Analysis Report https://forms.gle/xVwcTZCDwTpTPfeZ8

Phishing:

Found iframes

Source: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms	HTTP Parser: Iframe src: //2542116.fls.doubleclick.net/activityi;src=2542116;type=gdrive;cat=googl004;ord=6561658516421.491?
Source: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms	HTTP Parser: Iframe src: //2542116.fls.doubleclick.net/activityi;src=2542116;type=gdrive;cat=googl004;ord=6561658516421.491?

META author tag missing

Source: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms	HTTP Parser: No <meta name="author".. found
Source: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms	HTTP Parser: No <meta name="copyright".. found
Source: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 151.101.1.195:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.195:443 -> 192.168.2.3:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.154:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.154:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.156:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.156:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.148:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.148:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.66:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.66:443 -> 192.168.2.3:49776 version: TLS 1.2

Networking:

Found strings which match to known social media urls

Source: 48l-xdS4pXg[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=48l-xdS4pXg"> equals www.youtube.com (Youtube)
Source: YlmVKT3Zvhw[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=YlmVKT3Zvhw"> equals www.youtube.com (Youtube)
Source: ZdEIZNg3epQ[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ZdEIZNg3epQ"> equals www.youtube.com (Youtube)
Source: ggoJFaE71W8[1].htm.2.dr	String found in binary or memory: <link rel="canonical" href="https://www.youtube.com/watch?v=ggoJFaE71W8"> equals www.youtube.com (Youtube)
Source: iframe_api[1].js.2.dr	String found in binary or memory: if(!window["YT"])var YT={loading:0,loaded:0};if(!window["YTConfig"])var YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: like an email address to receive updates about our services.</p><p>We also collect the content you create, upload, or receive from others when using our services. This includes things like email you write and receive, photos and videos you save, docs and spreadsheets you create, and comments you make on YouTube videos.</p><h2>Information we collect as you use our services</h2><h3>Your apps, browsers & devices</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg"/></div><p>We collect information about the apps, browsers, and <a class="g1mG8c" href="privacy#footnote-devices" data-name="devices" jsaction="click:IPbaae(preventDefault=true)">devices</a> you use to access Google services, which helps us provide features like automatic product updates and dimming your screen if your battery runs low.</p><p>The information we collect includes <a class="g1mG8c" href="privacy#footnote-unique-id" data-name="unique-id" jsaction="click:IPbaae(preventDefault=true)">unique identifiers</a>, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your apps, browsers, and devices with our services, including <a class="g1mG8c" href="privacy#footnote-ip" data-name="ip" jsaction="click:IPbaae(preventDefault=true)">IP address</a>, crash reports, system activity, and the date, time, and <a class="g1mG8c" href="privacy#footnote-referrer-url" data-name="referrer-url" jsaction="click:IPbaae(preventDefault=true)">referrer URL</a> of your request.</p><p>We collect this information when a Google service on your device contacts our servers equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: "http":"https";this.S=xw((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)||"")||xw(this.jd)||this.protocol+"://www.youtube.com/";l=b?b.eventLabel:a.el;h="detailpage";"adunit"===l?h=this.B?"embedded":"detailpage":"embedded"===l||this.C?h=mD(h,l,wha):l&&(h="embedded");this.fa=h;Ap();l=null;h=b?b.playerStyle:a.ps;var m=g.jb(sD,h);!h||m&&!this.C||(l=h);this.playerStyle=l;this.K=(this.J=g.jb(sD,this.playerStyle))&&"area120-boutique"!==this.playerStyle&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: $ga=function(a,b){if(!a.u["0"]){var c=new Px("0","fakesb",void 0,new Kx(0,0,0,void 0,void 0,"auto"),null,null,1);a.u["0"]=b?new Zx(new Ew("http://www.youtube.com/videoplayback"),c,"fake"):new by(new Ew("http://www.youtube.com/videoplayback"),c,new Lu(0,0),new Lu(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: (g.Rm(b,"www.youtube.com"),c=b.toString()):c=Cw(c);b=new Ew(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: so[1].htm.2.dr	String found in binary or memory: ,[36,"YouTube","0 -2829px","https://www.youtube.com/?gl\u003dGB","_blank",false,null,""] equals www.youtube.com (Youtube)
Source: www-widgetapi[1].js.2.dr	String found in binary or memory: ;var zh=new Set,Ah=0,Bh=0,Ch=["PhantomJS","Googlebot","TO STOP THIS SECURITY SCAN go/scan"];function Y(a,b,c){this.o=this.h=this.i=null;this.m=Ca(this);this.j=0;this.u=!1;this.s=[];this.l=null;this.F=c;this.H={};c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"==a.tagName.toLowerCase(),b.host||(b.host=c?Pb(a.src):"https://www.youtube.com"),this.i=new bf(b),c||(b=Dh(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.h=a,this.h.id||(this.h.id="widget"+Ca(this.h)),We[this.h.id]=this,window.postMessage){this.l=new O;Eh(this);b=Q(this.i,"events");for(var d in b)b.hasOwnProperty(d)&& equals www.youtube.com (Youtube)
