Analysis Report https://004537684623-review-sign-and-return.jimdosite.com/

ID:	432862
Product:	CloudBasic
Start time:	21:11:04
Start date:	10.06.2021
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B735E586-CA1F-11EB-90EB-ECF4BBEA1588}.dat	Microsoft Word Document	A60C9A406ECBC381A4DBC22F0C4D741B	1BA1AFD070E44713083CDCB725362F54293C357F	980167BDF3E75D9E6063D7FFBB94B798AFCC950104C1005FEB5246940CFCC1A4
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat	Microsoft Word Document	A346E1750C8329F4E2AF212888D1C834	6D7AEA1AF034C25E9575DEED870419588940F035	8A3B7E89C235D837EF03C8739D03E0260017D70EDAA9483E4AA1F01719C771A4
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B735E589-CA1F-11EB-90EB-ECF4BBEA1588}.dat	Microsoft Word Document	86F3CB81D28AED1ED6E2D90661A52EC4	1722AB2B13D62061F4F19CCFD6D85DCB45A603E4	3E8CC10A87AEBB541F0D958370E6D49E6D9604EBFE1270E41E33343E23C4C8B2
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\22OXI3Z4.htm	HTML document, ASCII text, with very long lines	A1F10F4886C944F45469A432473D4C3B	CABE27ED0387FCEB0FAA052D1AAA23EAEFDB0403	19A602E451187062DFA38250CA99AE425337BE2ADEEBA1916D2547C3F3542875
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\c7d548dd8ee851dfb409[1].js	data	342868B544A2D1011692A9B9DB1F8FAA	53DD6808851D33FDA10B2755240DD1AF7AAFB220	E285C88461C80A696F09EB1C8A7F5AB15F9481CFC5507DB1D998D9AD7482A9AF
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[1].css	ASCII text	9C9AF1D71CDCF30E2969ABA0D0633820	285DBA9B585CAB386B30AC3A7954C73E765602AD	156AFF3ED5A9CAF011F451805BBB6563DBB6A09CCDE9D6C34FFD997110653929
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[2].css	ASCII text	AD067ECDF86D829805292A15B97A848A	A59BEF7B77EC22D4A625C4EADDBE7EAAFBA1EFAA	2332B8DAD978C275C56672AB9CBE12E9C8522287F7B129E4C112480FD0AA0C64
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.min[1].js	ASCII text, with very long lines	2F6B11A7E914718E0290410E85366FE9	69BB69E25CA7D5EF0935317584E6153F3FD9A88C	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\secure[1].htm	HTML document, ASCII text	45360EC49B20FCBC1BCB24E8A7A30169	ED13B2EC9595266C2019699C50D27B3E8BB982E0	B59AFCFC90705DDC3B95EF3794EA6EA448EE6756B7B6D0065E888FC9361E469E
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\secure[2].htm	HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators	8F5AC55780DFD7AA4DF21E044711692F	12739382BB457F8734CC46C22F1C5989C1A09D9A	53CB733F83EBC2199AD17876052E96252BF881185DAFCD92C5ABF6A5721B72F4
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff	Web Open Font Format, TrueType, length 20396, version 1.1	68D6DABFE54E245E7D5D5C16C3C4B1A9	7FDAB895EAEBECEDB3FB5473EAB94A1B292CEF19	A01A632E56731A854F35701AA8C3A6A19A113290D9032FF9048F8064C45383BD
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\KFOmCnqEu92Fr1Mu4mxM[1].woff	Web Open Font Format, TrueType, length 20332, version 1.1	DC3E086FC0C5ADDC09702E111D2ADB42	B1138B84FF19EAC5F43C4202297529D389BD09B7	EA50AC7FDDB61A5CE248A7F8B3A31A98FE16285E076B16E6DA6B4E10910724BB
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bootstrap.min[1].js	ASCII text, with very long lines	14D449EB8876FA55E1EF3C2CC52B0C17	A9545831803B1359CFEED47E3B4D6BAE68E40E99	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\cookie-settings[1].htm	HTML document, ASCII text, with very long lines	369B03A4214332E65439C39DD0E28B34	223CE26A459C430F1C809A6E4BB2E9E1D96736DC	61821FAB4655CC27F93897500FF6E92D7F9BB34CA488924E09FB5DCAD0B90A5C
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[1].css	ASCII text	0E11B4F8028EC9DC7D388D3383E82C15	7C1CB973B55433067DBBA8901E18C20FFF575FCA	1964EA9EEE219E7C65FAE406E3840414AC73E451B5AAB292B35AD3F1774FE7AF
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[2].css	ASCII text	DFD8AE96A6185CA05FFBCEBE9A553355	21E3EBBA15A862B39A81E55FFE05C0C42DA228DD	37C33B23A1DA26835ADAFCAEAF7BAC648CC0244718BD118731792FAEF588AB20
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\imprint[1].htm	HTML document, ASCII text, with very long lines	AFED13C964DFFF3E0516F08380963C2A	C630DA894196229B182D4C7DBE4C6FA7A7D73537	B8BC65EF8D5BB01FC95256DFBC76F2C246D5B45E2BDD45AC045288C1C0290B57
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery-3.2.1.slim.min[1].js	ASCII text, with very long lines	5F48FC77CAC90C4778FA24EC9C57F37D	9E89D1515BC4C371B86F4CB1002FD8E377C1829F	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\9KWB0U2I.htm	HTML document, ASCII text, with very long lines	A1F10F4886C944F45469A432473D4C3B	CABE27ED0387FCEB0FAA052D1AAA23EAEFDB0403	19A602E451187062DFA38250CA99AE425337BE2ADEEBA1916D2547C3F3542875
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bootstrap.min[1].js	ASCII text, with very long lines	67176C242E1BDC20603C878DEE836DF3	27A71B00383D61EF3C489326B3564D698FC1227C	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\css[1].css	ASCII text	4D454FC0329F1B4915E058D2450F26A8	9B1660B870EC624C02A42F14121003FD1B99E079	78D36EDAA345A160FBA5DFB6186B40CD04C73CCBBD1D11B9F9024265566F30B5
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\css[2].css	ASCII text	58D17713DD6D566EABEF25CA1A73F260	BE0AC7DCA374F9390D8D4CBF9CC4B675268668E1	C719154CCE73273E1A8ADE2245CCB44573709A7D32FD43280782C789224C6D85
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\privacy-policy[1].htm	HTML document, UTF-8 Unicode text, with very long lines	340864DCA7049EA814842F1A2E2E79E0	9F383E11DCDA45CF035C1B9E02236528BADE587F	5E22CBACE83587D993F5622120A31A7681667963150450235BA9FE02111DC148
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\pxiByp8kv8JHgFVrLEj6Z1xlEw[1].woff	Web Open Font Format, TrueType, length 10612, version 1.1	759F137C9B8CB83A9A4F084B15D3C9DB	D633D6C38C8A905EAB377600A121D5F2005ECC63	4A9A1966168A69EC3F5440CF6299DB6E8D62DB425CF30AF03C9B8D4179DE6FCA
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\1[1].png	PNG image data, 3351 x 1679, 8-bit/color RGBA, non-interlaced	C7F488705C8708B654074FC4B9DAB1F9	7A475F1D3CDCE930BAB967E4EF96F25505CA0384	CDFF0A47D3BB27E0015ED5332BB2614A5CC8FF8879B9469B531F18FB9DBC9822
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bab77b73b58131887507[1].css	UTF-8 Unicode text, with very long lines, with no line terminators	BAB77B73B5813188750752AF6EE1A1EC	3E8EBAB733C513BD651F11E77014DF46B5F426A9	6F49368939A97848A45897A088825CF3939CC02A55DFDE8092BB7768A1F34BB3
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bootstrap.min[1].css	ASCII text, with very long lines	450FC463B8B1A349DF717056FBB3E078	895125A4522A3B10EE7ADA06EE6503587CBF95C5	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\popper.min[1].js	ASCII text, with very long lines	70D3FDA195602FE8B75E0097EED74DDE	C3B977AA4B8DFB69D651E07015031D385DED964B	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\pxiByp8kv8JHgFVrLCz7Z1xlEw[1].woff	Web Open Font Format, TrueType, length 10436, version 1.1	05C0EBE6C48BF8062F16CB0BB6B00218	83B1BD895D9FB2A845797C96749FDEF16A4B306A	D2CD4D1DE173641C8A276C5B383931DF6107B503E8C31308D9E728581F059788
C:\Users\user\AppData\Local\Temp\datFA1B.tmp	Web Open Font Format, TrueType, length 2532, version 2.24904	10600F6B3D9C9BE2D2B2CE58D2C6508B	421CA4369738433E33348785FE776A0C839605D5	29B7A9358ABDC68C51DB5A5AF4A4F4E2E041A67527ADEE2366B1F84F116FE9A5
C:\Users\user\AppData\Local\Temp\~DF7D3435CB96414313.TMP	data	AB889A32AB9ACD33E816C2422337C69A	1190C6B34DED2D295827C2A88310D10A8B90B59B	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
C:\Users\user\AppData\Local\Temp\~DF871606A6F85B52A8.TMP	data	62AF7B2B5FD929CFDB749FD9DB1617CB	E7E81448E873C0847E66C7443E2C2A765CF8FDF7	C1EC404346C99A7A54CCC9A7243B5F99C6DD2AE5E938D858549ECA8D54AF9B0E
C:\Users\user\AppData\Local\Temp\~DF8C9CFA68EDDEB32A.TMP	data	817309723AEF7BDAD4320188631D5C47	8BD0F8274A80E85F960597C7BBE281752869E265	F8D5A0EE9B373FD8010EBA807EF7F2DE138B48E1F51D5D68D5C891348DCF9DC3

AV Detection:

Antivirus / Scanner detection for submitted sample

Source: https://004537684623-review-sign-and-return.jimdosite.com/

SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://psicologamariaamelia.com.br/secure/

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

Yara detected HtmlPhish10

Source: Yara match	File source: 536720.1.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\secure[2].htm, type: DROPPED

Phishing site detected (based on logo template match)

Source: https://psicologamariaamelia.com.br/secure/

Matcher: Template: onedrive matched

HTML body contains low number of good links

Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: Number of links: 0
Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: Title: Sharing Link Validation does not match URL

Invalid T&C link found

Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: Invalid link: Privacy & Cookies
Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: Invalid link: Privacy & Cookies

META author tag missing

Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: No <meta name="author".. found
Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: No <meta name="copyright".. found
Source: https://psicologamariaamelia.com.br/secure/	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 52.17.15.53:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.15.53:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.235.225:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.235.225:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49767 version: TLS 1.2

Networking:

Found strings which match to known social media urls

Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: de Facebook](https://www.facebook.com/privacy/explanation) sont applicables. Si vous utilisez le G equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: dell'utente e secondo le [Condizioni di Facebook Business](https://www.facebook.com/legal/technology_terms) e la [Dichiarazione sulla privacy di Facebook](https://www.facebook.com/privacy/explanation). Se usi il Generatore di testi legali, cos equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: et aux risques de l'utilisateur. [Les conditions d'utilisation de Facebook Business](https://www.facebook.com/legal/technology_terms) et la [Politique de confidentialit equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: usato per sbloccare e riprodurre i contenuti Vimeo su questo sito.\n\nProvider: Vimeo, Inc., 555 West 18th Street, New York, New York 10011 USA\n\nDurata cookie: una sessione",cmsCookieBannerWebStoreStateCookiePolicyURL:"https://www.jimdo.com/it/info/cookies/policy/",cmsCookieBannerWebStoreStateDescription:"Memoria locale necessaria per il corretto funzionamento di questo shop e per la continua memorizzazione dello stato attuale dell'utente durante il processo di acquisto. \n\nFornitore: Jimdo GmbH, Stresemannstrasse 375, 22761 Hamburg Germany",cmsCookieBannerWebStoreStatePrivacyPolicyURL:"https://www.jimdo.com/it/info/regolamento-sulla-privacy/",cmsCookieBannerWebStoreStateTitle:"Web Store State",cmsCookieBannerYoutubeDescription:"Questi cookie sono impostati attraverso video integrati su YouTube. Registrano dati statistici in forma anonima, ad esempio la frequenza di visualizzazione di un video e le impostazioni utilizzate per la riproduzione. Non vengono raccolte informazioni sensibili a condizione che l'utente non acceda con il proprio account di Google. In tal caso, le scelte dell'utente vengono associate al suo account, ad esempio i \"Mi piace\" attribuiti a un video. Per maggiori informazioni rimandiamo all'informativa sulla privacy di Google.\n\nProvider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA o, se equals www.youtube.com (Youtube)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: gung stellt, um Facebook for Business [FacebookBusinessExtension(FBE)](https://developers.facebook.com/docs/marketing-api/fbe/) mit deinem Jimdo Onlineshop zu verbinden. Die Aktivierung und Nutzung von Facebook for Business und aller damit verbundenen Tools liegt in der Verantwortung des Nutzers und geschieht auf eigene Gefahr. Es gelten die [Facebook Datenverarbeitungsbedingungen] (https://www.facebook.com/legal/technology_terms) sowie die [Facebook Datenschutzerkl equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: hrung",storeVideoSetupAssistantCardSecondaryBtn:"Detail-Anleitung",storeVideoSetupAssistantCardSecondaryBtnLink:"https://www.youtube.com/watch?v=pB-003Fu6AI&feature=youtu.be",storeVideoSetupAssistantCardText:"Sieh dir unser kurzes Einf equals www.youtube.com (Youtube)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: n las [Condiciones de Facebook para empresas](https://www.facebook.com/legal/technology_terms) y la [Pol equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: n plek",cmsFbeTOS:"**Let op**: Jimdo levert alleen de technische middelen om de [Facebook Business Extension (FBE)](https://developers.facebook.com/docs/marketing-api/fbe/) met je webshop te verbinden. Het activeren en gebruiken van de FBE en andere Facebook-tools vindt volledig plaats op verantwoordelijkheid en risico van de gebruiker en de [Facebook Business voorwaarden](https://www.facebook.com/legal/technology_terms) en de [Privacyverklaring van Facebook](https://www.facebook.com/privacy/explanation) zijn van toepassing. Als je de Juridische Tekstgenerator gebruikt, raden we je aan, net als bij alle andere tools, de betreffende voorwaarden van Trusted Shops te raadplegen voordat je de FBE activeert.",cmsFeedbackButtonText:"Feedback sturen",cmsFileExceededMaxFileCharactersError:"Oeps! Deze bestandsnaam is te lang. Kun je hem inkorten tot 50 tekens of minder en het nog eens proberen?",cmsFileExceededMaxFileSizeError:"Oeps! Dit bestand is te groot om te uploaden. De maximale bestandsgrootte is {maxFileSize}",cmsFileLibraryNeedMoreText:"Wil je meer toevoegen?",cmsFileLibraryTitle:"Link naar ge equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: rung] (https://www.facebook.com/privacy/explanation). Wenn du den Rechtstexte-Manager verwendest, empfiehlt es sich, wie bei allen zus equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: ssig sind, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland\nCookie-Namen und Lebenszeiten: _fbp (Lebensdauer: 2 Jahre), _fbc(Lebensdauer: 2 Jahre)",cmsCookieBannerFacebookPixelPolicyUrl:"https://www.facebook.com/policies/cookies",cmsCookieBannerFacebookPixelPrivacyPolicy:"https://www.facebook.com/policy.php",cmsCookieBannerFacebookPixelTitle:"Facebook",cmsCookieBannerGADescription:"Diese Cookies sammeln anonymisierte Informationen zu Analysezwecken equals www.facebook.com (Facebook)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: tica de privacidad de Facebook](https://www.facebook.com/privacy/explanation). Si utilizas el Generador de textos legales de Jimdo, as equals www.facebook.com (Facebook)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: 004537684623-review-sign-and-return.jimdosite.com

URLs found in memory or binary data

Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://adamwdraper.github.com/Numeral-js/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://getify.mit-license.org
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://github.com/garycourt/uri-js
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://medialize.github.io/URI.js/
Source: popper.min[1].js.4.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://photoswipe.com
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://tools.google.com/dlpage/gaoptout
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/Root
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/THome
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr, ~DF8C9CFA68EDDEB32A.TMP.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/cookie-settings/
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/cookie-settings/jCookie
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr, ~DF8C9CFA68EDDEB32A.TMP.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/imprint/
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/imprint/ZImprint
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr, ~DF8C9CFA68EDDEB32A.TMP.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/privacy-policy/
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684623-review-sign-and-return.jimdosite.com/privacy-policy/hPrivacy
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684amelia.com.br/secure/jimdosite.com/Root
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684eview-sign-and-return.jimdosite.com/Root
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684eview-sign-and-return.jimdosite.com/cookie-settings/Root
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684eview-sign-and-return.jimdosite.com/imprint/Root
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://004537684eview-sign-and-return.jimdosite.com/privacy-policy/Root
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://addyosmani.com/blog/generate-multi-resolution-images-for-srcset-with-grunt/
Source: secure[2].htm.4.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://calendly.com/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://calendly.com/jimdo-support/video-support-a
Source: secure[2].htm.4.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: secure[2].htm.4.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://de.jimdo.com/info/agb/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://de.jimdo.com/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://de.jimdo.com/info/datenschutzerklaerung/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://dev.opera.com/articles/css3-object-fit-object-position/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://drafts.csswg.org/css-will-change/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://es.jimdo.com/info/condiciones-generales/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://es.jimdo.com/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://es.jimdo.com/info/politica-de-privacidad/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://es.jimdo.com/info/politica-de-privacidad/).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://feross.org
Source: secure[2].htm.4.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: css[1].css.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UNirkOUuhv.woff)
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://fonts.jimstatic.com/
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Poppins:600
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://fonts.jimstatic.com/css?display=swap&family=Roboto:400
Source: css[1].css0.4.dr	String found in binary or memory: https://fonts.jimstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLCz7Z1xlEw.woff)
Source: css[1].css0.4.dr	String found in binary or memory: https://fonts.jimstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLEj6Z1xlEw.woff)
Source: css[1].css0.4.dr	String found in binary or memory: https://fonts.jimstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: css[1].css0.4.dr	String found in binary or memory: https://fonts.jimstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://fr.jimdo.com/info/conditions-d-utilisation/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://fr.jimdo.com/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://fr.jimdo.com/info/politique-de-confidentialite/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://fr.jimdo.com/info/politique-de-confidentialite/).
Source: bootstrap.min[1].css.4.dr, bootstrap.min[1].js.4.dr	String found in binary or memory: https://getbootstrap.com)
Source: bootstrap.min[1].js0.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/372#issuecomment-3112695
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/548#issuecomment-12812099
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://github.com/jonschlinkert/repeat-string
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://github.com/polygonplanet/weakmap-polyfill
Source: bootstrap.min[1].css.4.dr, bootstrap.min[1].js.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.min[1].js.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de/articles/115005738383-Wie-verbinde-ich-meine-G-Suite-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de/articles/115005745466-Wie-richte-ich-eine-E-Mail-Weiterleitung-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/de/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us/articles/360022894071-How-do-I-get-my-Dolphin-store-ready-fo
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/en-us/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/115005738383--C%C3%B3mo-configuro-Google-G-Suite-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/115005745466--C%C3%B3mo-redirecciono-mis-emails-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/360022894071--C%C3%B3mo-termino-de-montar-mi-tienda-on
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/es/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/115005738383-Comment-connecter-un-compte-G-Suite
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/115005745466-Param%C3%A9trer-un-transfert-d-email
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/360022894071-Quelles-sont-les-%C3%A9tapes-%C3%A0-suivr
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/fr/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/115005738383-Come-faccio-a-collegare-il-mio-account-G-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/115005745466-Come-si-imposta-un-alias-per-l-email-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/360022894071-Come-faccio-a-vendere-attraverso-il-mio-s
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/it/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/115005738383
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/115005745466
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/360000905146?utm_source=upgradescreen)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/ja/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/115005738383-Hoe-verbind-ik-mijn-G-Suite-
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/115005745466-Hoe-stel-ik-het-doorsturen-van-e-mails-in
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://help.jimdo-dolphin.com/hc/nl/articles/360058420551/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://it.jimdo.com/info/condizioni-generali/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://it.jimdo.com/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://it.jimdo.com/info/regolamento-sulla-privacy/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://it.jimdo.com/info/regolamento-sulla-privacy/).
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/static/bab77b73b58131887507.css
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://jimdo-dolphin-static-assets-prod.freetls.fastly.net/renderer/static/c7d548dd8ee851dfb409.js
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://jimdo-storage.freetls.fastly.net/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://jimdo.com)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://jimdo.com).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://jimdo.com/fr/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://jp.jimdo.com/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://lodash.com/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://lodash.com/license
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://lp.shore.com/en/jimdo/)
Source: secure[2].htm.4.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: secure[2].htm.4.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://modernizr.com/download?-objectfit-pointerevents-srcset-touchevents-willchange-setclasses-don
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://nl.jimdo.com/info/algemene-voorwaarden/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://nl.jimdo.com/info/privacy/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://nl.jimdo.com/info/privacy/).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://openjsf.org/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=de
Source: privacy-policy[1].htm.4.dr, c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=es
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=es).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=fr
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=fr).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=it
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=it).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=ja
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=nl
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://policies.google.com/privacy?hl=nl).
Source: 9KWB0U2I.htm.4.dr	String found in binary or memory: https://psicologamariaamelia.com.br/secure
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr, secure[1].htm.4.dr	String found in binary or memory: https://psicologamariaamelia.com.br/secure/
Source: {B735E588-CA1F-11EB-90EB-ECF4BBEA1588}.dat.2.dr	String found in binary or memory: https://psicologamariaamelia.com.br/secure/.Sharing
Source: ~DF8C9CFA68EDDEB32A.TMP.2.dr	String found in binary or memory: https://psicologamariaamelia.com.br/secure/jimdosite.com/
Source: secure[2].htm.4.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://stripe.com/cookies-policy/legal
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://stripe.com/privacy
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=de).
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=en
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=en)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=es).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=fr).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=it).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout?hl=nl).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://vimeo.com/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://vimeo.com/api/oembed.json?url=
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://vimeo.com/cookie_policy
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://vimeo.com/privacy
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/de/legal/privacy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/legal/privacy/en-ww/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/legal/privacy/es/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/legal/privacy/fr-ww/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/legal/privacy/it/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/legal/privacy/jp/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.apple.com/legal/privacy/nl/
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://www.google.com/analytics/terms
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/analytics/terms)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/analytics/terms/de.html)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/analytics/terms/es.html)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/analytics/terms/it.html)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/analytics/terms/nl.html)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/intl/de/policies/privacy/index.html#Datenschutzerkl%C3%A4rung).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/webmasters/tools/home)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.com/webmasters/tools/home).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.google.fr/analytics/terms/fr.html)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo-status.com/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo-status.com/).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/de/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/de/hilfspaket-onlineshop-fuer-unternehmen/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/de/info/agb/).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/de/info/jimdo-online-videoberatung-nutzungsbedingungen/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/de/magazin/corona-krise/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/de/preise/onlineshop/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/es)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/es/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/es/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/es/2020/03/23/qu%C3%A9-hacer-si-el-coronavirus-afecta-tu-peque%C3%B1o-negocio/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/es/ayuda-tienda-online-empresas)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/es/info/politica-de-privacidad/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/fr/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/fr/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/fr/2020/03/23/que-faire-si-l-%C3%A9pid%C3%A9mie-du-coronavirus-affecte-votre-a
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/fr/aide-eboutique-PME)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/fr/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/fr/info/politique-de-confidentialite/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/info/jimdo-video-consultation-terms-of-service/)
Source: privacy-policy[1].htm.4.dr	String found in binary or memory: https://www.jimdo.com/info/privacy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/info/privacy/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/info/privacy/).
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/info/terms-of-service/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/it/2020/03/23/coronavirus-consigli-per-imprese-e-professionisti/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/it/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/it/info/regolamento-sulla-privacy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/it/supporto-shop-online-pmi)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/jp/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/jp/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/jp/info/privacy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/jp/news/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/nl/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/nl/blog/ondernemen/corona-checklist-ondernemers/)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/nl/info/cookies/policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/nl/info/privacy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.jimdo.com/nl/noodhulp-webshop-ondernemers)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.paypal.com/ie/webapps/mpp/ua/privacy-full
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.privacyshield.gov/welcome)
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/de/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/es/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/fr/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/it/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/jp/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/legal/cookies-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.spotify.com/us/legal/privacy-policy/
Source: c7d548dd8ee851dfb409[1].js.4.dr	String found in binary or memory: https://www.youtube.com/watch?v=pB-003Fu6AI&feature=youtu.be

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 52.17.15.53:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.15.53:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.79:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.235.225:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.235.225:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.4:49767 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: mal68.phis.win@3/33@8/6

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B735E586-CA1F-11EB-90EB-ECF4BBEA1588}.dat

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF871606A6F85B52A8.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6440 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6440 CREDAT:17410 /prefetch:2			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior