Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

http://www.altn.com/ndr/

Status: finished
Submission Time: 2020-04-15 16:37:55 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    222753
  • API (Web) ID:
    342171
  • Analysis Started:
    2020-04-15 16:50:12 +02:00
  • Analysis Finished:
    2020-04-15 16:57:28 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 1
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
108.174.10.14
 United States
104.18.27.190
 United States
151.101.12.157
 United States
Click to see the 18 hidden entries
104.17.70.176
 United States
65.99.242.55
 United States
185.60.216.19
 Ireland
178.79.242.181
 European Union
185.60.216.35
 Ireland
185.63.145.1
 United States
45.60.13.212
 United States
52.202.232.190
 United States
104.19.155.83
 United States
172.217.16.163
 United States
104.17.214.204
 United States
172.217.22.66
 United States
104.18.21.191
 United States
172.217.21.246
 United States
216.58.208.34
 United States
216.58.208.33
 United States
65.99.242.130
 United States
108.177.15.156
 United States

Domains

Name IP Detection
px.ads.linkedin.com
 0.0.0.0
tracking.g2crowd.com
 104.18.27.190
webchat.altn.com
 65.99.242.130
Click to see the 32 hidden entries
6396l.x.incapdns.net
 45.60.13.212
www.facebook.com
 0.0.0.0
yt3.ggpht.com
 0.0.0.0
www.linkedin.com
 0.0.0.0
static.mdaemon.com
 0.0.0.0
connect.facebook.net
 0.0.0.0
photos-ugc.l.googleusercontent.com
 216.58.208.33
static.doubleclick.net
 0.0.0.0
stats.g.doubleclick.net
 0.0.0.0
community.spiceworks.com
 0.0.0.0
site-cdn.onenote.net
 0.0.0.0
googleads.g.doubleclick.net
 0.0.0.0
snap.licdn.com
 0.0.0.0
platform.twitter.com
 0.0.0.0
www.youtube.com
 0.0.0.0
platform.twitter.map.fastly.net
 151.101.12.157
js.hs-banner.com
 104.18.21.191
any-na.mix.linkedin.com
 108.174.10.14
pagead46.l.doubleclick.net
 216.58.208.34
trackcmp.net
 52.202.232.190
stats.l.doubleclick.net
 108.177.15.156
i.ytimg.com
 172.217.21.246
js.hs-analytics.net
 104.17.70.176
altntech.hs.llnwd.net
 178.79.242.181
star-mini.c10r.facebook.com
 185.60.216.35
scontent.xx.fbcdn.net
 185.60.216.19
www.altn.com
 65.99.242.55
track.hubspot.com
 104.19.155.83
pagead.l.doubleclick.net
 172.217.22.66
js.hs-scripts.com
 104.17.214.204
pop-efr5.www.linkedin.com
 185.63.145.1
www.google.co.uk
 172.217.16.163

URLs

Name Detection
http://schema.org/InStock
http://static.altn.com/Collateral/Comparison-Guides/US_MDaemon-Mail-Server-vs-Zimbra-ZCS_Comparison-
http://schema.org
Click to see the 97 hidden entries
https://www.google.%/ads/ga-audiences?
https://youtu.be/
http://youtube.com/streaming/metadata/segment/102015
https://www.altn.com/Products/t/r/
http://www.twitter.com/
http://www.amazon.com/
http://www.altn.com/Products/SecurityGateway-Email-Firewall/
http://www.youtube.com/watch?v=WiBR1OuuPhQ
http://www.altn.co.uk/
http://static.altn.com/Images/Screenshots/SecurityGateway-Email-Spam-Firewall/EN_SecurityGateway-Ema
https://www.altn.com/ndr/Root
https://www.altn.com/Products/JAlt-N
https://www.altn.com/Images/Banners/HomeBanner-Mailstore_02.png
http://www.hubspot.com
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-1993963
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-720702
http://static.altn.com/Collateral/Comparison-Guides/A4_MDaemon-Mail-Server-vs-IceWarp-UC-Server_Comp
https://www.altn.com/AJAX/GetRegions.aspx?countryCode=
https://twitter.com/intent/tweet?text=Keep
http://static.altn.com/Collateral/Comparison-Guides/US_MDaemon-Mail-Server-vs-MailEnable_Comparison-
https://webchat.altn.com/ChatImage?queue=1&script=yes
https://static.mdaemon.com/Images/Screenshots/MDaemon-Mail-Server/EN_MDaemon-Mail-Server_GUI.jpg
https://fburl.com/debugjs.
https://px.ads.linkedin.com/collect/?pid=1328802&fmt=gif
https://www.altn.com/Support/Personal-Demo-SecurityGateway/?
http://fontawesome.io/license/
http://www.securityspace.com/s_survey/data/man.201801/mxsurvey.html
http://www.altn.com/8BIM
http://static.altn.com/Collateral/Comparison-Guides/US_SecurityGateway-Email-Spam-Firewall-vs-GFi_Co
http://fontawesome.io/license
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-1788175
http://i.ytimg.com/vi/de7zih9jboU/hqdefault.jpg
http://static.altn.com/Collateral/Comparison-Guides/A4_MDaemon-Mail-Server-vs-SmarterMail_Comparison
https://youtube.com/api/drm/fps?ek=uninitialized
http://www.nytimes.com/
http://stats.g.doubleclick.net
https://www.altn.com/Products/MDaemon-Private-Cloud-Email/bMDaemon
http://www.mdaemon.fr
http://www.mdaemon.com/
http://www.altn.com/Products/MDaemon-Email-Server-Windows/
https://static.mdaemon.com/Images/Screenshots/MDaemon-Instant-Messenger/EN_MDaemon-Instant-Messenger
http://www.mdaemon.ca
http://www.htmldog.com/articles/suckerfish/
http://www.MDaemon.co.nz/
http://www.ietf.org/
https://platform.twitter.com/widgets.js
http://blog.mdaemon.com/
https://community.spiceworks.com/external/spice/route/altn12/3590
http://www.reddit.com/
http://community.spiceworks.com/info/addlink
http://static.altn.com/Collateral/Comparison-Guides/A4_SecurityGateway-Email-Spam-Firewall-vs-GFi_Co
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-1788145
https://www.altn.com/Products/SecurityGateway-Email-Firewall/
https://www.altn.com/AJAX/AltnCaptcha.aspx?token=
https://www.altn.com/Store/Basket/
https://www.altn.com/Images/Banners/HomeBanner-20-Year.png
https://www.altn.com/Images/Banners/HomeBanner-SecurityGateway-06_01.png
https://static.mdaemon.com/Images/Screenshots/MDaemon-Mail-Server/EN_MDaemon-Mail-Server_Security-Em
https://admin.youtube.com
https://static.mdaemon.com/graphics/Ticket_Preview_Blue.png)
https://webchat.altn.com/icons/chat/LiveChat_offline.png
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-1965617
https://px.ads.linkedin.com/collect?
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/932227631/?value=0&guid=ON&
https://www.altn.com/Images/Banners/HomeBanner-MDaemon-Cloud_01.png
https://static.mdaemon.com/Images/Screenshots/MDaemon-Mail-Server/EN_MDaemon-Mail-Server_Exchange-Mi
https://static.spiceworks.com/assets/external/spice_module.js
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-2003480
https://www.altn.com/Products/
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-1965730
https://www.altn.com/UI/layout/20-Year-Banner.png
http://www.mdaemon.es/
http://feedback.altn.com
http://www.scottandrew.com/weblog/articles/cbs-events
http://static.altn.com/Collateral/Comparison-Guides/US_MDaemon-Mail-Server-vs-IceWarp-UC-Server_Comp
https://static.mdaemon.com/Images/Screenshots/MDaemon-Mail-Server/EN_MDaemon-Mail-Server_Archive-Pub
https://stats.g.doubleclick.net/j/collect?
https://static.mdaemon.com/Images/ContentGraphics/Icon_Grow_blue_150px.png
https://www.altn.com/Products/MDaemon-Email-Server-Windows/
https://www.altn.com/dr/
http://static.altn.com/Collateral/Comparison-Guides/A4_MDaemon-Mail-Server-vs-Kerio-Connect_Comparis
https://www.altn.com/Store/Basket/r/f
http://bit.ly/Share-MDaemon
https://www.altn.com/Store/Basket/r/e
https://static.mdaemon.com/Images/Screenshots/MDaemon-Mail-Server/EN_MDaemon-Mail-Server_Mobile-Devi
https://www.altn.com/Account/Login/
https://html5shiv.googlecode.com/svn/trunk/html5.js
https://js.hs-banner.com/6572702.js
http://tools.ietf.org/html/rfc3463
https://www.securitygatewayforemail.com
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-2101803
http://www.mdaemon.com/8BIM
https://www.youtube.com/generate_204?cpn=
https://twitter.com/MDaemon_Email
http://schema.org/Offer
https://www.g2crowd.com/products/security-gateway/reviews/security-gateway-review-1907713
https://www.altn.com/Products/SecurityGateway-Email-Firewall/~Security

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[6].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\EN_MDaemon-Mail-Server_Exchange-Migration-Select-User_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=MDaemon Messaging Server Screenshot, orientation=upper-left, width=795], baseline, precision 8, 200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\EN_MDaemon-Mail-Server_Archive-Public-Folder_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for MDaemon Messaging Server, orientation=upper-left, width=795], progressive, precision 8, 200x150, frames 3
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\EN_MDaemon-Instant-Messenger-IM-Mail-Server_GUI-Chat-Session-Message_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=WorldClient Instant Messenger for MDaemon Messaging Server Screenshot, orientation=upper-left, width=795], baseline, preci (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\6572702[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\6572702[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\2922[2].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\2922[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\213586722384798[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\213586722384798[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\20-Year-Banner[1].png
 PNG image data, 400 x 29, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\webworker[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[7].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\EN_MDaemon-Mail-Server_Mobile-Device-Management-ActiveSync-Policy-Editor_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for MDaemon Messaging Server, orientation=upper-left, width=795], baseline, precision 8, 200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[5].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[4].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[3].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[2].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\tr[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\styles[1].css
 assembler source, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\sdk[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\qqDmmIjUrpNLhUV5I88F9DKNCuYtxY9FqFn1J6Ipca8[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\nav-separator[1].png
 PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\multicard[1].jpg
 JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x72, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\jquery-latest.pack[1].js
 ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\MDaemon60px[1].jpg
 JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 271x60, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\font-awesome[1].css
 troff or preprocessor input, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\fbevents[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\fbevents[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\bg-Nav[1].png
 PNG image data, 1 x 40, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\anchor[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\__utm[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\WebResource[1].js
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\Ticker-Prev[1].png
 PNG image data, 14 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\SecurityGateway_icon[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\Register[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\Nav-Next[1].png
 PNG image data, 14 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\MDaemon_icon[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\insight.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\MDaemon-Webmail_GUI-WorldClient-Theme_tm[1].jpg
 [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 200x149, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\MDaemon-Hosted-Email_Features[1].png
 PNG image data, 784 x 406, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\MDaemon-Email-Server-Windows[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\Login[1].htm
 HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\KFOmCnqEu92Fr1Mu4mxP[1].ttf
 TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularht
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\KFOlCnqEu92Fr1MmYUtfBBc9[1].ttf
 TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto BlackRegularVersion 2.137; 2017Roboto-Bla
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff
 Web Open Font Format, TrueType, length 21528, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff
 Web Open Font Format, TrueType, length 21564, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\Icon_Clipboard_blue_150px[1].png
 PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\HomeBanner-SecurityGateway-06_01[1].png
 PNG image data, 1000 x 275, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KGYEP10B\EN_MDaemon-Remote-Administration-Mail-Server_Setting-Folder-Sharing_tm[1].jpg
 [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 200x149, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\EN_SecurityGateway-Email-Spam-Firewall_Data-Leak-Prevention_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for SecurityGateway for Email Servers, orientation=upper-left, width=795], baseline, precision 8, 200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\EN_MDaemon-Mail-Server_Security-VBR-Certification_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=MDaemon Messaging Server Screenshot, orientation=upper-left, width=795], baseline, precision 8, 200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\EN_MDaemon-Mail-Server_GUI_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for MDaemon Messaging Server, orientation=upper-left, width=795], progressive, precision 8, 200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\Chat_online[1].png
 PNG image data, 150 x 21, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\6572702[2].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\6572702[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\2922[2].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\2922[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\213586722384798[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\r1ckxmj\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\EN_SecurityGateway-Email-Spam-Firewall_Defense-Layer-Customization_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for SecurityGateway for Email Servers, orientation=upper-left, width=795], progressive, precision 8, 200x150, f (…)
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{10F7B094-7F74-11EA-AAE5-44C1B3FB757B}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{097F20D3-7F74-11EA-AAE5-44C1B3FB757B}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{097F20D1-7F74-11EA-AAE5-44C1B3FB757B}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZA21IYDR\www.altn[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\dc[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_world[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_uk[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_switzerland[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_sweden[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_spain[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_italy[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_germany[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_france[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\icon_flag_austria[1].png
 PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\fontawesome-webfont[1].eot
 Embedded OpenType (EOT), FontAwesome family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\f[1].txt
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\errorPageStrings[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\2NWC0UP7\www.youtube[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\bullet[1]
 PNG image data, 15 x 15, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\btn_No[1].png
 PNG image data, 84 x 108, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\base[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\api[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\SlGVmQWMvZQIdix7AFxXkHNSaw[1].woff
 Web Open Font Format, TrueType, length 24888, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\SecurityGateway_icon_30x30[1].png
 PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\RelayFax_icon_30x30[1].png
 PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\Personal-Demo-SecurityGateway[1].htm
 XML 1.0 document, ASCII text, with very long lines, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\MDaemon_icon_30x30[1].png
 PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\EN_SecurityGateway-Email-Spam-Firewall_Reports-Anti-Spam_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for SecurityGateway for Email Servers, orientation=upper-left, width=795], progressive, precision 8, 200x150, f (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\HNHL2TDR\EN_SecurityGateway-Email-Spam-Firewall_Message-Scoring_tm[1].jpg
 [TIFF image data, little-endian, direntries=17, height=594, bps=218, compression=none, PhotometricIntepretation=RGB, description=Screenshot for SecurityGateway for Email Servers, orientation=upper-left, width=795], progressive, precision 8, 200x150, f (…)
 #