Source: 48l-xdS4pXg[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=48l-xdS4pXg" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: YlmVKT3Zvhw[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=YlmVKT3Zvhw" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: ZdEIZNg3epQ[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=ZdEIZNg3epQ" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: ggoJFaE71W8[1].htm.2.dr	String found in binary or memory: <noscript><div class="player-unavailable"><h1 class="message">An error occurred.</h1><div class="submessage"><a href="https://www.youtube.com/watch?v=ggoJFaE71W8" target="_blank">Try watching this video on www.youtube.com</a>, or enable JavaScript if it is disabled in your browser.</div></div></noscript></body></html> equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: Jia(this.videoData),this.V("highrepfallback");else if(a.u){var d=this.Aa?this.Aa.B.F:null;if(xxa(a)&&d&&d.isLocked())var e="FORMAT_UNAVAILABLE";else if(!this.Ra.J&&"auth"===a.errorCode&&"429"===a.details.rc){e="TOO_MANY_REQUESTS";var f="6"}this.V("playererror",a.errorCode,e,g.JB(a.details),f)}else d=/^pp/.test(this.videoData.clientPlaybackNonce),AZ(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(d="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+ equals www.youtube.com (Youtube)
Source: 408K5RM8.js.2.dr	String found in binary or memory: _.T2=function(a,b){a=a||{};a=a.id;var c=b.Vc,d=b.bF;b=_.G;_.ix(a)&&!d?(d='<div class="'+_.N("M3GAob")+'"><div class="'+_.N("O3bgpc")+'">',a=(0,_.Rda)("https://www.youtube.com/embed/"+_.tx(a)+"?rel=0&showinfo=0&theme=light&version=3&hl="+_.tx(c)+"&cc_lang_pref="+_.tx(c)+"&cc_load_policy=1&enablejsapi=1"),a=(0,_.G)('<iframe src="'+_.N(a)+'" allowfullscreen="allowfullscreen" class="'+(_.N("Ylcf5b")+'"></iframe>')),a=d+a+"</div></div>"):a="";return b(a)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: b),this.P=!1,this.videoData.aa("html5_playready_enable_non_persist_license")&&(this.D.pst="0"));b=JC(this.B)?Awa(c.initData).replace("skd://","https://"):this.B.C;this.videoData.aa("enable_shadow_yttv_channels")&&(b=new g.Pm(b),document.location.origin&&document.location.origin.includes("green")?g.Rm(b,"web-green-qa.youtube.com"):g.Rm(b,"www.youtube.com"),b=b.toString());this.baseUrl=b;this.fairplayKeyId=Md(this.baseUrl,"ek")||"";if(b=Md(this.baseUrl,"cpi")||"")this.cryptoPeriodIndex=Number(b);this.fa= equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: d like saved in your account. For example, you can turn on Location History if you want traffic predictions for your daily commute, or you can save your YouTube Watch History to get better video suggestions.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/activitycontrols?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-activitycontrols">Go to Activity Controls</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Ad settings</h3><p class="n8ZyWe">Manage your preferences about the ads shown to you on Google and on sites and apps that <a class="g1mG8c" href="privacy#footnote-partner" data-name="partner" jsaction="click:IPbaae(preventDefault=true)">partner with Google</a> to show ads. You can modify your interests, choose whether your personal information is used to make ads more relevant to you, and turn on or off certain advertising services.</p><p class="n8ZyWe"><a href="https://adssettings.google.com/?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-adssettings">Go to Ad Settings</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">About you</h3><p class="n8ZyWe">Control what others see about you across Google services.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/profile?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-aboutme">Go to About You</a></p></div></div><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">Shared endorsements</h3><p class="n8ZyWe">Choose whether your name and photo appear next to your activity, like reviews and recommendations, that appear in ads.</p><p class="n8ZyWe"><a href="https://myaccount.google.com/shared-endorsements?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-sharedendorsements">Go to Shared Endorsements</a></p></div></div><h3>Ways to review & update your information</h3><div class="h0yEnd WTetv adRtod"><div class="IN2z4b"><img class="mZPFM uTLSAb" alt="" src="https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg"/></div><div class="gwGFXb"><h3 class="SWFQ9e">My Activity</h3><p class="n8ZyWe">My Activity allows you to review and control data that equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.RD=function(a){a=ID(a.S);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.hE=function(a){var b=g.SD(a);!a.aa("yt_embeds_disable_new_error_lozenge_url")&&yha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.clone=function(){var a=new Vm;a.C=this.C;this.u&&(a.u=this.u.clone(),a.B=this.B);return a};var bn="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),xda=/\bocr\b/;var yda=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;en.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.B[a]!=b&&(this.B[a]=b,this.u=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.SD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.MD(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,$q&&(a=Up())&&(b.ebc=a));return g.Id(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: g.pU.prototype.C=function(a){var b=this;Xsa(this);var c=a.Tx,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c||d.J?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.Dc(sU(this,"TOO_MANY_REQUESTS_WITH_LINK",d.Tk(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c||d.J?this.Dc(g.qU(a.errorMessage)):this.Dc(sU(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c= equals www.youtube.com (Youtube)
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1&enablejsapi=1 equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: lM.prototype.replace=function(a,b){for(var c=g.q(a),d=c.next();!d.done;d=c.next())delete this.u[d.value.encryptedTokenJarContents];kM(this,b)};nM.prototype.B=function(a){var b,c,d=null===(b=a.responseContext)||void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.u=void 0,"TVHTML5"===(null===(c=a.responseContext)||void 0===c?void 0:c.clientName)?(this.localStorage=mM(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.yq("YT_CL",JSON.stringify({f5:d}),15552E3,void 0,!0))};var qM={bluetooth:"CONN_DISCO",cellular:"CONN_CELLULAR_UNKNOWN",ethernet:"CONN_WIFI",none:"CONN_NONE",wifi:"CONN_WIFI",wimax:"CONN_CELLULAR_4G",other:"CONN_UNKNOWN",unknown:"CONN_UNKNOWN","slow-2g":"CONN_CELLULAR_2G","2g":"CONN_CELLULAR_2G","3g":"CONN_CELLULAR_3G","4g":"CONN_CELLULAR_4G"};var tM;g.u(sM,Lq);sM.prototype.u=function(a,b){return Object.assign(Object.assign({},Lq.prototype.u.call(this,a,b)),this.B)};var Ula=/[&\?]action_proxy=1/,Tla=/[&\?]token=([\w-]*)/,Vla=/[&\?]video_id=([\w-]*)/,Wla=/[&\?]index=([\d-]*)/,Xla=/[&\?]m_pos_ms=([\d-]*)/,Yla=/[&\?]vvt=([\w-]*)/,Zla=/[&\?]mt=([\d-]*)/,Qla="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),FM="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "), equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: ll keep a record of your request in order to help solve any issues you might be facing.</p><h3>Protect Google, our users, and the public</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg"/></div><p>We use information to help improve the <a class="g1mG8c" href="privacy#footnote-safety-reliability" data-name="safety-reliability" jsaction="click:IPbaae(preventDefault=true)">safety and reliability</a> of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Google, our users, or the public.</p><hr/><p>We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with things like customized search results, personalized ads, or other features tailored to how you use our services. And we analyze your content to help us <a class="g1mG8c" href="privacy#footnote-detect-abuse" data-name="detect-abuse" jsaction="click:IPbaae(preventDefault=true)">detect abuse</a> such as spam, malware, and illegal content. We also use <a class="g1mG8c" href="privacy#footnote-algorithm" data-name="algorithm" jsaction="click:IPbaae(preventDefault=true)">algorithms</a> to recognize patterns in data. For example, Google Translate helps people communicate across languages by detecting common language patterns in phrases you ask it to translate.</p><p>We may <a class="g1mG8c" href="privacy#footnote-combine-info" data-name="combine-info" jsaction="click:IPbaae(preventDefault=true)">combine the information we collect</a> among our services and across your devices for the purposes described above. For example, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, <a class="g1mG8c" href="privacy#footnote-other-sites" data-name="other-sites" jsaction="click:IPbaae(preventDefault=true)">your activity on other sites and apps</a> may be associated with your personal information in order to improve Google equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: ll provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).</p></div></div><div class="m9JGT xXnO1d"><div class="nrAB0c"><div id="products" class="ahbJ5"></div><h1>Related privacy practices</h1><h2>Specific Google services</h2><p>The following privacy notices provide additional information about some Google services:</p><ul><li><a href="https://www.google.com/chrome/intl/en/privacy.html" class="N6CPUe" target="_blank">Chrome & the Chrome Operating System</a></li><li><a href="https://payments.google.com/legaldocument?family=0.privacynotice&hl=en" class="N6CPUe" target="_blank">Payments</a></li><li><a href="https://fiber.google.com/legal/privacy.html" class="N6CPUe" target="_blank">Fiber</a></li><li><a href="https://fi.google.com/about/tos/#project-fi-privacy-notice" class="N6CPUe" target="_blank">Google Fi</a></li><li><a href="https://www.google.com/work/apps/terms/education_privacy.html" class="N6CPUe" target="_blank">G Suite for Education</a></li><li><a href="https://readalong.google/intl/en_GB/privacy" class="N6CPUe" target="_blank">Read Along</a></li><li><a href="https://kids.youtube.com/privacynotice" class="N6CPUe" target="_blank">YouTube Kids</a></li><li><a href="https://families.google.com/familylink/privacy/child-policy/" class="N6CPUe" target="_blank">Google Accounts Managed with Family Link, for Children under 13 (or applicable age in your country)</a></li><li><a href="https://assistant.google.com/privacy-notice-childrens-features/" class="N6CPUe" target="_blank">Voice and Audio Collection from Children equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: re signed in to a Google Account, including:</p><ul><li>Browser settings: For example, you can configure your browser to indicate when Google has set a <a class="g1mG8c" href="privacy#footnote-cookies" data-name="cookies" jsaction="click:IPbaae(preventDefault=true)">cookie</a> in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. But remember that our services <a class="g1mG8c" href="privacy#footnote-rely-on-cookies" data-name="rely-on-cookies" jsaction="click:IPbaae(preventDefault=true)">rely on cookies to function properly</a>, for things like remembering your language preferences.</li><li>Device-level settings: Your device may have controls that determine what information we collect. For example, you can <a href="https://support.google.com/websearch?p=privpol_locserp" class="N6CPUe" target="_blank">modify location settings</a> on your Android device.</li></ul></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infosharing" class="ahbJ5"></div><div class="pjyxF m2dIJf"><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg"/></div><h1>Sharing your information</h1><h2>When you share your information</h2><p>Many of our services let you share information with other people, and you have control over how you share. For example, you can share videos on YouTube publicly or you can decide to keep your videos private. Remember, when you share information publicly, your content may become accessible through search engines, including Google Search.</p><p>When you equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: re signed out, you can manage information associated with your browser or device, including:</p><ul><li>Signed-out search personalization: <a href="https://www.google.com/history/optout?utm_source=pp" class="N6CPUe" target="_blank">Choose</a> whether your search activity is used to offer you more relevant results and recommendations.</li><li>YouTube settings: Pause and delete your <a href="https://www.youtube.com/feed/history/search_history?utm_source=pp" class="N6CPUe" target="_blank">YouTube Search History</a> and your <a href="https://www.youtube.com/feed/history?utm_source=pp" class="N6CPUe" target="_blank">YouTube Watch History</a>.</li><li>Ad Settings: <a href="https://adssettings.google.com/?utm_source=pp" class="N6CPUe" target="_blank">Manage</a> your preferences about the ads shown to you on Google and on sites and apps that partner with Google to show ads.</li></ul><h2>Exporting, removing & deleting your information</h2><p>You can export a copy of content in your Google Account if you want to back it up or use it with a service outside of Google.</p><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM " alt="" src="https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg"/></div><div class="gwGFXb"><p class="n8ZyWe"><a href="https://takeout.google.com/?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-takeout">Export your data</a></p></div></div><p>You can also <a href="https://support.google.com/legal?p=privpol_remove" class="N6CPUe" target="_blank">request to remove content</a> from specific Google services based on applicable law.</p><p>To delete your information, you can:</p><ul><li>Delete your content from <a class="g1mG8c" href="privacy#footnote-delete-specific" data-name="delete-specific" jsaction="click:IPbaae(preventDefault=true)">specific Google services</a></li><li>Search for and then delete specific items from your account using <a href="https://myactivity.google.com/?utm_source=pp" class="N6CPUe" target="_blank">My Activity</a></li><li><a href="https://myaccount.google.com/deleteservices?utm_source=pp" class="N6CPUe" target="_blank">Delete specific Google products</a>, including your information associated with those products</li><li><a href="https://myaccount.google.com/deleteaccount?utm_source=pp" class="N6CPUe" target="_blank">Delete your entire Google Account</a></li></ul><div class="h0yEnd"><div class="IN2z4b"><img class="mZPFM " alt="" src="https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg"/></div><div class="gwGFXb"><p class="n8ZyWe"><a href="https://myaccount.google.com/delete-services-or-account?utm_source=pp" class="ky8S2" data-track-as="pgc-pp-delete">Delete your information</a></p></div></div><p>And finally, <a href="https://myaccount.google.com/inactive?utm_source=pp" class="N6CPUe" target="_blank">Inactive Account Manager</a> allows you to give someone else access to parts of your Google Account in case you equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: re using an <a class="g1mG8c" href="privacy#footnote-android-device" data-name="android-device" jsaction="click:IPbaae(preventDefault=true)">Android device with Google apps</a>, your device periodically contacts Google servers to provide information about your device and connection to our services. This information includes things like your device type, carrier name, crash reports, and which apps you've installed.</p><h3>Your activity</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg"/></div><p>We collect information about your activity in our services, which we use to do things like recommend a YouTube video you might like. The activity information we collect may include:</p><ul><li>Terms you search for</li><li>Videos you watch</li><li><a class="g1mG8c" href="privacy#footnote-content-views" data-name="content-views" jsaction="click:IPbaae(preventDefault=true)">Views and interactions with content and ads</a></li><li>Voice and audio information when you use audio features</li><li>Purchase activity</li><li>People with whom you communicate or share content</li><li>Activity on third-party sites and apps that use our services</li><li>Chrome browsing history you equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: s Search engine may index that article and display it to other people if they search for your name. We may also collect information about you from trusted partners, including marketing partners who provide us with information about potential customers of our business services, and security partners who provide us with information to <a class="g1mG8c" href="privacy#footnote-against-abuse" data-name="against-abuse" jsaction="click:IPbaae(preventDefault=true)">protect against abuse</a>. We also receive information from advertisers to provide <a class="g1mG8c" href="privacy#footnote-ad-services" data-name="ad-services" jsaction="click:IPbaae(preventDefault=true)">advertising and research services on their behalf</a>.</p><p>We use various technologies to collect and store information, including <a class="g1mG8c" href="privacy#footnote-cookies" data-name="cookies" jsaction="click:IPbaae(preventDefault=true)">cookies</a>, <a class="g1mG8c" href="privacy#footnote-pixel" data-name="pixel" jsaction="click:IPbaae(preventDefault=true)">pixel tags</a>, local storage, such as <a class="g1mG8c" href="privacy#footnote-browser-storage" data-name="browser-storage" jsaction="click:IPbaae(preventDefault=true)">browser web storage</a> or <a class="g1mG8c" href="privacy#footnote-application-data-cache" data-name="application-data-cache" jsaction="click:IPbaae(preventDefault=true)">application data caches</a>, databases, and <a class="g1mG8c" href="privacy#footnote-server-logs" data-name="server-logs" jsaction="click:IPbaae(preventDefault=true)">server logs</a>.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="whycollect" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/48l-xdS4pXg?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Why Google collects data</h1><p class="vxK8q">We use data to build better services</p><p>We use the information we collect from all our services for the following purposes:</p><h3>Provide our services</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg"/></div><p>We use your information to <a class="g1mG8c" href="privacy#footnote-deliver-services" data-name="deliver-services" jsaction="click:IPbaae(preventDefault=true)">deliver our services</a>, like processing the terms you search for in order to return results or helping you share content by suggesting recipients from your contacts.<h3>Maintain & improve our services</h3><div class="pjyxF "><img class="zZLvvc" alt="" src="https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg"/></div><p>We also use your information to <a class="g1mG8c" href="privacy#footnote-ensure-working" data-name="ensure-working" jsaction="click:IPbaae(preventDefault=true)">ensure
Source: privacy[1].htm.2.dr	String found in binary or memory: t covered in this Privacy Policy.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infochoices" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Your privacy controls</h1><p class="vxK8q">You have choices regarding the information we collect and how it's used</p><p>This section describes key controls for managing your privacy across our services. You can also visit the <a href="https://myaccount.google.com/privacycheckup?utm_source=pp&amp;utm_medium=Promo-in-product&amp;utm_campaign=pp_body" class="N6CPUe" target="_blank">Privacy Checkup</a>, which provides an opportunity to review and adjust important privacy settings. In addition to these tools, we also offer specific privacy settings in our products equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: t want this level of search customization, you can <a href="https://support.google.com/websearch?p=privpol_incognito">search and browse privately</a> or turn off <a href="https://www.google.com/history/optout?utm_source=pp">signed-out search personalization</a>.</p><h3 id="footnote-customizing">Customizing our services</h3><p>For example, we may display a Google Doodle on the Search homepage to celebrate an event specific to your country.</p><h3 id="footnote-deliver-services">deliver our services</h3><p>Examples of how we use your information to deliver our services include:</p><ul><li>We use the IP address assigned to your device to send you the data you requested, such as loading a YouTube video</li><li>We use unique identifiers stored in cookies on your device to help us authenticate you as the person who should have access to your Google Account</li><li>Photos and videos you upload to Google Photos are used to help you create albums, animations, and other creations that you can share. <a href="https://support.google.com/photos?p=privpol_manage">Learn more</a></li><li>A flight confirmation email you receive may be used to create a equals www.youtube.com (Youtube)
Source: base[1].js.2.dr	String found in binary or memory: t=g.yB(this.experiments,"html5_qoe_intercept"):this.Ts?(t=t.vss_host||"s.youtube.com",this.aa("www_for_videostats")&&"s.youtube.com"===t&&(t=ID(this.S)||"www.youtube.com")):t="video.google.com";this.Gp=t;this.sh(a,!0);this.P=new fD;g.C(this,this.P);t=b?b.innertubeApiKey:oD("",a.innertube_api_key);r=b?b.innertubeApiVersion:oD("",a.innertube_api_version);p=b?b.innertubeContextClientVersion:oD("",a.innertube_context_client_version);this.ra={innertubeApiKey:uo("INNERTUBE_API_KEY")||t,innertubeApiVersion:uo("INNERTUBE_API_VERSION")|| equals www.youtube.com (Youtube)
Source: M00K5RY9.js.2.dr	String found in binary or memory: var Wi=(0,_.G)(dv);var ev=av+Wi+"</li><li>"+(0,_.G)("YouTube settings:")+" ",fv='href="'+_.N(_.R(_.tZ({url:(0,_.L)("https://www.youtube.com/feed/history/search_history?utm_source=pp")},b)))+'" '+_.Y(),gv=(0,_.M)(fv),hv='href="'+_.N(_.R(_.tZ({url:(0,_.L)("https://www.youtube.com/feed/history?utm_source=pp")},b)))+'" '+_.Y(),iv=(0,_.M)(hv),jv="Pause and delete your <a "+(_.O(gv)+">YouTube Search History</a> and your <a "+(_.O(iv)+">YouTube Watch History</a>."));var kv=(0,_.G)(jv);var lv=ev+kv+"</li><li>"+ equals www.youtube.com (Youtube)
Source: M00K5RY9.js.2.dr	String found in binary or memory: var Zpa=function(a){var b=_.Cw("HEAD",a);return b&&0!=b.length?b[0]:a.documentElement},$pa=function(){var a=_.Rb(_.Qd(new _.Pd(_.Nd,"https://www.youtube.com/iframe_api?trustedtypes=1"))),b={},c=b.document||document,d=_.Ud(a),e=_.lf(document,"SCRIPT"),f={$w:e,wl:void 0},g=new _.Dg(Ypa,f),k=null,l=null!=b.timeout?b.timeout:5E3;0<l&&(k=window.setTimeout(function(){C6(e,!0);g.Zc(new D6(1,"Timeout reached for loading script "+d))},l),f.wl=k);e.onload=e.onreadystatechange=function(){e.readyState&&"loaded"!= equals www.youtube.com (Youtube)
Source: iframe_api[1].js.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/9f996d3e\/www-widgetapi.vflset\/www-widgetapi.js'; equals www.youtube.com (Youtube)
Source: privacy[1].htm.2.dr	String found in binary or memory: ve added examples, explanatory videos, and definitions for <a href="privacy/key-terms#key-terms">key terms</a>. And if you have any questions about this Privacy Policy, you can <a href="https://support.google.com/policies?p=privpol_privts" class="N6CPUe" target="_blank">contact us</a>.</p></div></div><div class=" xXnO1d"><div class="nrAB0c"><div id="infocollect" class="ahbJ5"></div><div class="pTrV6d"><div class="M3GAob"><div class="O3bgpc"><iframe src="https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&amp;showinfo=0&amp;theme=light&amp;version=3&amp;hl=en&amp;cc_lang_pref=en&amp;cc_load_policy=1&amp;enablejsapi=1" allowfullscreen="allowfullscreen" class="Ylcf5b"></iframe></div></div></div><h1>Information Google collects</h1><p class="vxK8q">We want you to understand the types of information we collect as you use our services</p><p>We collect information to provide better services to all our users equals www.youtube.com (Youtube)

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: forms.gle

Urls found in memory or binary data

Source: 216KZNER.js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: qp_sprite137[1].svg.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: qp_sprite137[1].svg.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr	String found in binary or memory: http://www.broofa.com
Source: base[1].js.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=gdrive;cat=googl004;ord=6561658516421
Source: 408K5RM8.js.2.dr	String found in binary or memory: https://about.google
Source: 408K5RM8.js.2.dr, terms[1].htm.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://about.google/
Source: terms[1].htm.2.dr	String found in binary or memory: https://about.google/intl/en_GB/how-our-business-works
Source: 216KZNER.js.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: terms[1].htm.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin?hl=en-US&continue=https://policies.google.com/terms
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: base[1].js.2.dr	String found in binary or memory: https://admin.youtube.com
Source: so[1].htm.2.dr	String found in binary or memory: https://ads.google.com/home/?subid
Source: privacy[1].htm.2.dr	String found in binary or memory: https://adssettings.google.com/?utm_source=pp
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://adssettings.google.com/authenticated?utm_source=pp
Source: 408K5RM8.js.2.dr, terms[1].htm.2.dr	String found in binary or memory: https://adssettings.google.com?utm_source=ps-terms
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr, cb=gapi[1].js.2.dr, so[1].htm.2.dr	String found in binary or memory: https://apis.google.com
Source: m=_b,_tp[1].js.2.dr, so[1].htm.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: so[1].htm.2.dr	String found in binary or memory: https://artsandculture.google.com/?hl
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://assistant.google.com/privacy-notice-childrens-features/
Source: so[1].htm.2.dr	String found in binary or memory: https://books.google.co.uk/?hl
Source: m=sy32,cNHZjb,sy46,VXdfxd,KFVhZe,sy3c,sWGJ4b[1].js.2.dr, cb=gapi[1].js.2.dr	String found in binary or memory: https://clients6.google.com
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://contacts.google.com
Source: so[1].htm.2.dr	String found in binary or memory: https://contacts.google.com/?hl
Source: m=sy32,cNHZjb,sy46,VXdfxd,KFVhZe,sy3c,sWGJ4b[1].js.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: m=sy32,cNHZjb,sy46,VXdfxd,KFVhZe,sy3c,sWGJ4b[1].js.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://content.googleapis.com
Source: www-widgetapi[1].js.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://docs.google.co
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://docs.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://docs.google.com/document/?usp
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNI
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/reportabu
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/viewform
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/viewform?
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/viewformH
Source: ~DFF3E508006D496C62.TMP.1.dr, {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/viewformu
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmRoot
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIRoot
Source: base[1].js.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: so[1].htm.2.dr	String found in binary or memory: https://docs.google.com/presentation/?usp
Source: so[1].htm.2.dr	String found in binary or memory: https://docs.google.com/spreadsheets/?usp
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: so[1].htm.2.dr	String found in binary or memory: https://drive.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://duo.google.com/?usp
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://e.com/privacyRoot
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://e.com/terms1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/reportabuse?source=https
Source: so[1].htm.2.dr	String found in binary or memory: https://earth.google.com/web/
Source: 408K5RM8.js.2.dr	String found in binary or memory: https://ec.europa.eu/consumers/odr/main/index.cfm
Source: 408K5RM8.js.2.dr	String found in binary or memory: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32011L0083
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://families.google.com/familylink/privacy/child-policy/
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://fi.google.com/about/tos/#project-fi-privacy-notice
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://fiber.google.com/
Source: privacy[1].htm.2.dr	String found in binary or memory: https://fiber.google.com/legal/privacy.html
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UaGrENHsxJlGDuGo1OIlI3K.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v27/4UabrENHsxJlGDuGo1OIlLU94bt3.woff)
Source: icon[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v80/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvP.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v12/pxiDypQkot1TnFhsFMOfGShlEw.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOkCnqEu92Fr1Mu52xM.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9vAA.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmSU5vAA.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlvAA.woff)
Source: css[2].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5g.woff)
Source: terms[1].htm.2.dr	String found in binary or memory: https://google.com/contact
Source: so[1].htm.2.dr	String found in binary or memory: https://hangouts.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://jamboard.google.com/?usp
Source: so[1].htm.2.dr	String found in binary or memory: https://keep.google.com
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://kids.youtube.com/privacynotice
Source: so[1].htm.2.dr	String found in binary or memory: https://mail.google.com/mail/
Source: so[1].htm.2.dr	String found in binary or memory: https://maps.google.co.uk/maps?hl
Source: so[1].htm.2.dr	String found in binary or memory: https://meet.google.com?hs
Source: privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/?utm_source
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/activitycontrols?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/dashboard?utm_source=pp
Source: privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/delete-services-or-account?utm_source=pp
Source: privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/deleteaccount?utm_source=pp
Source: privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/deleteservices?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/inactive?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/personal-info?utm_source=pp
Source: privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_ca
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://myaccount.google.com/privacycheckup?utm_source=pp&utm_medium=Promo-in-product&utm_campaign=p
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/profile?utm_source=pp
Source: terms[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/security-checkup
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/security-checkup?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myaccount.google.com/shared-endorsements?utm_source=pp
Source: privacy[1].htm.2.dr	String found in binary or memory: https://myactivity.google.com/?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myactivity.google.com/myactivity
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://myactivity.google.com/myactivity?utm_source=pp
Source: so[1].htm.2.dr	String found in binary or memory: https://news.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://ogs.google.com/
Source: so[1].htm.2.dr	String found in binary or memory: https://ogs.google.com/widget/app/so
Source: base[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=
Source: privacy[1].htm.2.dr	String found in binary or memory: https://payments.google.com/legaldocument?family=0.privacynotice&hl=en
Source: so[1].htm.2.dr	String found in binary or memory: https://photos.google.com/?pageId
Source: so[1].htm.2.dr	String found in binary or memory: https://play.google.com/?hl
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr, 408K5RM8.js.2.dr, m=viewer_base[1].js.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://plus.google.com
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: so[1].htm.2.dr	String found in binary or memory: https://podcasts.google.com/
Source: {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://policies.googl
Source: so[1].htm.2.dr	String found in binary or memory: https://policies.google.com
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/privacy
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/privacyAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/reportabus
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/privacyRPrivacy
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/privacyrms
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/terms
Source: terms[1].htm.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/terms1FAIpQLScNV-hq53HKcqb1kIB8l1VND120rstJABUUI4cNIGOYmEfv1g/reportabus
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://policies.google.com/termsdGoogle
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://privacy.google.com/businesses/affiliates
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://readalong.google
Source: privacy[1].htm.2.dr	String found in binary or memory: https://readalong.google/intl/en_GB/privacy
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://safebrowsing.google.com/?utm_source=pp
Source: 408K5RM8.js.2.dr, terms[1].htm.2.dr	String found in binary or memory: https://safety.google
Source: so[1].htm.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 216KZNER.js.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://ssl.gstatic.com/docs/forms/device_home/android_192.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/forms/device_home/android_192.pngJ
Source: reportabuse[1].htm.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.png
Source: imagestore.dat.1.dr	String found in binary or memory: https://ssl.gstatic.com/docs/spreadsheets/forms/favicon_qp2.pngW
Source: so[1].htm.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/images/p1_cfd8cf40.png
Source: so[1].htm.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/images/p2_136ed2e0.png
Source: m=sy32,cNHZjb,sy46,VXdfxd,KFVhZe,sy3c,sWGJ4b[1].js.2.dr	String found in binary or memory: https://ssl.gstatic.com/inproduct_help/guidedhelp/guide_inproduct.js
Source: imagestore.dat.2.dr, ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://ssl.gstatic.com/policies/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://ssl.gstatic.com/policies/favicon.ico~
Source: so[1].htm.2.dr	String found in binary or memory: https://stadia.google.com/
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://support.google.com/
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/a?p=privpol_admin
Source: terms[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/1350409
Source: terms[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/27441
Source: terms[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/40695
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts/answer/465?authuser=0#auto-delete
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=autocontacts&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_agereq&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_androidloc&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_controlads&hl=en_US
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_endorse
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_location
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_lochistory
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_phone&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_whyad
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/accounts?p=privpol_whyad&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/adwordspolicy?p=privpol_p13nad
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/analytics?p=privpol_data&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/blogger?p=privpol_blog
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/chrome?p=privpol_chrsync
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/googlehome?p=privpol_actions&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/googlehome?p=privpol_homedata
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/googleplay?p=privpol_review
Source: terms[1].htm.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: terms[1].htm.2.dr	String found in binary or memory: https://support.google.com/legal/topic/4558877
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/legal?p=privpol_remove
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/mail?p=privpol_signinactivity&hl=en_US
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/photos?p=privpol_manage
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/policies/troubleshooter/7575787
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/policies?p=privpol_privts
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/sites?p=privpol_delete
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/trends?p=privpol_about
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_feed&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_incognito
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_locserp
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_privresults&hl=en_US
Source: privacy[1].htm.2.dr	String found in binary or memory: https://support.google.com/websearch?p=privpol_searchactivity
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: privacy[1].htm.2.dr	String found in binary or memory: https://takeout.google.com/?utm_source=pp
Source: 408K5RM8.js.2.dr, terms[1].htm.2.dr	String found in binary or memory: https://takeout.google.com/settings/takeout
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://takeout.google.com/settings/takeout?utm_source=pp
Source: so[1].htm.2.dr	String found in binary or memory: https://translate.google.co.uk/?hl
Source: 408K5RM8.js.2.dr	String found in binary or memory: https://transparencyreport.google.com
Source: privacy[1].htm.2.dr	String found in binary or memory: https://transparencyreport.google.com/user-data/overview
Source: m=_b,_tp[1].js.2.dr, m=viewer_base[1].js.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: base[1].js.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: so[1].htm.2.dr	String found in binary or memory: https://www.blogger.com/
Source: 408K5RM8.js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://www.google.
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.co.uk/finance
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.co.uk/intl/en/about/products
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.co.uk/save
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.co.uk/shopping?hl
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.co.uk/webhp
Source: terms[1].htm.2.dr, {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/about/datacenters/inside/locations
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.google.com/about/philosophy.html
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.com/calendar
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.com/chrome/?brand
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/chrome/intl/en/privacy.html
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.google.com/contact
Source: so[1].htm.2.dr	String found in binary or memory: https://www.google.com/enterprise/marketplace
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=forms
Source: ~DFF3E508006D496C62.TMP.1.dr, {687AE487-5535-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.google.com/forms/about/?utm_source=product&utm_medium=forms_logo&utm_campaign=formsdGoog
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/history/optout?utm_source=pp
Source: terms[1].htm.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_74x24dp.png
Source: terms[1].htm.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_74x24dp.png
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/intl/en/safetycenter/
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/landing/2step/?utm_source=pp
Source: 408K5RM8.js.2.dr, m=viewer_base[1].js.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.google.com/permissions
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.google.com/work/apps/terms/education_privacy.html
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: cb=gapi[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: base[1].js.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://www.gstatic.
Source: so[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com
Source: viewform[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/_/freebird/_/js/k=freebird.v.en_GB.72nJ0Radf-o.O/d=1/ct=zgms/rs=AMjVe6jytGc1
Source: terms[1].htm.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.IdentityPoliciesUi.en_US.0NjjZKkZqQw.
Source: so[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.M2IxNhb9FR8.
Source: remote[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/about_these_terms_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/content_in_services_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/disagreements_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/improve_services_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/permission_to_use_illustration.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/privacy_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/provide_services_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/respect_others_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/software_in_services_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/ssat_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/tos_main_illustration.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/identity/boq/policies/privacy/using_services_illustration.svg
Source: viewform[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_dark_clr_74x24px.svg
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: rs=AA2YrTsEioQjV8dCPCAf6IQFuTeoulftIA[1].js.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_black_24dp.png
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/02698a3383765bd3c250471c53a86c5a.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/02f8664b95445de6f27ba682f3c5f9ab.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/0d6da8d8c44e7e3ee95c4d56c19f04e1.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/13062c65605335a46d14656c46af3868.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/1fa3e4ce8ac456f39ed02a6f9eb49b14.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/2951277d4c35389d7d304ed78d4fb6f6.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/3394102be0315326fd760e503b31c7b6.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/39b031d352a2e1586cf50ac7f2bbc18b.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/4165cd3aa643abb80fe1953668f67551.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/4c5ee41d52605ff6f43538d46a1c0d35.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/4f19891c43001db11efc8048f9bc7cdb.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/51cd09d6239edc9652bc05ad1d149a5c.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/546f2b674b407304a2570e71a216e509.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/5959e84c2197c8a27da0a717f1cd47d5.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/5e7cd445f8861a262a3da876f855a4cc.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/900a793eae04f4bddd675f8d95c4a794.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/a8e78fa7fa279aa946fe1a9d6a0508f2.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/acad335ad7ba163209d8c3e671b2c445.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/b18d13e9ea8a362642b7d25bce665039.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/c1b97d74dace7e43a9ccb26841a7cae4.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/d1b68e2cd423aba52d74f02573df2d2d.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/e28714c71f217892f72b2698ea5cefef.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/e60586c0029adec0bacd3e48470ca6c6.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/e79ea0ed464fc8952d5b5582f9f9ae53.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/fa9e0e90d1e7ec399dad9f3257a9bb63.svg
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/privacy/fb61fc4bfc85ad86f11342e699d685e9.svg
Source: terms[1].htm.2.dr	String found in binary or memory: https://www.gstatic.com/policies/terms/pdf/20200331/ba461e2f/google_terms_of_service_en_gb.pdf
Source: 408K5RM8.js.2.dr, terms[1].htm.2.dr	String found in binary or memory: https://www.legislation.gov.uk/uksi/2013/3134/regulation/4/made
Source: iframe_api[1].js.2.dr, www-widgetapi[1].js.2.dr	String found in binary or memory: https://www.youtube.com
Source: so[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/?gl
Source: 408K5RM8.js.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: privacy[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: ~DFF3E508006D496C62.TMP.1.dr	String found in binary or memory: https://www.youtube.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/feed/history/search_history?utm_source=pp
Source: M00K5RY9.js.2.dr, privacy[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/feed/history?utm_source=pp
Source: base[1].js.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: M00K5RY9.js.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api?trustedtypes=1
Source: 48l-xdS4pXg[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=48l-xdS4pXg
Source: YlmVKT3Zvhw[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=YlmVKT3Zvhw
Source: ZdEIZNg3epQ[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=ZdEIZNg3epQ
Source: ggoJFaE71W8[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=ggoJFaE71W8
Source: base[1].js.2.dr	String found in binary or memory: https://youtu.be/
Source: base[1].js.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: 216KZNER.js.2.dr	String found in binary or memory: https://youtube.com/embed/
Source: base[1].js.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.2.dr	String found in binary or memory: https://yurt.corp.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 151.101.1.195:443 -> 192.168.2.3:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.195:443 -> 192.168.2.3:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.154:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.154:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.156:443 -> 192.168.2.3:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.127.156:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.148:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.177.126.148:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.66:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.66:443 -> 192.168.2.3:49776 version: TLS 1.2

System Summary:

Classification label

Source: classification engine

Classification label: clean0.win@3/119@7/5

Creates files inside the user directory

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Creates temporary files

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFC72677B0B4E262AC.TMP

Jump to behavior

Reads ini files

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3164 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3164 CREDAT:17410 /prefetch:2			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Uses new MSVCR Dlls

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior