExtension(FBE)](https://developers.facebook.com/docs/marketing-api/fbe/) mit deinem Jimdo Onlineshop zu verbinden. Die Aktivierung und Nutzung von Facebook for Business und aller damit verbundenen Tools liegt in der Verantwortung des Nutzers und geschieht auf eigene Gefahr. Es gelten die [Facebook Datenverarbeitungsbedingungen] (https://www.facebook.com/legal/technology_terms) sowie die [Facebook Datenschutzerkl equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.facebook.com/policies/cookies equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.facebook.com/policy.php equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.youtube.com/watch?v=pB-003Fu6AI&feature=youtu.be equals www.youtube.com (Youtube)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: n las [Condiciones de Facebook para empresas](https://www.facebook.com/legal/technology_terms) y la [Pol equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: rung] (https://www.facebook.com/privacy/explanation). Wenn du den Rechtstexte-Manager verwendest, empfiehlt es sich, wie bei allen zus equals www.facebook.com (Facebook)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: tica de privacidad de Facebook](https://www.facebook.com/privacy/explanation). Si utilizas el Generador de textos legales de Jimdo, as equals www.facebook.com (Facebook)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: www.bredlifeof.info

URLs found in memory or binary data

Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://codepen.io/dimsemenov/pen/yyBWoR
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://json-schema.org/draft-07/schema
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://json-schema.org/schema
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://tools.google.com/dlpage/gaoptout
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://www.trustedshops.com/tsdocument/WIZARD_TERMS_de.pdf
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://www.trustedshops.com/tsdocument/WIZARD_TERMS_en.pdf
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://www.trustedshops.com/tsdocument/WIZARD_TERMS_es.pdf
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://www.trustedshops.com/tsdocument/WIZARD_TERMS_fr.pdf
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://www.trustedshops.com/tsdocument/WIZARD_TERMS_it.pdf
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: http://www.trustedshops.com/tsdocument/WIZARD_TERMS_nl.pdf
Source: 0d4dbbbfb0e94616_0.0.dr, Network Action Predictor.0.dr	String found in binary or memory: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/
Source: Current Session.0.dr	String found in binary or memory: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.html
Source: History-journal.0.dr	String found in binary or memory: https://4dfffgghmhkh.s3.eu-west-3.amazonaws.com/gdfhfgkhkhjkhf/saue8.htmlSign
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report?s=ueZAu6LShp056D%2FI6xUclwMHrfVHq394v5EyoaPxrD1tLwMQpYAbcL%2BnCG
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://account.e.jimdo-stable-staging.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://account.e.jimdo.com/
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://ajax.aspnetcdn.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://ayuda.jimdo.com/facturaci%C3%B3n/cancelaciones/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://bit.do/eMmpK
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://blog.keanulee.com/2014/10/20/the-tale-of-three-spinners.html
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://business-profile-service.jimdosite-stage.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://business-profile-service.jimdosite.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://calendly.com/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://calendly.com/jimdo-support/video-support-a
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://catamphetamine.gitlab.io/country-flag-icons/3x2/
Source: Network Action Predictor.0.dr	String found in binary or memory: https://cdnjs.cloudflare.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://chatbot.e.jimdo-stable-staging.com
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://chatbot.e.jimdo.com
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://checkout.jimdo-stable-staging.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://checkout.jimdo.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms-backend.jimdosite-stage.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms-backend.jimdosite.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/facebook_set_token.html
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/account/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/billing/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/business-profile-service/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/cms-backend/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/cms-frontend-api/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/legal-text-generator/api/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/nemo-bp/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/nemo-cs-kt/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/nemo-tts/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/nemo-wsvar/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/storage/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/store/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo-stable-staging.com/s/upgrade-frontend-api/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/facebook_set_token.html
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/account/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/billing/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/business-profile-service/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/cms-backend/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/cms-frontend-api/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/legal-text-generator/api/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/nemo-bp-prod/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/nemo-cs-kt-prod/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/nemo-tts/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/nemo-wsvar/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/storage/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/store/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://cms.jimdo.com/s/upgrade-frontend-api/
Source: 0d4dbbbfb0e94616_0.0.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://content-storage-stage.freetls.fastly.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dash.e.jimdo-stable-staging.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dash.e.jimdo-stable-staging.com/websites/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dash.e.jimdo.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dash.e.jimdo.com/websites/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/agb-2017/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/agb/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/business-listings-terms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/datenschutzerklaerung/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/datenschutzerklaerung/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/impressum/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://de.jimdo.com/info/widerrufsbelehrung-und-formular/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dolphin-feature-flags-proxy-prod.jimdo-platform.net/ld_proxy
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dolphin-feature-flags-proxy-stage.jimdo-platform.net/ld_proxy
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dolphin-legal-text-generator-prod.jimdo-platform.net/api/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dolphin-legal-text-generator-stage.jimdo-platform.net/api/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://dolphin-unsplash-tracking-prod.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://domainsbackend-prod-alti.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://domainsbackend-stable-alti.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://domainsfrontend-stable.jimdo-platform.net
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/about/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/about/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/business-listings-terms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/condiciones-generales-2017/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/condiciones-generales/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/politica-de-privacidad/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/politica-de-privacidad/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://es.jimdo.com/info/politica-de-privacidad/).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://flipper-backend-prod.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://flipper-backend-stage.jimdo-platform.net/
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://fonts.jimstatic.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Abril
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Ek
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Fredoka
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Martel:400
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Merriweather:700
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Montserrat:400
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Open
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Oxygen:400
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=PT
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Patua
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Playfair
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Poppins:600
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Raleway:300
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Roboto:300
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Roboto:400
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Rubik:400
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Rubik:500
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Varela
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/business-listings-terms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/charte-de-confidentialite/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/conditions-d-utilisation-2017/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/conditions-d-utilisation/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/droit-de-r%C3%A9tractation/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/mentions-legales/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/politique-de-confidentialite/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://fr.jimdo.com/info/politique-de-confidentialite/).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de/articles/115005738383-Wie-verbinde-ich-meine-G-Suite-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de/articles/115005745466-Wie-richte-ich-eine-E-Mail-Weiterleitung-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us/articles/115005738383-How-do-I-connect-my-G-Suite
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us/articles/115005745466-How-do-I-setup-Email-Forwarding
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us/articles/360022894071-How-do-I-get-my-Dolphin-store-ready-fo
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/115005738383--C%C3%B3mo-configuro-Google-G-Suite-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/115005745466--C%C3%B3mo-redirecciono-mis-emails-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/360022894071--C%C3%B3mo-termino-de-montar-mi-tienda-on
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/115005738383-Comment-connecter-un-compte-G-Suite
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/115005745466-Param%C3%A9trer-un-transfert-d-email
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/360022894071-Quelles-sont-les-%C3%A9tapes-%C3%A0-suivr
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/115005738383-Come-faccio-a-collegare-il-mio-account-G-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/115005745466-Come-si-imposta-un-alias-per-l-email-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/360022894071-Come-faccio-a-vendere-attraverso-il-mio-s
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/115005738383
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/115005745466
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/360000905146?utm_source=upgradescreen)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/115005738383-Hoe-verbind-ik-mijn-G-Suite-
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/115005745466-Hoe-stel-ik-het-doorsturen-van-e-mails-in
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/360022894071-Wanneer-is-mijn-Dolphin-webshop-klaar-voo
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/360058420551/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://hilfe.jimdo.com/about/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://insitez.blob.core.windows.net/site/1a3716e7-3ff8-4b86-8954-e4db849c96f9.js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://insitez.blob.core.windows.net/site/789f34d6-6efe-4b09-9261-a05c9888d85c.js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://insitez.blob.core.windows.net/site/8e23be8a-0ea6-4f4a-9af9-a79cd0f49856.js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/about/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/about/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/business-listings-terms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/condizioni-generali-2017/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/condizioni-generali/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/regolamento-sulla-privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/regolamento-sulla-privacy/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://it.jimdo.com/info/regolamento-sulla-privacy/).
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/cms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/static/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/static/ceb721f3140266a92265.js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/static/ceb721f3140266a92265.jsa
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-stage.freetls.fastly.net/cms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-stage.freetls.fastly.net/renderer/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-stage.freetls.fastly.net/renderer/static/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo-storage.freetls.fastly.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo.com)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo.com).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jimdo.com/fr/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jp.jimdo.com/info/%E7%89%B9%E5%AE%9A%E5%95%86%E5%8F%96%E5%BC%95%E6%B3%95%E3%81%AB%E5%9F%BA%E
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jp.jimdo.com/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://jp.jimdo.com/info/term-of-use/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://logo.e.jimdo-stable-staging.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://logo.e.jimdo.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://lp.shore.com/en/jimdo/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-bp-prod.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-bp-stage.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-category-prediction-prod.jimdo-platform.net
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-category-prediction-stage.jimdo-platform.net
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-cs-kt-prod.jimdo-platform.net/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-cs-kt-stage.jimdo-platform.net/v1/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-tts-prod.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-tts-stage.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-wsvar-prod.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nemo-wsvar-stage.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/algemene-voorwaarden-2017/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/algemene-voorwaarden/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/business-listings-terms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/herroepingsrecht-en-formulier/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/impressum/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/privacy/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://nl.jimdo.com/info/privacy/).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://op-image-super-resolution.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=de
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=es
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=es).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=fr
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=fr).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=it
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=it).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=ja
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=nl
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/privacy?hl=nl).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://storage.jimdosite-stage.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://storage.jimdosite.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://store.jimdosite-stage.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://store.jimdosite.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://stripe.com/cookies-policy/legal
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://stripe.com/privacy
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://t.jimdo-platform.net/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=de).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=en)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=es).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=fr).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=it).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=nl).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://vimeo.com/cookie_policy
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://vimeo.com/privacy
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/de/legal/privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/de-ww/cookies/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/en-ww/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/es/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/fr-ww/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/it/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/jp/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.apple.com/legal/privacy/nl/
Source: 000003.log3.0.dr	String found in binary or memory: https://www.bredlifeof.info
Source: Network Action Predictor-journal.0.dr, Current Session.0.dr, History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/
Source: History Provider Cache.0.dr	String found in binary or memory: https://www.bredlifeof.info/2
Source: History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/Home
Source: History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/O
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/cookie-settings/
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/cookie-settings/;Kh
Source: History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/cookie-settings/Cookie
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/cookie-settings/ifl
Source: History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/f
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/imprint/
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/imprint/?E
Source: History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/imprint/Imprint
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/privacy-policy/
Source: History-journal.0.dr	String found in binary or memory: https://www.bredlifeof.info/privacy-policy/Privacy
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/privacy-policy/Q
Source: Current Session.0.dr	String found in binary or memory: https://www.bredlifeof.info/privacy-policy/Yj#
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/analytics/terms)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/analytics/terms/de.html)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/analytics/terms/es.html)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/analytics/terms/it.html)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/analytics/terms/nl.html)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/intl/de/policies/privacy/index.html#Datenschutzerkl%C3%A4rung).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/webmasters/tools/home)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.com/webmasters/tools/home).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.de/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.es/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.fr/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.fr/analytics/terms/fr.html)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.it/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.jp/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.google.nl/adwords/express/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo-status.com/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo-status.com/).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/about
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/blog/corona-business-checklist/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/de/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/de/hilfspaket-onlineshop-fuer-unternehmen/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/de/info/agb/).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/de/info/jimdo-online-videoberatung-nutzungsbedingungen/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/de/magazin/corona-krise/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/de/preise/onlineshop/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/es)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/es/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/es/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/es/2020/03/23/qu%C3%A9-hacer-si-el-coronavirus-afecta-tu-peque%C3%B1o-negocio/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/es/ayuda-tienda-online-empresas)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/es/info/politica-de-privacidad/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/fr/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/fr/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/fr/2020/03/23/que-faire-si-l-%C3%A9pid%C3%A9mie-du-coronavirus-affecte-votre-a
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/fr/aide-eboutique-PME)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/fr/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/fr/info/politique-de-confidentialite/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/about/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/business-listings-terms/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/cancellation/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/jimdo-video-consultation-terms-of-service/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/privacy/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/privacy/).
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/terms-of-service-2017/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/info/terms-of-service/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/it/2020/03/23/coronavirus-consigli-per-imprese-e-professionisti/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/it/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/it/info/regolamento-sulla-privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/it/supporto-shop-online-pmi)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/jp/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/jp/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/jp/info/privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/jp/news/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/nl/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/nl/blog/ondernemen/corona-checklist-ondernemers/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/nl/info/cookies/policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/nl/info/privacy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/nl/noodhulp-webshop-ondernemers)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.com/relief-onlineshop-businesses/)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.jimdo.help/hc/it/articles/212083686-Come-disdire-l-abbonamento
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.kddi-webcommunications.co.jp/security/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.paypal.com/ie/webapps/mpp/ua/cookie-full
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.paypal.com/ie/webapps/mpp/ua/privacy-full
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.paypal.com/sdk/js
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.privacyshield.gov/welcome)
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/de/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/es/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/fr/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/it/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/jp/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/legal/cookies-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/nl/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.spotify.com/us/legal/privacy-policy/
Source: 5014fd48897e10fa_0.0.dr	String found in binary or memory: https://www.youtube.com/watch?v=pB-003Fu6AI&feature=youtu.be

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.155.72:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.155.72:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.23.37:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.206.246:443 -> 192.168.2.7:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.7:49914 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: mal72.phis.win@37/193@17/10

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-609C8689-17F0.pma

Jump to behavior

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user~1\AppData\Local\Temp\cdcecb74-35f2-4b7c-af73-59c0b0a0f709.tmp

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'https://www.bredlifeof.info/'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1576,19381948695824494,2468386753968997499,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1772 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1576,19381948695824494,2468386753968997499,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1772 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found GUI installer (many successful clicks)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior