Windows Analysis Report Corona als Dank.docx

Overview

General Information

Sample Name: Corona als Dank.docx
Analysis ID: 441230
MD5: a19832a2c9c96060b65abb12ec718d6e
SHA1: 3f7a955accb1b1a9ea77a8f02006fa8781f1232c
SHA256: 44756d412d9244cc966b63f44435779e9d9d6fe55fd15c08818b1614c8f81312
Infos:

Most interesting Screenshot:

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 60%

Signatures

IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware

Classification

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll Jump to behavior
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49167 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.129.26:443 -> 192.168.2.22:49169 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49172 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49173 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49176 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49174 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49175 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.129.26:443 -> 192.168.2.22:49170 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.102.176.152:443 -> 192.168.2.22:49178 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.102.176.152:443 -> 192.168.2.22:49177 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49183 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.231.78.0:443 -> 192.168.2.22:49181 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.231.78.0:443 -> 192.168.2.22:49182 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.194.217:443 -> 192.168.2.22:49186 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.194.217:443 -> 192.168.2.22:49187 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49185 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49184 version: TLS 1.2
Source: unknown HTTPS traffic detected: 185.230.61.163:443 -> 192.168.2.22:49188 version: TLS 1.2
Source: unknown HTTPS traffic detected: 185.230.61.163:443 -> 192.168.2.22:49189 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.2.188.208:443 -> 192.168.2.22:49190 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.2.188.208:443 -> 192.168.2.22:49191 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.2.188.208:443 -> 192.168.2.22:49192 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.17.71.188:443 -> 192.168.2.22:49193 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.17.71.188:443 -> 192.168.2.22:49194 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49196 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49197 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.22:49202 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.22:49211 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.22:49204 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.22:49212 version: TLS 1.2
Source: unknown HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.22:49214 version: TLS 1.2
Source: unknown HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.22:49215 version: TLS 1.2
Source: unknown HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.22:49216 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.35:443 -> 192.168.2.22:49227 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.35:443 -> 192.168.2.22:49228 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.37:443 -> 192.168.2.22:49218 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.37:443 -> 192.168.2.22:49217 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.22:49230 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.22:49229 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.22:49234 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.22:49235 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49238 version: TLS 1.2

Networking:

barindex
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 151.101.194.217 151.101.194.217
Source: Joe Sandbox View IP Address: 52.2.188.208 52.2.188.208
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{E195542A-72A2-4470-89E8-B7D87A58E0E0}.tmp Jump to behavior
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.artsenvoorwaarheid.nlDNT: 1Connection: Keep-Alive
Source: gtm[1].js.3.dr String found in binary or memory: "vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"1566517726971189\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=1566517726971189\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n", equals www.facebook.com (Facebook)
Source: identity[1].js.3.dr String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage||function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules||(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]||(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)||(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.*\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL||!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: gtm[1].js.3.dr String found in binary or memory: function Tq(a,b){}function Uq(a,b,c){};var Vq=!!A.MutationObserver,Wq=void 0,Xq=function(a){if(!Wq){var b=function(){var c=H.body;if(c)if(Vq)(new MutationObserver(function(){for(var e=0;e<Wq.length;e++)J(Wq[e])})).observe(c,{childList:!0,subtree:!0});else{var d=!1;hc(c,"DOMNodeInserted",function(){d||(d=!0,J(function(){d=!1;for(var e=0;e<Wq.length;e++)J(Wq[e])}))})}};Wq=[];H.body?b():J(b)}Wq.push(a)};var Zq=["www.youtube.com","www.youtube-nocookie.com"],$q,ar=!1,br=0; equals www.youtube.com (Youtube)
Source: YZ4GE8GX.txt.3.dr String found in binary or memory: www.linkedin.com/ equals www.linkedin.com (Linkedin)
Source: unknown DNS traffic detected: queries for: www.artsenvoorwaarheid.nl
Source: 77EC63BDA74BD0D0E0426DC8F8008506.3.dr String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: internet-explorer[1].htm.3.dr String found in binary or memory: http://dev.wix.com/
Source: santa-components.prod[1].js.3.dr String found in binary or memory: http://feross.org
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://img.youtube.com/vi/CakiQCH5ZY0/mqdefault.jpg
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://img.youtube.com/vi/CakiQCH5ZY0/mqdefault.jpg&quot;
Source: internet-explorer[1].htm.3.dr String found in binary or memory: http://investors.wix.com/
Source: bolt-custom-elements.min[1].js.3.dr String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: bolt-custom-elements.min[1].js.3.dr String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: bolt-custom-elements.min[1].js.3.dr String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: bolt-custom-elements.min[1].js.3.dr String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: minified[1].js.3.dr String found in binary or memory: http://rock.mit-license.org
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://static.wixstatic.com/media/139571a1212e4d3d8074041626ba3ed6.jpg
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://static.wixstatic.com/media/139571a1212e4d3d8074041626ba3ed6.jpg&quot;
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://static.wixstatic.com/media/bc001baa4397444f809fa5f147c28a9e.jpg
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://static.wixstatic.com/media/bc001baa4397444f809fa5f147c28a9e.jpg&quot;
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://static.wixstatic.com/media/d967ba93f0314c78924edc8a8c8cfa15.jpg
Source: bolt-main-prod-old[1].js.3.dr String found in binary or memory: http://static.wixstatic.com/media/d967ba93f0314c78924edc8a8c8cfa15.jpg&quot;
Source: lodash.min[1].js.3.dr String found in binary or memory: http://underscorejs.org/LICENSE
Source: helvetica[1].css.3.dr, internet-explorer[1].htm.3.dr String found in binary or memory: http://webfonts.fonts.com
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.WantToKnow.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.artsenvoorwaarheid.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.bluetiger.studio.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.deblijeB.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.deguldenmiddenweg.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.denieuwewereld.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.deoorlogreedsverloren.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.devrijemare.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.eenoorlogreesverloren.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.moederhart.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.vaccinvrij.nl
Source: ~WRS{0385B391-F231-42A8-B360-3F92DE6148F2}.tmp.0.dr String found in binary or memory: http://www.vrouwenvoorvrijheid.nl
Source: internet-explorer[1].htm.3.dr String found in binary or memory: http://www.wix.com/blog
Source: internet-explorer[1].htm.3.dr String found in binary or memory: http://www.wix.com/jobs/main
Source: gtm[1].js.3.dr String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: gtm[1].js.3.dr String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.3.dr String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: f[1].txt.3.dr String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://bo.wix.com/suricate/
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://browser.sentry-cdn.com/4.6.2/bundle.min.js
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://browser.sentry-cdn.com/5.21.4/bundle.min.js
Source: wixui.Captcha.chunk[1].js.3.dr String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3056
Source: wixui.Captcha.chunk[1].js.3.dr String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=4118
Source: gtm[1].js.3.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://de.wix.com/outdated-browser/internet-explorer
Source: wixui.Captcha.chunk[1].js.3.dr String found in binary or memory: https://developers.google.com/maps/faq#languagesupport
Source: wixui.Captcha.chunk[1].js.3.dr String found in binary or memory: https://developers.google.com/recaptcha/docs/language
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://es.wix.com/outdated-browser/internet-explorer
Source: wixui.Captcha.chunk[1].js.3.dr String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.createclass
Source: react.production.min[1].js.3.dr String found in binary or memory: https://fb.me/react-polyfills
Source: santa-components.prod[1].js.3.dr String found in binary or memory: https://feross.org/opensource
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/amaticsc/v16/TUZ3zwprpvBS1izr_vOMscGKfLUE.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/amaticsc/v16/TUZyzwprpvBS1izr_vOECOSZ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/anton/v15/1Ptgg87LROyAm3Kz-Ck.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/barlow/v5/7cHpv4kjgoGqM7E_DMs_.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/barlow/v5/7cHqv4kjgoGqM7E3t-4s51oq.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/barlow/v5/7cHrv4kjgoGqM7E_Cfs7wHk.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/barlow/v5/7cHsv4kjgoGqM7E_CfOA5WouvTw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/basic/v10/xfu_0WLxV2_XKTNw6Fc.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/caudex/v10/esDQ311QOP6BJUr4zfKH.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/caudex/v10/esDS311QOP6BJUr4yMKDtbw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/caudex/v10/esDT311QOP6BJUrwdteUkp8F.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/caudex/v10/esDV311QOP6BJUr4yMo4kK8BMpM.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/chelseamarket/v8/BCawqZsHqfr89WNP_IApC8tzKChiJgk.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cinzel/v11/8vIU7ww63mVu7gtR-kwKxNvkNOjw-jHgfY3lCw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cinzel/v11/8vIU7ww63mVu7gtR-kwKxNvkNOjw-tbnfY3lCw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cookie/v12/syky-y18lb0tSbf9kgqU.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/corben/v14/LYjAdGzzklQtCMpFHCZQqnos.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/corben/v14/LYjDdGzzklQtCMpNpwND.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v10/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEPzvD-KzhU.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v10/co3YmX5slCNuHLi8bLeY9MK7whWMhyjQEl5fvg-O.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v10/co3ZmX5slCNuHLi8bLeY9MK7whWMhyjYrEtImSw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v10/co3bmX5slCNuHLi8bLeY9MK7whWMhyjYqXtM.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/damion/v10/hv-XlzJ3KEUe_YZkamww.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v16/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7B1i03Sup6.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v16/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup6.woff)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GR1SDk_YAPI.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GR2SDk_YAPIlWk.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GR4SDk_YAPIlWk.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GR5SDk_YAPIlWk.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GR6SDk_YAPIlWk.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GR7SDk_YAPIlWk.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGUmQSNjdsmc35JDF1K5GRxSDk_YAPIlWk.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweD81ZyHKpWiGIg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweDQ1ZyHKpWiGIg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweDU1ZyHKpWiGIg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweDY1ZyHKpWiGIg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweDc1ZyHKpWiGIg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweDg1ZyHKpWiGIg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v12/SlGWmQSNjdsmc35JDF1K5GRweDs1ZyHKpWg.woff2)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v15/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-6_RkBI95.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v15/SlGDmQSNjdsmc35JDF1K5E55YMjF_7DPuGi-DPNkBI95.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v15/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7dbR799U64.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/ebgaramond/v15/SlGFmQSNjdsmc35JDF1K5GRwUjcdlttVFm-rI7e8QL99U64.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/enriqueta/v10/gokpH6L7AUFrRvV44HVr92-3n9xD.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/enriqueta/v10/goksH6L7AUFrRvV44HVjTEqk.woff)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/enriqueta/v9/gokpH6L7AUFrRvV44HVr92-3kdxFiafDFtAi.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/enriqueta/v9/gokpH6L7AUFrRvV44HVr92-3n9xFiafDFg.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/enriqueta/v9/goksH6L7AUFrRvV44HVjQkqisv5Io53K.woff2)
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/enriqueta/v9/goksH6L7AUFrRvV44HVjTEqisv5Iow.woff2)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/forum/v11/6aey4Ky-Vb8Ew8IROpQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/frederickathegreat/v10/9Bt33CxNwt7aOctW2xjbCstzwVKsIBVV--SjxbE.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/jockeyone/v10/HTxpL2g2KjCFj4x8WI6AnIHxGg.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/josefinslab/v13/lW-qwjwOK3Ps5GSJlNNkMalnrxShJj4wo7AR-pHveD0NKIie.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/josefinslab/v13/lW-qwjwOK3Ps5GSJlNNkMalnrxShJj4wo7AR-pHvnzoNKIie.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/josefinslab/v13/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349LA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/josefinslab/v13/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W776rR349LA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/jura/v16/z7NOdRfiaC4Vd8hhoPzfb5vBTP1d7ZumR_4.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/jura/v16/z7NOdRfiaC4Vd8hhoPzfb5vBTP266pumR_4.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/kellyslab/v11/-W_7XJX0Rz3cxUnJC5t6fkQLeA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u8w4BMUTPHjxsAXC-s.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u9w4BMUTPHh6UVSwiPHw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6u_w4BMUTPHjxsI5wq_Gwfr.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/lato/v17/S6uyw4BMUTPHjx4wWA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v9/kmKhZrc3Hgbbcjq75U4uslyuy4kn0qNcWxEQCg.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v9/kmKiZrc3Hgbbcjq75U4uslyuy4kn0qviTgY3KcY.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v9/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxU.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/lobster/v23/neILzCirqoswsqX9zoKmNQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/marckscript/v11/nwpTtK2oNgBA3Or78gapdwuyyCg5.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/monoton/v10/5h1aiZUrOngCibe4TkHLRA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTUPjIg1_i6t8kCHKm459WxZcgvz_PZ2.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTUQjIg1_i6t8kCHKm459WxRyS7g.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTURjIg1_i6t8kCHKm45_dJE3gnD-A.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v15/JTUSjIg1_i6t8kCHKm459WlhzQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/mrdehaviland/v9/OpNVnooIhJj96FdB73296ksbOg3F60U.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/niconne/v10/w8gaH2QvRug1_rTfnQyn3w.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/noticiatext/v10/VuJ2dNDF2Yv9qppOePKYRP12Zjte.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/noticiatext/v10/VuJodNDF2Yv9qppOePKYRP12Ywtan0g.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/noticiatext/v10/VuJpdNDF2Yv9qppOePKYRP1-3R5NuGvW.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/noticiatext/v10/VuJrdNDF2Yv9qppOePKYRP12YwPhulvShDM.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v15/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuXMQQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/opensanscondensed/v15/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff1GhDuXMQQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/oswald/v36/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiYw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/oswald/v36/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiYw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/overlock/v10/Z9XQDmdMWRiN1_T9Z7Tc0FWJhr6j9w.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/overlock/v10/Z9XSDmdMWRiN1_T9Z7xizfmLtro.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/overlock/v10/Z9XTDmdMWRiN1_T9Z7Tc2O6slQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/overlock/v10/Z9XVDmdMWRiN1_T9Z7TZ6Oo.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/patrickhand/v14/LDI1apSQOAYtSuYWp8ZhfYe8XsLN.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/play/v12/6ae84K2oVqwItm4TCpAy3A.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/play/v12/6aez4K2oVqwIvtU2GQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v22/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_k-UXtHA
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v22/nuFRD-vYSZviVYUb_rj3ij__anPXDTnCjmHKM4nYO7KN_qiTXtHA
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v22/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtU.
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v22/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKeiunDXbtU.
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLCz7Z1xlEw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiDyp8kv8JHgFVrJJLmy15VF9eI.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiEyp8kv8JHgFVrJJfedA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/poppins/v15/pxiGyp8kv8JHgFVrJJLucHtG.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/questrial/v13/QdVUSTchPBm7nuUeVf70viFj.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Pt_g8zYS_SKggPNyCgSQamb1W0lwk4S4WjMDrMfJg.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Pt_g8zYS_SKggPNyCgSQamb1W0lwk4S4Y_LDrMfJg.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCIPrc.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/raleway/v19/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrc.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOjCnqEu92Fr1Mu51TzBic6CsI.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOkCnqEu92Fr1Mu51xIIzQ.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc-.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxM.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/rozhaone/v8/AlZy_zVFtYP12Zncg2kRcn3_.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/sacramento/v8/buEzpo6gcdjy0EiZMBUG4C0f-w.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/sail/v11/DPEjYwiBxwYJJBPJBw.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/sarina/v11/-F6wfjF3ITQwasLRKUrT.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/signika/v12/vEFO2_JTCgwQ5ejvMV0O96D01E8J0tJXHKbBjMg.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/signika/v12/vEFO2_JTCgwQ5ejvMV0O96D01E8J0tKwG6bBjMg.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/spinnaker/v12/w8gYH2oyX-I0_rvR6HmX23YM.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/suezone/v5/taiJGmd_EZ6rqscQgOFMmo0.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/worksans/v9/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGU3ms5pIfe.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/worksans/v9/QGY9z_wNahGAdqQ43Rh_ebrnlwyYfEPxPoGUOWw5pIfe.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/worksans/v9/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8JoA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fonts.gstatic.com/s/worksans/v9/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K67QBi8JoA.woff)
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://fr.wix.com/outdated-browser/internet-explorer
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://frog.wix.com/bt?src=29&evid=3
Source: bundle.min[1].js0.3.dr, bundle.min[1].js.3.dr String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: gtm[1].js.3.dr String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: imageClientApi[1].js.3.dr String found in binary or memory: https://github.com/madrobby/zepto/blob/master/MIT-LICENSE
Source: imageClientApi[1].js.3.dr String found in binary or memory: https://github.com/madrobby/zepto/blob/master/src/detect.js#files
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://github.com/wix/yoshi/issues/2689
Source: minified[1].js.3.dr String found in binary or memory: https://github.com/zloirock/core-js
Source: f[1].txt0.3.dr String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1006927621/?random
Source: gsap.min[1].js.3.dr String found in binary or memory: https://greensock.com
Source: gsap.min[1].js.3.dr String found in binary or memory: https://greensock.com/standard-license
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://ja.wix.com/outdated-browser/internet-explorer
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://ko.wix.com/outdated-browser/internet-explorer
Source: lodash.min[1].js.3.dr String found in binary or memory: https://lodash.com/
Source: lodash.min[1].js.3.dr String found in binary or memory: https://lodash.com/license
Source: lodash.min[1].js.3.dr, lodash.min[1].js0.3.dr String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: lodash.min[1].js.3.dr String found in binary or memory: https://openjsf.org/
Source: gtm[1].js.3.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: gtm[1].js.3.dr String found in binary or memory: https://pagead2.googlesyndication.com/
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://polyfill.io/v3/polyfill.min.js?features=fetch
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://pt.wix.com/outdated-browser/internet-explorer
Source: insight.min[1].js.3.dr String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: insight.min[1].js.3.dr String found in binary or memory: https://px.ads.linkedin.com/insight_tag_errors.gif?
Source: react-dom.production.min[1].js.3.dr, react.production.min[1].js.3.dr String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: wixui.Captcha.chunk[1].js.3.dr String found in binary or memory: https://recaptcha.net/recaptcha/api.js
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://ru.wix.com/outdated-browser/internet-explorer
Source: core[1].js.3.dr String found in binary or memory: https://s.pinimg.com/ct/lib/main.c6ca189a.js
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://siteassets.parastorage.com/pages/pages/thunderbolt?beckyExperiments=specs.thunderbolt.addres
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://siteassets.parastorage.com/pages/singlePage/viewerViewModeJson
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/client/pfavico.ico
Source: imagestore.dat.3.dr String found in binary or memory: https://static.parastorage.com/client/pfavico.ico~
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/Container_DefaultAreaSkin.0b1317f3.chun
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/FiveGridLine_NotchDashedLine.aad659a0.c
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/SlideShowSlide.ed4bbfec.chunk.min.css
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/VerticalMenu_VerticalMenuSolidColorSkin
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/VideoPlayer.06bb53f1.chunk.min.css
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/bootstrap-components-responsive.4c4fb78
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/componentSdks.53d69c69.bundle.min.js
Source: F2MQQRVE.htm.3.dr, thunderboltElements.07dab272.bundle.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/editor-elements/dist/thunderboltElements.07dab272.bundle.min
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/santa-resources/resources/viewer/user-site-fonts/v11/wixMade
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/santa-resources/resources/viewer/user-site-fonts/v7/helvetic
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/santa/1.1651.0
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/tag-manager-client/1.427.0/siteTags.bundle.min.js
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/web/1.1777.0/javascript/wysiwyg/viewer/deprecatedbrowsers/Up
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-bolt/1.7264.0
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-bolt/1.7264.0/bolt-main/app/bolt-custom-elements.min.js
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-bolt/1.7264.0/bolt-main/app/main-r.min.js
Source: F2MQQRVE.htm.3.dr, internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-perf-measure/1.501.0/wix-perf-measure.bundle.min.js
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/bi-common.inline.126f35b2.bundle.min.js
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/bi.inline.cf9319d3.bundle.min.js
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/bi.inline.cf9319d3.bundle.min.js.map
Source: F2MQQRVE.htm.3.dr, bootstrap-features.53639d1b.bundle.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/bootstrap-features.53639d1b.bundle.min.
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/browser-deprecation.inline.36d57dbc.bun
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/createPlatformWorker.inline.f762923e.bu
Source: custom-elements-polyfill.39b1b49f.chunk.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/custom-elements-polyfill.39b1b49f.chunk
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/externals-registry.inline.d76c0075.bund
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/initCustomElements.inline.b649141a.bund
Source: intersection-observer-polyfill.67fb87dd.chunk.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/intersection-observer-polyfill.67fb87dd
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/main.a9ba068a.bundle.min.js
Source: main.a9ba068a.bundle.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/main.a9ba068a.bundle.min.js.map
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/sendFedopsLoadStarted.inline.5a36bd68.b
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/tslib.inline.909b9ad8.bundle.min.js
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/tslib.inline.909b9ad8.bundle.min.js.map
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/webpack-runtime.2bd38f9a.bundle.min.js.
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/windowMessageRegister.inline.6ff9ddf9.b
Source: wix-resize-observer-polyfill.56f8c1c1.chunk.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/wix-resize-observer-polyfill.56f8c1c1.c
Source: viewerComponentService.bundle[1].js.3.dr, dataRefs.bundle.min[1].js.3.dr String found in binary or memory: https://static.parastorage.com/services/wix-ui-santa/1.1606.0/
Source: F2MQQRVE.htm.3.dr, internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/core-js-bundle
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/focus-within-polyfill
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/lodash
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/react
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/react-dom
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/requirejs-bolt
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.parastorage.com/unpkg/whatwg-fetch
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://static.wixstatic.com/media/311dce_77ca1007cf83485da0b7e16ffb9735ac~mv2.png/v1/fill/w_1200
Source: analytics[1].js.3.dr String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: f[1].txt.3.dr, analytics[1].js.3.dr String found in binary or memory: https://tagassistant.google.com/
Source: fetch.umd[1].js.3.dr String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://users.wix.com/wix-users
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://www.artsenvoorwaarheid.nl
Source: F2MQQRVE.htm.3.dr, ~DFF2A861D030BF6D04.TMP.2.dr String found in binary or memory: https://www.artsenvoorwaarheid.nl/
Source: {822F0859-D85A-11EB-ADCF-ECF4BBB5915B}.dat.2.dr String found in binary or memory: https://www.artsenvoorwaarheid.nl/Root
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://www.artsenvoorwaarheid.nl/informed-consent
Source: analytics[1].js.3.dr String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.3.dr String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.3.dr String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: gtm[1].js.3.dr String found in binary or memory: https://www.google.com
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://www.google.com/intl/en/chrome/
Source: f[2].txt.3.dr String found in binary or memory: https://www.google.com/pagead/1p-user-list/642100862/?random
Source: f[1].txt1.3.dr String found in binary or memory: https://www.google.com/pagead/1p-user-list/819384062/?random
Source: gtm[1].js.3.dr String found in binary or memory: https://www.google.com/pagead/conversion_async.js
Source: f[2].txt.3.dr String found in binary or memory: https://www.google.de/pagead/1p-user-list/642100862/?random
Source: f[1].txt1.3.dr String found in binary or memory: https://www.google.de/pagead/1p-user-list/819384062/?random
Source: gtm[1].js.3.dr String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: gtm[1].js.3.dr, f[1].txt.3.dr String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.3.dr String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://www.mozilla.org/en-US/firefox/new/
Source: F2MQQRVE.htm.3.dr String found in binary or memory: https://www.nvkp.nl/fileadmin/nvkp/pdf/NVKP_kinderen_en_Covid-19_met_bronnen.pdf
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://www.wix.com/favicon.ico
Source: internet-explorer[1].htm.3.dr String found in binary or memory: https://www.wix.com/outdated-browser/internet-explorer
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49227
Source: unknown Network traffic detected: HTTP traffic on port 49185 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown Network traffic detected: HTTP traffic on port 49181 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49185
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49184
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49181
Source: unknown Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49227 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49195 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49218
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49217
Source: unknown Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49216
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49214
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49178
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49211
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49177
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49176
Source: unknown Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49217 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49169
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49167
Source: unknown Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49231 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49197 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49193 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49178 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49235 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49238
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49235
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49234
Source: unknown Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49231
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49197
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49230
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49196
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49195
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49193
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49229 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49211 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49229
Source: unknown Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49228
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49167 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.129.26:443 -> 192.168.2.22:49169 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49172 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49173 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49176 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49174 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49175 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.129.26:443 -> 192.168.2.22:49170 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.102.176.152:443 -> 192.168.2.22:49178 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.102.176.152:443 -> 192.168.2.22:49177 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49183 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.231.78.0:443 -> 192.168.2.22:49181 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.231.78.0:443 -> 192.168.2.22:49182 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.194.217:443 -> 192.168.2.22:49186 version: TLS 1.2
Source: unknown HTTPS traffic detected: 151.101.194.217:443 -> 192.168.2.22:49187 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49185 version: TLS 1.2
Source: unknown HTTPS traffic detected: 35.246.6.109:443 -> 192.168.2.22:49184 version: TLS 1.2
Source: unknown HTTPS traffic detected: 185.230.61.163:443 -> 192.168.2.22:49188 version: TLS 1.2
Source: unknown HTTPS traffic detected: 185.230.61.163:443 -> 192.168.2.22:49189 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.2.188.208:443 -> 192.168.2.22:49190 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.2.188.208:443 -> 192.168.2.22:49191 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.2.188.208:443 -> 192.168.2.22:49192 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.17.71.188:443 -> 192.168.2.22:49193 version: TLS 1.2
Source: unknown HTTPS traffic detected: 104.17.71.188:443 -> 192.168.2.22:49194 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49196 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49197 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.22:49202 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.22:49211 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.22:49204 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.22:49212 version: TLS 1.2
Source: unknown HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.22:49214 version: TLS 1.2
Source: unknown HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.22:49215 version: TLS 1.2
Source: unknown HTTPS traffic detected: 216.58.212.162:443 -> 192.168.2.22:49216 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.35:443 -> 192.168.2.22:49227 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.186.35:443 -> 192.168.2.22:49228 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.37:443 -> 192.168.2.22:49218 version: TLS 1.2
Source: unknown HTTPS traffic detected: 108.174.11.37:443 -> 192.168.2.22:49217 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.22:49230 version: TLS 1.2
Source: unknown HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.22:49229 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.22:49234 version: TLS 1.2
Source: unknown HTTPS traffic detected: 157.240.17.35:443 -> 192.168.2.22:49235 version: TLS 1.2
Source: unknown HTTPS traffic detected: 34.96.106.200:443 -> 192.168.2.22:49238 version: TLS 1.2
Source: classification engine Classification label: clean1.winDOCX@4/145@23/16
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE File created: C:\Users\user\Desktop\~$rona als Dank.docx Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE File created: C:\Users\user\AppData\Local\Temp\CVRB8C3.tmp Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE File read: C:\Users\desktop.ini Jump to behavior
Source: unknown Process created: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE 'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
Source: unknown Process created: C:\Program Files\Internet Explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\Internet Explorer\iexplore.exe Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3044 CREDAT:275457 /prefetch:2
Source: C:\Program Files\Internet Explorer\iexplore.exe Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3044 CREDAT:275457 /prefetch:2 Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE Process information set: NOOPENFILEERRORBOX Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 441230 Sample: Corona als Dank.docx Startdate: 28/06/2021 Architecture: WINDOWS Score: 1 13 td-static-34-96-106-200.parastorage.com 2->13 15 static.parastorage.com 2->15 6 iexplore.exe 8 36 2->6         started        8 WINWORD.EXE 293 22 2->8         started        process3 process4 10 iexplore.exe 5 149 6->10         started        dnsIp5 17 163.www.sv5.wix.com 185.230.61.163, 443, 49188, 49189 WIX_COMIL Israel 10->17 19 pop-esv5.mix.linkedin.com 108.174.11.37, 443, 49217, 49218 LINKEDINUS United States 10->19 21 43 other IPs or domains 10->21
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
185.230.61.163
 163.www.sv5.wix.com Israel
58182 WIX_COMIL false
34.96.106.200
 td-static-34-96-106-200.parastorage.com United States
15169 GOOGLEUS false
157.240.17.35
 star-mini.c10r.facebook.com United States
32934 FACEBOOKUS false
157.240.17.15
 scontent.xx.fbcdn.net United States
32934 FACEBOOKUS false
35.246.6.109
 td-balancer-euw2-6-109.wixdns.net United States
15169 GOOGLEUS false
151.101.194.217
 browser.sentry-cdn.com United States
54113 FASTLYUS false
142.250.186.35
 www.google.de United States
15169 GOOGLEUS false
104.17.71.188
 fast.fonts.com United States
13335 CLOUDFLARENETUS false
142.250.185.198
 dart.l.doubleclick.net United States
15169 GOOGLEUS false
34.231.78.0
 bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com United States
14618 AMAZON-AESUS false
52.2.188.208
 sentry-nlb-e70282e8a06dcc98.elb.us-east-1.amazonaws.com United States
14618 AMAZON-AESUS false
151.101.129.26
 polyfill.io United States
54113 FASTLYUS false
142.250.185.194
 pagead46.l.doubleclick.net United States
15169 GOOGLEUS false
34.102.176.152
 gcp.media-router.wixstatic.com United States
15169 GOOGLEUS false
216.58.212.162
 googleads.g.doubleclick.net United States
15169 GOOGLEUS false
108.174.11.37
 pop-esv5.mix.linkedin.com United States
14413 LINKEDINUS false

Contacted Domains

Name IP Active
www.google.de 142.250.186.35 true
star-mini.c10r.facebook.com 157.240.17.35 true
dart.l.doubleclick.net 142.250.185.198 true
pagead46.l.doubleclick.net 142.250.185.194 true
browser.sentry-cdn.com 151.101.194.217 true
td-balancer-euw2-6-109.wixdns.net 35.246.6.109 true
pop-esv5.mix.linkedin.com 108.174.11.37 true
gcp.media-router.wixstatic.com 34.102.176.152 true
fast.fonts.com 104.17.71.188 true
td-static-34-96-106-200.parastorage.com 34.96.106.200 true
scontent.xx.fbcdn.net 157.240.17.15 true
163.www.sv5.wix.com 185.230.61.163 true
googleads.g.doubleclick.net 216.58.212.162 true
sentry-nlb-e70282e8a06dcc98.elb.us-east-1.amazonaws.com 52.2.188.208 true
polyfill.io 151.101.129.26 true
td-username-euw2-6-109.wix.com 35.246.6.109 true
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com 34.231.78.0 true
4382365.fls.doubleclick.net unknown unknown
www.facebook.com unknown unknown
static.wixstatic.com unknown unknown
siteassets.parastorage.com unknown unknown
www.linkedin.com unknown unknown
connect.facebook.net unknown unknown
px.ads.linkedin.com unknown unknown
ct.pinterest.com unknown unknown
adservice.google.de unknown unknown
en.wix.com unknown unknown
www.artsenvoorwaarheid.nl unknown unknown
frog.wix.com unknown unknown
snap.licdn.com unknown unknown
s.pinimg.com unknown unknown
sentry.wixpress.com unknown unknown
static.parastorage.com unknown unknown
www.wix.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
http://www.artsenvoorwaarheid.nl/ false
  • Avira URL Cloud: safe
 unknown