Windows Analysis Report http://www.coronavirustoday.com

AV Detection:

Antivirus detection for URL or domain

Source: https://certify.alexametrics.com/atrk.gif?

URL Reputation: Label: phishing

Cryptography:

Public key (encryption) found

Source: ddf4f742d489b9b7_0.0.dr

Binary or memory string: -----BEGIN PUBLIC KEY-----

Phishing:

HTML body contains low number of good links

Source: https://promotions.lpage.co/campaigns/1210163/form?viewport_type=embedded&isBuilder=false&uuid=e41650b8-3822-4a5d-9e73-cc9b1bf76eb5

HTTP Parser: Number of links: 0

HTML title does not match URL

Source: https://promotions.lpage.co/campaigns/1210163/form?viewport_type=embedded&isBuilder=false&uuid=e41650b8-3822-4a5d-9e73-cc9b1bf76eb5

HTTP Parser: Title: Precision Vaccinations does not match URL

Suspicious form URL found

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01

HTTP Parser: Form action: https://sites.wustl.edu/stopcovidtrial/wp-login.php

No HTML title found

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01

HTTP Parser: HTML title missing

META author tag missing

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: No <meta name="author".. found
Source: https://promotions.lpage.co/campaigns/1210163/form?viewport_type=embedded&isBuilder=false&uuid=e41650b8-3822-4a5d-9e73-cc9b1bf76eb5	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtrial.wustl.edu%2F%3Futm_source%3Dantidote01%26utm_medium%3Dantidote01%26utm_campaign%3Dantidote01	HTTP Parser: No <meta name="copyright".. found
Source: https://promotions.lpage.co/campaigns/1210163/form?viewport_type=embedded&isBuilder=false&uuid=e41650b8-3822-4a5d-9e73-cc9b1bf76eb5	HTTP Parser: No <meta name="copyright".. found

Compliance:

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.6:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.108:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.6:50199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.6:50198 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.27:443 -> 192.168.2.6:50202 version: TLS 1.2

Networking:

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49676
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.161.150
Source: unknown	TCP traffic detected without corresponding DNS query: 23.55.161.150
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfmX-Goog-Update-Updater: chromecrx-85.0.4183.121Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_lQaZfjVpwP_oGNqdtWCSpJT1EMqXdMiU84ekLLxQnc4.css HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css__tdKzbI3l_TSJW04qa_VswqtxnzfWuDuZMhdVGpYwZw.css HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_MnXiytJtb186Ydycnpwpw34cuUsHaKc80ey5LiQXhSY.css HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/css/css_A1TS9OCzQy41w0fP0kC30zDWlwxEOqow8e4BRAssOxA.css HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/all/themes/pv/bootstrap/assets/fonts/bootstrap/glyphicons-halflings-regular.woff2 HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveOrigin: https://www.coronavirustoday.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs.js HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/all/themes/pv/images/hero/ct-line-06-2021.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/all/themes/pv/images/logos/coronavirustoday.gif HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtepLk.js HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_d9zXiowa1Qnq3DxMpED97MIPdr7q-AmKKkCxwRN3tB0.js HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7yA.js HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/js/js_L50O_PWoAuMOxVjnzZCkNSSmI0kFwhZsO1_KS8WnGKw.js HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/all/themes/pv/images/search/search.png HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/london-1572444.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/veteran-1807121_0.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/great-wall-of-china-5483516.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/diabetes-528678_0.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/blood-5053760%20%281%29.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/channel-3547224%20%281%29.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/electrocardiogram-36732.png HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/szabolcs-toth-o76mItlyV6E-unsplash.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/hand-6195098.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/soccer-3339036.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/kids-1093758_0.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/smile-191626_0.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/covid-19-4985549%20%281%29.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/senior-4466290_0.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/al-abrar-mecca-15075.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/morocco-5271734.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/sigmund-TJxotQTUr8o-unsplash.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/san-diego-79567.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /analytics.js HTTP/1.1Host: www.google-analytics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/netherlands-5039356.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/woman-4617256.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/currency-4008635.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET /sites/default/files/styles/teaser_thumbnail/public/oxygen-502887.jpg HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coronavirustoday.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: has_js=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.coronavirustoday.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Found strings which match to known social media urls

Source: Reporting and NEL.1.dr	String found in binary or memory: coep_reporthttps://www.facebook.com/browser_reporting/?minimize=0 equals www.facebook.com (Facebook)
Source: Reporting and NEL.1.dr	String found in binary or memory: coep_reporthttps://www.facebook.com/browser_reporting/?minimize=0l equals www.facebook.com (Facebook)

URLs found in memory or binary data

Source: c6209570c6aa9b55_0.0.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: c6209570c6aa9b55_0.0.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: Current Session.0.dr, History-journal.0.dr	String found in binary or memory: http://www.coronavirustoday.com/
Source: History-journal.0.dr	String found in binary or memory: http://www.coronavirustoday.com/#J
Source: History-journal.0.dr	String found in binary or memory: http://www.coronavirustoday.com/$
Source: History Provider Cache.0.dr	String found in binary or memory: http://www.coronavirustoday.com/2
Source: History-journal.0.dr	String found in binary or memory: http://www.coronavirustoday.com/40
Source: History-journal.0.dr	String found in binary or memory: http://www.coronavirustoday.com/Coronavirus
Source: Favicons-journal.0.dr	String found in binary or memory: http://www.coronavirustoday.com/k
Source: Current Session.0.dr	String found in binary or memory: https://10644661.fls.doubleclick.net/activityi;dc_pre=CMeT3eutgfMCFc6RhQodltQJvA;src=10644661;type=p
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=5nk2z76%2BlWE5GpTTImBEc7wjbePWAoAcdJfUoq6NmOfNZZQ6NfcMm%2Fl
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=HgJsF0UnSpgcHhy%2Fbh2FS0RHJaa6JUzvoLOVHoQtILAnlJkqiojCZiuRD
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=JDBvD2DCdhlGMoo9BEUYAELw0Jxfy2iLQRPX%2FOveQi0kAmyPz6hNKEqKW
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=PQwFxvWs1DnzuWzbqQ0WZCbiholFAE8bSxRGjOHMbTP3SsTsOpUOoUO84jB
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=ju5108elxywigUhgEV2JHGOSwIiuB2rRapTdgbgcs0QIt4Jvo3atG9dGevM
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=plv6RQvRMpPgkoMCnZeEGp66CRVNtPmrszCicFq1sWNcfU5KVb97jxEa957
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=uhDI54HzkE60kGIaxhhVxPzvwGEjOfbn08GwtuS6rYAelKekQvUODoNtp0U
Source: manifest.json0.0.dr, 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://accounts.google.com
Source: 101cd1d57f66b3e9_0.0.dr	String found in binary or memory: https://adsense.com.
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://adservice.google.co.uk/
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://adservice.google.com/
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://ajax.googleapis.com/
Source: b5141f91cc148ac0_0.0.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
Source: ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://api.privy.com
Source: manifest.json0.0.dr, 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://apis.google.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://assets.privy.com/
Source: ba2aad524c89dc84_0.0.dr, ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/legacy_widget-61839b14edc301db24a6.chunk.js
Source: ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/legacy_widget-61839b14edc301db24a6.chunk.jsaD
Source: f452739bc320ba40_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/standalone-62855057100e0ab00ca8.js
Source: 044cf85e7c8d4e1b_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/standalone_preview-1bd46f19d128d3302483.js
Source: 9eeddaa15df6c5f8_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/vendors~legacy_widget-c36d5f0cb4c6b6697c4f.chunk.js
Source: 9eeddaa15df6c5f8_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/vendors~legacy_widget-c36d5f0cb4c6b6697c4f.chunk.jsaD
Source: 4abca0cf7a215449_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/vendors~legacy_widget~modern_widget-a7a0f469037917e80c94.chunk.js
Source: 4abca0cf7a215449_0.0.dr	String found in binary or memory: https://assets.privy.com/packs/js/vendors~legacy_widget~modern_widget-a7a0f469037917e80c94.chunk.jsa
Source: 101cd1d57f66b3e9_0.0.dr	String found in binary or memory: https://attestation.android.com
Source: 5460fd02b44d4b37_0.0.dr	String found in binary or memory: https://certify-js.alexametrics.com/atrk.js
Source: 5460fd02b44d4b37_0.0.dr	String found in binary or memory: https://certify-js.alexametrics.com/atrk.jsaD
Source: 5460fd02b44d4b37_0.0.dr	String found in binary or memory: https://certify.alexametrics.com/atrk.gif?
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json1.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: a2495576f425162f_0.0.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: d598b2bb78f6a5a8_0.0.dr	String found in binary or memory: https://connect.facebook.net/signals/config/329936594468386?v=2.9.45&r=stable
Source: 8c8aaff3064ef52d_0.0.dr	String found in binary or memory: https://connect.facebook.net/signals/plugins/identity.js?v=2.9.45
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: 8f0dbdc42c13d175_0.0.dr, b7849f89d1931334_0.0.dr	String found in binary or memory: https://coronavirustoday.com/
Source: e1e4aab06fe6d561_0.0.dr	String found in binary or memory: https://coronavirustoday.com/1
Source: 5460fd02b44d4b37_0.0.dr	String found in binary or memory: https://coronavirustoday.com/13s
Source: 05cee5a730b2a184_0.0.dr	String found in binary or memory: https://coronavirustoday.com/B
Source: a7142314bc3a5049_0.0.dr	String found in binary or memory: https://coronavirustoday.com/C
Source: b5141f91cc148ac0_0.0.dr	String found in binary or memory: https://coronavirustoday.com/D
Source: a490194e52c61dc7_0.0.dr	String found in binary or memory: https://coronavirustoday.com/I
Source: 65506a406859bf5e_0.0.dr	String found in binary or memory: https://coronavirustoday.com/Of
Source: 65506a406859bf5e_0.0.dr	String found in binary or memory: https://coronavirustoday.com/_
Source: a490194e52c61dc7_0.0.dr	String found in binary or memory: https://coronavirustoday.com/a#
Source: 899c6eb5c1ac8297_0.0.dr	String found in binary or memory: https://coronavirustoday.com/b
Source: b7849f89d1931334_0.0.dr	String found in binary or memory: https://coronavirustoday.com/el
Source: b7849f89d1931334_0.0.dr	String found in binary or memory: https://coronavirustoday.com/f7n
Source: 3eedeeff8417891c_0.0.dr	String found in binary or memory: https://coronavirustoday.com/r
Source: a490194e52c61dc7_0.0.dr	String found in binary or memory: https://coronavirustoday.com/t
Source: 3eedeeff8417891c_0.0.dr	String found in binary or memory: https://coronavirustoday.com/v
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-aclX
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/adspam-signals-scs
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/botguard-scs
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
Source: Reporting and NEL-journal.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushersk
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/recaptcha
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/recaptchav
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/static-on-bigtable
Source: 50003354-c63b-4e27-9f94-9ccb395dc681.tmp.1.dr, af3e4b31-6c75-4288-842a-ff58ccc66a61.tmp.1.dr, 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://dns.google
Source: ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://docs.privy.com/common-installation-issues/
Source: c90a44fac67647d9_0.0.dr, cb8130d017e9855a_0.0.dr, d6958924975f9124_0.0.dr	String found in binary or memory: https://doubleclick.net/
Source: 6e03d236aaf7bd9b_0.0.dr	String found in binary or memory: https://doubleclick.net/=m
Source: ba66e6e9b09ed93f_0.0.dr	String found in binary or memory: https://doubleclick.net/E
Source: 944c1bd94b5e6d1b_0.0.dr	String found in binary or memory: https://doubleclick.net/X
Source: fed407b52556dc9b_0.0.dr	String found in binary or memory: https://doubleclick.net/dD
Source: 6f04bee6d5e8e0b5_0.0.dr	String found in binary or memory: https://doubleclick.net/pO
Source: ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://events.privy.com
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://fonts.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net(
Source: 000003.log0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: c90a44fac67647d9_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-C3gOlbkiIndQKAiSWWIpHjPl0jowamfozlJ0rVDjRvvFg
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&adk=181227
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=182&slot
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=436&slot
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9988449257020106&output=html&h=90&slotn
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/si
Source: 101cd1d57f66b3e9_0.0.dr, e707552048cbf911_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210908/r20110914/zrt_lookup.html?fsb=1
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210908/r20110914/zrt_lookup.html?fsb=1#RS-0-&adk=
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/r20210908/r20190131/zrt_lookup.html
Source: 78b865918d2bd944_0.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/734499234/?random=1631754321139&cv=
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.net/xbbe/pixel?d=CKv65gIQiP--vQIYif6vnwEwAQ&v=APEucNXYlQKTveHqQF6k_r
Source: Current Session.0.dr	String found in binary or memory: https://googleads.g.doubleclick.neth
Source: c5b4e72f70bc46db_0.0.dr	String found in binary or memory: https://googlesyndication.com/E
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://help.privy.com/hc/en-us/articles/360007945254-Common-Installation-Issues
Source: Current Session.0.dr	String found in binary or memory: https://insight.adsrvr.org/track/up?adv=rxqh3wy&ref=https%3A%2F%2Fwww.pixel.labcorp.com%2Fcovid-19&u
Source: d05d970401d1dfc1_0.0.dr	String found in binary or memory: https://js.adsrvr.org/up_loader.1.1.3.js
Source: 1988619e2fc36183_0.0.dr, 89b935f47d9c8168_0.0.dr, 63a675ce30182ea6_0.0.dr, 4941826d379c4f37_0.0.dr, 97003db3a7ae6aaa_0.0.dr, 5397e9d08a14acd0_0.0.dr, 47ff64b65a58db2d_0.0.dr, 78b865918d2bd944_0.0.dr	String found in binary or memory: https://labcorp.com/
Source: e607f103c4de25d8_0.0.dr	String found in binary or memory: https://labcorp.com/(F
Source: 7d4cb89b4249b389_0.0.dr	String found in binary or memory: https://labcorp.com/6
Source: 3376f217b14ce5b2_0.0.dr	String found in binary or memory: https://labcorp.com/8
Source: 5409203713d0a0a6_0.0.dr	String found in binary or memory: https://labcorp.com/8~
Source: 1cb85b9c01dd42e0_0.0.dr	String found in binary or memory: https://labcorp.com/E
Source: 65f19831de665bf4_0.0.dr	String found in binary or memory: https://labcorp.com/P76
Source: 8ee70fa75d7c770a_0.0.dr	String found in binary or memory: https://labcorp.com/T
Source: 6074e81b1cfaf6f2_0.0.dr	String found in binary or memory: https://labcorp.com/W
Source: 9aad4525737e97d5_0.0.dr	String found in binary or memory: https://labcorp.com/b86
Source: 55b8bbf93bcc2219_0.0.dr	String found in binary or memory: https://labcorp.com/i
Source: d2162dcc231ad8a2_0.0.dr	String found in binary or memory: https://labcorp.com/pw
Source: 4941826d379c4f37_0.0.dr	String found in binary or memory: https://login-ds.dotomi.com/profile/visit/final/js?data_object_type_code=0&canonical_url=https%3A%2F
Source: 05d3640d5a2394cf_0.0.dr	String found in binary or memory: https://login.dotomi.com/profile/visit/js/1_0?dtm_cid=81149&dtm_cmagic=2f9cd3&dtm_fid=3391
Source: 044cf85e7c8d4e1b_0.0.dr	String found in binary or memory: https://lpage.co/
Source: f452739bc320ba40_0.0.dr	String found in binary or memory: https://lpage.co/(
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: c6209570c6aa9b55_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: c5b4e72f70bc46db_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/SRvJn55X6RWbfV9KOXYL310U_n7bQjLBtP3JEbFBTGg.js
Source: c5b4e72f70bc46db_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/SRvJn55X6RWbfV9KOXYL310U_n7bQjLBtP3JEbFBTGg.jsaD
Source: 6db55bee3c2f4a0b_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=eos
Source: 6db55bee3c2f4a0b_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: 101cd1d57f66b3e9_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: b7849f89d1931334_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: 101cd1d57f66b3e9_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.jsaD
Source: 101cd1d57f66b3e9_0.0.dr, 194e1044ed200cd9_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: 101cd1d57f66b3e9_0.0.dr, e707552048cbf911_0.0.dr, 194e1044ed200cd9_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: 747363b3c97f56a0_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/r20210913/r20110914/abg_lite.js
Source: 944c1bd94b5e6d1b_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/r20210913/r20110914/elements/html/omrhp.js
Source: 101cd1d57f66b3e9_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/
Source: c6209570c6aa9b55_0.0.dr, 3d346b6309835f5c_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202109130101/reactive_library_fy201
Source: a490194e52c61dc7_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202109130101/show_ads_impl_with_ama
Source: 101cd1d57f66b3e9_0.0.dr, e707552048cbf911_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: Current Session.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9jbXMucXVhbnRzZXJ2Z
Source: Current Session.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9pZC5ybGNkbi5jb20vN
Source: Current Session.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9waXhlbC5ldmVyZXN0d
Source: manifest.json1.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: ddf4f742d489b9b7_0.0.dr	String found in binary or memory: https://privymktg.com/collect?v=1&cid=
Source: 000003.log3.0.dr	String found in binary or memory: https://promotions.lpage.co
Source: Current Session.0.dr	String found in binary or memory: https://promotions.lpage.co/campaigns/1210163/form?viewport_type=embedded&isBuilder=false&uuid=e4165
Source: manifest.json1.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 899c6eb5c1ac8297_0.0.dr	String found in binary or memory: https://sb.scorecardresearch.com/beacon.js
Source: 899c6eb5c1ac8297_0.0.dr	String found in binary or memory: https://sb.scorecardresearch.com/beacon.jsaD
Source: Network Action Predictor.0.dr	String found in binary or memory: https://sites.wustl.edu/
Source: 780a30c3e73f5188_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/js/password-strength-meter.min.js?ver=5.7.3
Source: 776642f238d320ae_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-admin/js/user-profile.min.js?ver=5.7.3
Source: 327af13ba0dddced_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/hooks.min.js?ver=d0188aa6c336f8bb426fe531
Source: cf7e24a128b91848_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/i18n.min.js?ver=6ae7d829c963a7d8856558f3f
Source: 8033a5ac07895194_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4
Source: fcdb6fdb53a072f0_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: e8ae1493f889028b_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
Source: eb44ec06bc442120_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/underscore.min.js?ver=1.8.3
Source: 4690363080d209bf_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/wp-util.min.js?ver=5.7.3
Source: 5c60981e3656a73e_0.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-includes/js/zxcvbn.min.js
Source: Current Session.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-login.php
Source: Current Session.0.dr, History-journal.0.dr	String found in binary or memory: https://sites.wustl.edu/stopcovidtrial/wp-login.php?privacy=3&redirect_to=https%3A%2F%2Fstopcovidtri
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 1cb85b9c01dd42e0_0.0.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://static.zdassets.com/
Source: 5e44e3c88e13b993_0.0.dr	String found in binary or memory: https://static.zdassets.com/ekr/snippet.js?key=45d95447-7377-48c0-b3b6-4c14562cd5f8
Source: 65f19831de665bf4_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-2765-b06562d67a25c346a78a.js
Source: 9aad4525737e97d5_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-7487-813b8c77d5c0e8d0d00a.js
Source: 68b13c6e7232814f_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-chat-sdk-ad0bca0cd862985f164f.js
Source: 728fc3d39153dc9c_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-framework-27d01079afd001b6474c.js
Source: 8ee70fa75d7c770a_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-lazy/web_widget-9605c77040ad41ae6816.js
Source: 5b95d3463b83a398_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-locales/en-us-json-298206292e8e0f9f32ff.js
Source: b4186e5bd32fbc58_0.0.dr	String found in binary or memory: https://static.zdassets.com/web_widget/latest/web-widget-preload-f09065a68371300a8bb3.js
Source: Current Session.0.dr, History-journal.0.dr	String found in binary or memory: https://stopcovidtrial.wustl.edu/?utm_source=antidote01&utm_medium=antidote01&utm_campaign=antidote0
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com(
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/
Source: 6f04bee6d5e8e0b5_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/abg_lite_fy2019.js
Source: timesbi.ttf.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/abg_lite_fy2019.jsaD
Source: cb8130d017e9855a_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/client/load_preloaded_resource_fy201
Source: 69af22da44eb6685_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/client/qs_click_protection_fy2019.js
Source: 6a90c0775898d74b_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/client/window_focus_fy2019.js
Source: 6a90c0775898d74b_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/client/window_focus_fy2019.jsaD
Source: fed407b52556dc9b_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210909/r20110914/elements/html/interstitial_ad_frame_
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/Enqz_20U.html
Source: adba8338fc9be233_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/UFYwWwmt.js
Source: 65506a406859bf5e_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2.js
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/224/runner.html
Source: e1e4aab06fe6d561_0.0.dr	String found in binary or memory: https://widget.privy.com/assets/widget.js
Source: 8033a5ac07895194_0.0.dr, e8ae1493f889028b_0.0.dr	String found in binary or memory: https://wustl.edu/
Source: 776642f238d320ae_0.0.dr	String found in binary or memory: https://wustl.edu/$
Source: cf7e24a128b91848_0.0.dr	String found in binary or memory: https://wustl.edu/9G
Source: eb44ec06bc442120_0.0.dr	String found in binary or memory: https://wustl.edu/=U
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/
Source: Favicons-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/$
Source: History Provider Cache.0.dr	String found in binary or memory: https://www.coronavirustoday.com/2
Source: History-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/Coronavirus
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines%COVID-19
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines-children
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines-children2COVID-19
Source: Favicons.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines-children6
Source: History-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines-childrenCOVID-19
Source: Favicons-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccines/
Source: History-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/covid-19-vaccinesCOVID-19
Source: Favicons-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/favicon.ico
Source: Current Session.0.dr, Favicons-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/newsletter
Source: History-journal.0.dr	String found in binary or memory: https://www.coronavirustoday.com/newsletterNewsletter
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/newsletterT
Source: Current Session.0.dr, Favicons.0.dr, History.0.dr	String found in binary or memory: https://www.coronavirustoday.com/pregnant-breastfeeding-women-and-covid-19-vaccines
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.com/pregnant-breastfeeding-women-and-covid-19-vaccinesHPregnant
Source: History.0.dr	String found in binary or memory: https://www.coronavirustoday.com/pregnant-breastfeeding-women-and-covid-19-vaccinesPregnant
Source: a7142314bc3a5049_0.0.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_-gZIjmbs1Tu5c9mGeBKS8WC3jG4E0jSDwO9QOdbLU
Source: 3e8d9ae83ab12517_0.0.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_L50O_PWoAuMOxVjnzZCkNSSmI0kFwhZsO1_KS8WnG
Source: 05cee5a730b2a184_0.0.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_d9zXiowa1Qnq3DxMpED97MIPdr7q-AmKKkCxwRN3t
Source: 8f0dbdc42c13d175_0.0.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSD
Source: 2673651a4c1ff6fe_0.0.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_rsGiM5M1ffe6EhN-RnhM5f3pDyJ8ZAPFJNKpfjtep
Source: 1e48755f4b38e7e9_0.0.dr	String found in binary or memory: https://www.coronavirustoday.com/sites/default/files/js/js_ySIAUWXaZJmsYy4C0ej8lngErLtzwkWLG9eweqzi7
Source: Current Session.0.dr	String found in binary or memory: https://www.coronavirustoday.comh
Source: 97003db3a7ae6aaa_0.0.dr, 3eedeeff8417891c_0.0.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: manifest.json0.0.dr, 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://www.google.com
Source: 000003.log0.0.dr	String found in binary or memory: https://www.google.com/
Source: 101cd1d57f66b3e9_0.0.dr, e707552048cbf911_0.0.dr	String found in binary or memory: https://www.google.com/adsense
Source: Current Session.0.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: 515aa88f25355738_0.0.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion_async.js
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json1.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 89b935f47d9c8168_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-T2BPT9F
Source: 8fb4f5ea9aa9e653_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/osd.js
Source: d6958924975f9124_0.0.dr, 6db55bee3c2f4a0b_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
Source: 6db55bee3c2f4a0b_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914aD
Source: 784a299b-c007-41f5-b5a7-2b1c2ab046f5.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://www.gstatic.com/
Source: 6e03d236aaf7bd9b_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/600b8e875d33218fb87cf50aa0ace28d.js?tag=exit_2019
Source: 1d970e58a4e0694a_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/657081d252e7e20d644f411c068fca8c.js?tag=text/vanilla_cta_animation_t
Source: 802137dd99aa0427_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/8b8c639f95e935c054a6465040a495ee.js?tag=mysidia_one_click_handler_on
Source: 36f7abf3e0500e5b_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/e97fc1f500c2ba07d7ae78e11e245b27.js?tag=client_fast_user_2019
Source: 36f7abf3e0500e5b_0.0.dr	String found in binary or memory: https://www.gstatic.com/mysidia/e97fc1f500c2ba07d7ae78e11e245b27.js?tag=client_fast_user_2019aD
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;
Source: 000003.log3.0.dr, Current Session.0.dr	String found in binary or memory: https://www.pixel.labcorp.com
Source: Current Session.0.dr	String found in binary or memory: https://www.pixel.labcorp.com%
Source: Network Action Predictor-journal.0.dr, 000003.log0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/
Source: 9d7ad8955eb321c1_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Source: Current Session.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/covid-19
Source: History-journal.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/covid-19COVID-19
Source: Current Session.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/covid-19K
Source: f078cd865a03a08f_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/misc/drupal.js?qyjtsq
Source: 6ee1100933c00413_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/misc/jquery-extend-3.4.0.js?v=1.10.2
Source: e607f103c4de25d8_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/misc/jquery-html-prefilter-3.5.0-backport.js?v=1.10.2
Source: 94cc8cedfcd90d0d_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/misc/jquery.once.js?v=1.2
Source: 4350a56a6346c003_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/misc/progress.js?v=7.82
Source: 3376f217b14ce5b2_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/libraries/browser-update/scripts/update.js
Source: a7e0c843f982b98d_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/libraries/lazysizes/lazysizes.min.js?qyjtsq
Source: 1a0f05304eab7f99_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/libraries/swiper/swiper-bundle.min.js?qyjtsq
Source: 55b8bbf93bcc2219_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/libraries/xss/dist/xss.min.js?qyjtsq
Source: d2162dcc231ad8a2_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/bu/bu.js?qyjtsq
Source: 7d4cb89b4249b389_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/dialog/js/dialog/dialog.ajax.js?v=7.82
Source: 63a675ce30182ea6_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/dialog/js/dialog/dialog.js?v=7.82
Source: d88500b9aace26ec_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/dialog/js/dialog/dialog.position.js?v=7.82
Source: 2645192d8358ee42_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/dialog/js/drupal/debounce.js?v=7.82
Source: 30b87ee68241f0d7_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/dialog/js/drupal/displace.js?v=7.82
Source: 2635b62bd18f935b_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/dialog/misc/ajax.js?v=7.82
Source: ea1649c39fd652f6_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/google_analytics/googleanalytics.js?qyjtsq
Source: 1988619e2fc36183_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/jquery_update/replace/jquery/1.10/jquery.min
Source: d74c93e25027c583_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/jquery_update/replace/ui/external/jquery.coo
Source: 6074e81b1cfaf6f2_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/contrib/jquery_update/replace/ui/ui/minified/jquery.
Source: 8bd13c847d45e40f_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/custom/labcorp_core/js/labcorp_head_banner.js?qyjtsq
Source: 1f00d7f63f71d7c7_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/modules/custom/labcorp_core/js/labcorp_main.js?qyjtsq
Source: 2401c89262484943_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/all/themes/custom/omega_labcorp/external/modal-video/js/jquery-m
Source: Favicons.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/default/files/favicons/favicon.ico
Source: Favicons.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/default/files/favicons/favicon.ico0
Source: 7b716792dab9e1d7_0.0.dr	String found in binary or memory: https://www.pixel.labcorp.com/sites/default/files/googleanalytics/analytics.js?qyjtsq
Source: Current Session.0.dr	String found in binary or memory: https://www.pixel.labcorp.comh

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.3:443 -> 192.168.2.6:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.21.108:443 -> 192.168.2.6:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.6:50199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.6:50198 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.27:443 -> 192.168.2.6:50202 version: TLS 1.2

System Summary:

Creates temporary files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\5aef5ea1-3595-4b5b-8133-266cf5908d17.tmp

Jump to behavior

Classification label

Source: classification engine

Classification label: mal48.win@46/379@159/47

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'http://www.coronavirustoday.com'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1656,9859597374303630469,17695644049680078373,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1748 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1656,9859597374303630469,17695644049680078373,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1748 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-6142982C-17B4.pma

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior