Play interactive tour

Edit tour

Analysis Report https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1

Overview

General Information

Sample URL:	https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1
Analysis ID:	358597
Infos:
Most interesting Screenshot:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Startup

System is w10x64

iexplore.exe (PID: 3276 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5864 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3276 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1

SlashNext: detection malicious, Label: Fake Login Page type: Phishing & Social Engineering

Antivirus detection for URL or domain

Show sources

Source: https://web.tresorit.com/l/UhlFL#OuqBEbBjao-gYEzs6URB1A

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

Source: https://tresorit.com/legal/privacy-policy	HTTP Parser: No <meta name="author".. found
Source: https://tresorit.com/legal/privacy-policy	HTTP Parser: No <meta name="author".. found

Source: https://tresorit.com/legal/privacy-policy	HTTP Parser: No <meta name="copyright".. found
Source: https://tresorit.com/legal/privacy-policy	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Show sources

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown	HTTPS traffic detected: 18.194.14.15:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.194.14.15:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.94.39:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.94.39:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 138.201.9.137:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 138.201.9.137:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.53.111:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.53.111:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.71.154:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.71.154:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.67:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.67:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49788 version: TLS 1.2

Networking:

Source: 360016486620[1].htm.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/share.php?title=Legal+Statement+for+File+Previews&u=https%3A%2F%2Fsupport.tresorit.com%2Fhc%2Fen-us%2Farticles%2F360016486620-Legal-Statement-for-File-Previews" class="share-facebook">Facebook</a></li> equals www.facebook.com (Facebook)
Source: 360016486620[1].htm.2.dr	String found in binary or memory: <li><a href="https://www.linkedin.com/shareArticle?mini=true&source=Tresorit+Customer+Service&title=Legal+Statement+for+File+Previews&url=https%3A%2F%2Fsupport.tresorit.com%2Fhc%2Fen-us%2Farticles%2F360016486620-Legal-Statement-for-File-Previews" class="share-linkedin">LinkedIn</a></li> equals www.linkedin.com (Linkedin)
Source: gtm[1].js1.2.dr	String found in binary or memory: function Wo(a,b){}function Xo(a,b,c){};var Yo=!!p.MutationObserver,Zo=void 0,$o=function(a){if(!Zo){var b=function(){var c=M.body;if(c)if(Yo)(new MutationObserver(function(){for(var e=0;e<Zo.length;e++)N(Zo[e])})).observe(c,{childList:!0,subtree:!0});else{var d=!1;cg(c,"DOMNodeInserted",function(){d\|\|(d=!0,N(function(){d=!1;for(var e=0;e<Zo.length;e++)N(Zo[e])}))})}};Zo=[];M.body?b():N(b)}Zo.push(a)};var bp=["www.youtube.com","www.youtube-nocookie.com"],cp,dp=!1,ep=0; equals www.youtube.com (Youtube)
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: s teamwork and productivity with the highest level of security in the cloud.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li><li class="Card-module--card--g225q"><a href="/enterprise"><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=" alt="" class="Card-module--icon--3ZugB"/><h3 class="Heading-module--heading--3EbyB Heading-module--heading-3--32oUb Card-module--title--skGW1">Enterprise</h3><p class="Card-module--text--2SiEW">Meet global data protection regulations and mitigate risks with comprehensive user governance.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li></ul></div></div><div class="CTAWithTitle-module--cta-with-title--1CAIH"><div class="Container-module--container--3KHiT Container-module--container-base--3viYC"><h2 class="Heading-module--heading--3EbyB Heading-module--heading-2--3n465 CTAWithTitle-module--title--1w3Y8">Ready to start working securely?</h2><div class="CTAWithTitle-module--buttons--2Dmjc"><a href="/business" class="Button-module--button--2X_Ir CTAWithTitle-module--btn--3Vl0y Button-module--large--2JMDl">Get Started</a></div><span class="CTAWithTitle-module--description--1pEtp">Include your collaborators right away.</span></div></div></main><footer class="Footer-module--footer--VUGIP"><div class="Container-module--container--3KHiT Container-module--container-wide--3dSdb"><div class="Footer-module--footer-body--2vEX4"><div class="Footer-module--cell-container--2Xo0C"><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Product</h3><ul><li><a href="/security">Security</a></li><li><a href="/resources/customer-stories">Customer stories</a></li><li><a href="/pricing">Pricing</a></li><li><a href="/download">Download Tresorit</a></li><li><a href="/nonprofit">For nonprofits</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Comparison</h3><ul><li><a href="/business/dropbox-alternative">Dropbox</a></li><li><a href="/business/spideroak-alternative">SpiderOak</a></li><li><a href="/business/wuala-alternative">Wuala</a></li><li><a href="/business/sugarsync-alternative">SugarSync</a></li><li><a href="/cloud-storage-comparison">Other services</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Help</h3><ul><li><a href="https://support.tresorit.com/hc/en-us">Knowledge Base</a></li><li><a href="/resources">Resources</a></li><li><a href="https://blog.tresorit.com">Blog</a></li><li><a href="https://support.tresorit.com/hc/en-us/articles/216113777-Crash-course-on-Tresorit">FAQ</a></li><li><a href="https://status.tresorit.com">Service Status</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Our com
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: s teamwork and productivity with the highest level of security in the cloud.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li><li class="Card-module--card--g225q"><a href="/enterprise"><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=" alt="" class="Card-module--icon--3ZugB"/><h3 class="Heading-module--heading--3EbyB Heading-module--heading-3--32oUb Card-module--title--skGW1">Enterprise</h3><p class="Card-module--text--2SiEW">Meet global data protection regulations and mitigate risks with comprehensive user governance.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li></ul></div></div><div class="CTAWithTitle-module--cta-with-title--1CAIH"><div class="Container-module--container--3KHiT Container-module--container-base--3viYC"><h2 class="Heading-module--heading--3EbyB Heading-module--heading-2--3n465 CTAWithTitle-module--title--1w3Y8">Ready to start working securely?</h2><div class="CTAWithTitle-module--buttons--2Dmjc"><a href="/business" class="Button-module--button--2X_Ir CTAWithTitle-module--btn--3Vl0y Button-module--large--2JMDl">Get Started</a></div><span class="CTAWithTitle-module--description--1pEtp">Include your collaborators right away.</span></div></div></main><footer class="Footer-module--footer--VUGIP"><div class="Container-module--container--3KHiT Container-module--container-wide--3dSdb"><div class="Footer-module--footer-body--2vEX4"><div class="Footer-module--cell-container--2Xo0C"><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Product</h3><ul><li><a href="/security">Security</a></li><li><a href="/resources/customer-stories">Customer stories</a></li><li><a href="/pricing">Pricing</a></li><li><a href="/download">Download Tresorit</a></li><li><a href="/nonprofit">For nonprofits</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Comparison</h3><ul><li><a href="/business/dropbox-alternative">Dropbox</a></li><li><a href="/business/spideroak-alternative">SpiderOak</a></li><li><a href="/business/wuala-alternative">Wuala</a></li><li><a href="/business/sugarsync-alternative">SugarSync</a></li><li><a href="/cloud-storage-comparison">Other services</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Help</h3><ul><li><a href="https://support.tresorit.com/hc/en-us">Knowledge Base</a></li><li><a href="/resources">Resources</a></li><li><a href="https://blog.tresorit.com">Blog</a></li><li><a href="https://support.tresorit.com/hc/en-us/articles/216113777-Crash-course-on-Tresorit">FAQ</a></li><li><a href="https://status.tresorit.com">Service Status</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Our com
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: s teamwork and productivity with the highest level of security in the cloud.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li><li class="Card-module--card--g225q"><a href="/enterprise"><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=" alt="" class="Card-module--icon--3ZugB"/><h3 class="Heading-module--heading--3EbyB Heading-module--heading-3--32oUb Card-module--title--skGW1">Enterprise</h3><p class="Card-module--text--2SiEW">Meet global data protection regulations and mitigate risks with comprehensive user governance.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li></ul></div></div><div class="CTAWithTitle-module--cta-with-title--1CAIH"><div class="Container-module--container--3KHiT Container-module--container-base--3viYC"><h2 class="Heading-module--heading--3EbyB Heading-module--heading-2--3n465 CTAWithTitle-module--title--1w3Y8">Ready to start working securely?</h2><div class="CTAWithTitle-module--buttons--2Dmjc"><a href="/business" class="Button-module--button--2X_Ir CTAWithTitle-module--btn--3Vl0y Button-module--large--2JMDl">Get Started</a></div><span class="CTAWithTitle-module--description--1pEtp">Include your collaborators right away.</span></div></div></main><footer class="Footer-module--footer--VUGIP"><div class="Container-module--container--3KHiT Container-module--container-wide--3dSdb"><div class="Footer-module--footer-body--2vEX4"><div class="Footer-module--cell-container--2Xo0C"><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Product</h3><ul><li><a href="/security">Security</a></li><li><a href="/resources/customer-stories">Customer stories</a></li><li><a href="/pricing">Pricing</a></li><li><a href="/download">Download Tresorit</a></li><li><a href="/nonprofit">For nonprofits</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Comparison</h3><ul><li><a href="/business/dropbox-alternative">Dropbox</a></li><li><a href="/business/spideroak-alternative">SpiderOak</a></li><li><a href="/business/wuala-alternative">Wuala</a></li><li><a href="/business/sugarsync-alternative">SugarSync</a></li><li><a href="/cloud-storage-comparison">Other services</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Help</h3><ul><li><a href="https://support.tresorit.com/hc/en-us">Knowledge Base</a></li><li><a href="/resources">Resources</a></li><li><a href="https://blog.tresorit.com">Blog</a></li><li><a href="https://support.tresorit.com/hc/en-us/articles/216113777-Crash-course-on-Tresorit">FAQ</a></li><li><a href="https://status.tresorit.com">Service Status</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Our com
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: s teamwork and productivity with the highest level of security in the cloud.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li><li class="Card-module--card--g225q"><a href="/enterprise"><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=" alt="" class="Card-module--icon--3ZugB"/><h3 class="Heading-module--heading--3EbyB Heading-module--heading-3--32oUb Card-module--title--skGW1">Enterprise</h3><p class="Card-module--text--2SiEW">Meet global data protection regulations and mitigate risks with comprehensive user governance.</p><button class="ArrowLink-module--arrow-link--3wC7T ArrowLink-module--blue--_lamw Card-module--link--3FVqQ">Learn more</button></a></li></ul></div></div><div class="CTAWithTitle-module--cta-with-title--1CAIH"><div class="Container-module--container--3KHiT Container-module--container-base--3viYC"><h2 class="Heading-module--heading--3EbyB Heading-module--heading-2--3n465 CTAWithTitle-module--title--1w3Y8">Ready to start working securely?</h2><div class="CTAWithTitle-module--buttons--2Dmjc"><a href="/business" class="Button-module--button--2X_Ir CTAWithTitle-module--btn--3Vl0y Button-module--large--2JMDl">Get Started</a></div><span class="CTAWithTitle-module--description--1pEtp">Include your collaborators right away.</span></div></div></main><footer class="Footer-module--footer--VUGIP"><div class="Container-module--container--3KHiT Container-module--container-wide--3dSdb"><div class="Footer-module--footer-body--2vEX4"><div class="Footer-module--cell-container--2Xo0C"><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Product</h3><ul><li><a href="/security">Security</a></li><li><a href="/resources/customer-stories">Customer stories</a></li><li><a href="/pricing">Pricing</a></li><li><a href="/download">Download Tresorit</a></li><li><a href="/nonprofit">For nonprofits</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Comparison</h3><ul><li><a href="/business/dropbox-alternative">Dropbox</a></li><li><a href="/business/spideroak-alternative">SpiderOak</a></li><li><a href="/business/wuala-alternative">Wuala</a></li><li><a href="/business/sugarsync-alternative">SugarSync</a></li><li><a href="/cloud-storage-comparison">Other services</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Help</h3><ul><li><a href="https://support.tresorit.com/hc/en-us">Knowledge Base</a></li><li><a href="/resources">Resources</a></li><li><a href="https://blog.tresorit.com">Blog</a></li><li><a href="https://support.tresorit.com/hc/en-us/articles/216113777-Crash-course-on-Tresorit">FAQ</a></li><li><a href="https://status.tresorit.com">Service Status</a></li></ul></div></div><div class="Footer-module--cell--2pDI0"><div class="Footer-module--dd--27swn"><h3>Our com

Source: unknown

DNS traffic detected: queries for: linkprotect.cudasvc.com

Source: application-79172500fb4dbec2484043d570946543[1].css.2.dr	String found in binary or memory: http://dbushell.com/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
Source: hc_enduser-f2b41b28e96aa3334b731e6c3ba64b11[1].js.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: privacy-policy.2498fbaa[1].css.2.dr, f75b65452a58d368fce13d99c2d3afb6b42cf6f2[1].css.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: privacy-policy.2498fbaa[1].css.2.dr	String found in binary or memory: http://getbootstrap.com/customize/?id=b09afa7b1b193aacab0e)
Source: answerBot[1].js.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: a85808487b46aeceab75a29f756d75f2d472499b[1].svg.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: js[1].js0.2.dr, gtm[1].js1.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: js[1].js0.2.dr, gtm[1].js1.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://assets.zendesk.com/hc/assets/default_avatar.png
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201506241250ng/Graphik-Light-Web.woff
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Light-Web.woff2
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Medium-Web.woff
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Medium-Web.woff2
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Regular-Web.woff
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Regular-Web.woff2
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Semibold-Web.woff
Source: style[1].css.2.dr	String found in binary or memory: https://az579219.vo.msecnd.net/201609071250ng/Graphik-Semibold-Web.woff2
Source: page-data[2].json.2.dr, BYWK6AWZ.htm.2.dr	String found in binary or memory: https://blog.tresorit.com
Source: component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js.2.dr, langs-res.8f761637[1].js.2.dr	String found in binary or memory: https://blog.tresorit.com/de/tresorit-unter-den-gewinnern-der-2020-gartner-peer-insights-customers-c
Source: BYWK6AWZ.htm.2.dr, page-data[1].json.2.dr	String found in binary or memory: https://blog.tresorit.com/remote-working-covid-19
Source: common.9b9686e6[1].js.2.dr	String found in binary or memory: https://blog.tresorit.com/tresorit-en-espanol/
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://blog.tresorit.com/tresorit-eurocloud-awards/
Source: component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js.2.dr, langs-res.8f761637[1].js.2.dr	String found in binary or memory: https://blog.tresorit.com/tresorit-named-a-2020-gartner-peer-insights-customers-choice-for-content-c
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://blog.tresorit.com/tresorit-named-secure-cloud-storage-leader-stratus-awards/
Source: js[1].js0.2.dr, gtm[1].js1.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/app-3f33fb9351b3136f5711.js
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/b8f1c4893a13786602fe25c2d0dbd06a2f48
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-home-home-
Source: service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-legal-cook
Source: download-terms[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-legal-down
Source: download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/framework-ac9b5dbfc53b5eded77d.js
Source: download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/polyfill-327c1c502b6b540c8684.js
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/03da77ae256df111ae9c077b12e26
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0cd4cb65d158da1e8ab263d245ef1
Source: 83720770[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35c
Source: 1946875062[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/23d4296b4480ec0ff58a85862cb4d
Source: 83720770[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/24cbe232df779373f7424da15f8db
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/26f64577d3594db2e3c1096425fb1
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/29637efd3df1bd7f934848d6c8065
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/30c4e70b2d9546ef2dd0759bb0777
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/342f9338c45e4946690f06f28eaef
Source: 1709926729[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/389a5475e47e92326ab49341fd320
Source: 83720770[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/3a56d1cd55bcbdde9e48db09d9ee6
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/443eac3d5268ce4e905957b990160
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/445022c9ab9f9dedd4e20ae377987
Source: 3071672662[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/47b6670e6b3e0f2887bbb24f1ac5a
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/47bf1d0b3487703219155fdfb08ad
Source: 402309515[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/4e3f8165304b4398be8e61e43f7df
Source: 1946875062[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/50e39322d8b2381eb13f16482a1c0
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/5203328a28c547510a0984c22e9d7
Source: service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/5d7aba925099f7e42412f1f70b8d1
Source: 1342033464[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/6245bd56895804a3c585635eb9a86
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/689b4d1e8ada2e45c9c42469bb19d
Source: imagestore.dat.2.dr, 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/70f4006c678dc75f1848df66e73a7
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/73d58f33b3468d1af79f3342e0004
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/75882fa044e7e04a681052956c519
Source: 4076581551[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/763dc4526375f817714e129b12482
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7cb9c545aecffce85078c924a5585
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a39
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/86680dc9fdb3da07d854408329ea4
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/91a2f639b2e66932c7e763f057bec
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/9754dc708c4b79dbcd7f7c1e2b1d7
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/97a84fc43ba0ffebf9020852e5a10
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/98ea779063ea9379f26e2bb1fdfe9
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/99e3ac2d99de37f6763c512fb303f
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/9faebbe4367830516815e1023dd63
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/a1a44b5ef39130c7acd04884392c4
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/a323173aba4bfd44f50b624bc91db
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/a7fbe8eea75f3ed56a126ed5da3fd
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/aa1105a8220687b9b26f5c6b35483
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/ae27ed2a85a67ff1d22f037d48728
Source: 402309515[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/b320c6ef45c38f7959c159cc62889
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/b47e559cd076d6d627e1e22f9f75f
Source: 1946875062[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/b510adb02ea25ec9a61318863daa0
Source: 402309515[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c2b517b8637eb724d0c2aecbc6d00
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c6db46075d562512e8c916c193239
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c7bca9ff3a8f9c51ba73dfa40b7ec
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c8f7fa3e11ad7bd5ed2f14e217758
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/cf8f735f40993a497079ca0b511f4
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/cfbf56c01390960cb6dd2cab8e5fa
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/d09232945e961e2cfbed571a45bba
Source: 4151256277[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/da720f8ac970e9d2be4f18d69ddd5
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/db7f6b82d404724fd4046ee497a32
Source: 1342033464[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583
Source: 83720770[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/e413cc86421d1b9e973d0c4fa5fb2
Source: 1825537731[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/e68aa63a408fd5685ea87c9f07580
Source: 402309515[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/ec70aed13483eb497c744990f2671
Source: 402309515[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/ef5f365c33ec558e69e6d2bdaacfa
Source: 1709926729[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fb99fe889f255327f1be2b2955931
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf
Source: download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/styles-407fe62976dc5310c43e.js
Source: download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/webpack-runtime-5820332ecd46b3d6b0ed
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/common/cookie-settings/cookie-icon-dark.da720f8a.svg
Source: imagestore.dat.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/common/favicon/new/favicon-16.86680dc9.png
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/common/userlike/bubble.589f1806.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/any-further-question.a084b4ad.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/consent.241d8e47.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/do-we-share-your-personal-data-with-third-pa
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-do-we-protect-your-data.efdf722c.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-do-we-use-your-data.e503980c.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-do-you-use-your-personal-data.b78ab9af.s
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-long-we-retain-your-information.29bfdd81
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/legal-obligation.d6c2c103.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/legitimate-interest.0f9152c8.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/necessary-for-provision-of-services.56e42b90
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/what-is-the-legal-basis-for-processing.bbcfc
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/what-kind-of-personal-data-do-we-process.7f0
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/where-do-we-transfer-your-data.2959abd5.svg
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/img/legal/privacy-policy/who-will-process-your-personal-data.63679477
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/js/common.9b9686e6.js
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/js/footer.ab1d79af.js
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/js/legal/privacy.b4028918.js
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://cdn.tresorit.com/webv9/js/notSupported.c1df0a21.js
Source: d06e007965a94ba1cc247b010f833a5bcc7aaaa74b350d11cde4de1691b9af7b[1].js.2.dr	String found in binary or memory: https://dq4irj27fs462.cloudfront.net/javascripts/userlike-production-2021.min.js
Source: download-terms[1].htm.2.dr, styles.38e3553779edc688b861[1].css.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: f75b65452a58d368fce13d99c2d3afb6b42cf6f2[1].css.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.3/customize/?id=5406af9303574a1abcb42c392e2dd76d)
Source: f75b65452a58d368fce13d99c2d3afb6b42cf6f2[1].css.2.dr	String found in binary or memory: https://gist.github.com/5406af9303574a1abcb42c392e2dd76d
Source: privacy-policy.2498fbaa[1].css.2.dr	String found in binary or memory: https://gist.github.com/b09afa7b1b193aacab0e
Source: api[1].js.2.dr	String found in binary or memory: https://github.com/antoinevastel/picasso-like-canvas-fingerprinting
Source: js[1].js0.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: download-terms[1].htm.2.dr	String found in binary or memory: https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
Source: style[1].css.2.dr	String found in binary or memory: https://github.com/philipwalton/flexbugs#1-minimum-content-sizing-of-flex-items-not-honored)
Source: download-terms[1].htm.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: privacy-policy.2498fbaa[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: js[1].js0.2.dr, gtm[1].js1.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: gtm[1].js1.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: style[1].css.2.dr	String found in binary or memory: https://prodfrontendcdn.azureedge.net/media/20180124/table/tick.svg
Source: style[1].css.2.dr	String found in binary or memory: https://prodfrontendcdn.azureedge.net/media/20180124/table/x.svg
Source: download-terms[1].htm.2.dr	String found in binary or memory: https://reviews.financesonline.com/p/tresorit/
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://rollbar-eu.zendesk.com/api/1/item/
Source: cookie-icon.71e6a142[1].svg.2.dr	String found in binary or memory: https://sketch.com
Source: gtm[1].js1.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://static.zdassets.com/ekr/snippet.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://status.tresorit.com
Source: script[1].js.2.dr	String found in binary or memory: https://subscribeapi.tresorit.com/v1/getlocation
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://support.tresor
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com
Source: script[1].js.2.dr	String found in binary or memory: https://support.tresorit.com/api/v2/help_center/
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/admin/arrange_contents?locale=en-us
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/admin/general_settings?locale=en-us
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/admin/language_settings?locale=en-us
Source: component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js.2.dr	String found in binary or memory: https://support.tresorit.com/hc/de/articles/360012204353-Tresorits-ISO-27001-Zertifikat
Source: 360016486620[1].htm.2.dr, BYWK6AWZ.htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articlRoot
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/216113777-Crash-course-on-Tresorit
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/216114397-Third-party-services
Source: BYWK6AWZ.htm.2.dr, component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js.2.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/360012204353-Tresorit-ISO-compliance
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/360016486620
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/360016486620-Legal-Statement-for-File-Previews
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/360016486620t
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/articles/360016486620vLegal
Source: BYWK6AWZ.htm.2.dr, page-data[1].json.2.dr	String found in binary or memory: https://support.tresorit.com/hc/en-us/categories/360000326593-Syncing-and-Uploads
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/hc/tracking/events?locale=en-us
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://support.tresorit.com/system/photos/360052587400/BaloghZs
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://theme.zdassets.com/theme_assets/228341/2c83919cb319fa605aa9452f423c0aeab4bc59ce.svg
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://theme.zdassets.com/theme_assets/228341/be2e559354dc5d4f02c2232182b5e754f7278ca5.png
Source: imagestore.dat.2.dr	String found in binary or memory: https://theme.zdassets.com/theme_assets/228341/f86205acf14e10b04442f20c8e648ccb82a15406.png
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/
Source: page-data[2].json.2.dr	String found in binary or memory: https://tresorit.com/acceptable-use-policy
Source: langs-res.8f761637[1].js.2.dr	String found in binary or memory: https://tresorit.com/blog/linux-version-tresorit-nicht-mehr-beta/
Source: common.9b9686e6[1].js.2.dr	String found in binary or memory: https://tresorit.com/blog/tresorit-en-francais/
Source: langs-res.8f761637[1].js.2.dr	String found in binary or memory: https://tresorit.com/blog/tresorit-linux-app-comes-beta/
Source: page-data[1].json0.2.dr	String found in binary or memory: https://tresorit.com/business/dropbox-alternative
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://tresorit.com/business/hipaa-compliant-cloud-storage
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/l
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/legal/download-terms
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/legal/download-terms7673fc84b46ac0ddd6448b/static/70f4006c678dc75f1848df66e73a7
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/legal/download-termsF
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/legal/download-termses/360016486620
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/legal/download-termses/360016486620448b/static/70f4006c678dc75f1848df66e73a7471
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/legal/download-termso-gYEzs6URB1A
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/legal/privacy-policy
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/legal/privacy-policyZTresorit
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/om/l/UhlFL#OuqBEbBjao-gYEzs6URB1A
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/om/l/UhlFL#OuqBEbBjao-gYEzs6URB1Awebv9/c3f721ed327673fc84b46ac0ddd6448b/static/
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/s
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/service-cookie-policy
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/service-cookie-policyWdtRWdtRtps://tresorit.com/service-cookie-policy
Source: ~DF17AF9889C49009D2.TMP.1.dr	String found in binary or memory: https://tresorit.com/service-cookie-policyes/360016486620
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://tresorit.com/xEnd-to-End
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/admin/billing/subscription
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/api/v2/brands/3273746.json
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/auth/v2/host.js
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/arrange?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/community_badges?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/community_settings?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/import_articles?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/search_settings?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/user_segments?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://tresorit.zendesk.com/knowledge/verification?brand_id=3273746
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://twitter.com/share?lang=en&text=Legal
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.treso
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoRoot
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoegal/download-termsRoot
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoegal/download-termses/3600164s://tresorit.com/legal/download-terms
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoegal/privacy-policyRoot
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoervice-cookie-policyes/3600164s://tresorit.com/legal/download-terms
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoit.com/hc/en-us/articles/3600164s://tresorit.com/legal/download-terms
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresoom/l/UhlFL#OuqBEbBjao-gYEzs6URB1ARoot
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresorit.c
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://web.tresorit.com/account/profile
Source: imagestore.dat.2.dr	String found in binary or memory: https://web.tresorit.com/favicon.ico
Source: langs-res.8f761637[1].js.2.dr	String found in binary or memory: https://web.tresorit.com/l#LwQBfXkFnt4a8psMae0AYw
Source: langs-res.8f761637[1].js.2.dr	String found in binary or memory: https://web.tresorit.com/l#hFzErWar_LNmdDSRVcY0Tg
Source: BYWK6AWZ.htm.2.dr, page-data[1].json.2.dr	String found in binary or memory: https://web.tresorit.com/l/MqNWD#2SlhIlHUadGOWv3H3sYoPg
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresorit.com/l/UhlFL
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresorit.com/l/UhlFL#OuqBEbBjao-gYEzs6URB1A
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresorit.com/l/UhlFL#OuqBEbBjao-gYEzs6URB1ARoot
Source: {29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://web.tresorit.com/l/UhlFL#OuqBEbBjao-gYEzs6URB1Aom/l/UhlFL#OuqBEbBjao-gYEzs6URB1ARoot
Source: script[1].js.2.dr	String found in binary or memory: https://webapi.tresorit.com/v1/weblogformdata/anonymwebsitelogs
Source: favicon-16[1].htm.2.dr, UhlFL[1].htm.2.dr	String found in binary or memory: https://webclient-cdn.tresorit.com/branding.8e00ebc3a4ce41800c92.css
Source: favicon-16[1].htm.2.dr, UhlFL[1].htm.2.dr	String found in binary or memory: https://webclient-cdn.tresorit.com/styles.38e3553779edc688b861.css
Source: download-terms[1].htm.2.dr	String found in binary or memory: https://www.capterra.com/p/150689/Tresorit/
Source: privacy-policy[1].htm.2.dr	String found in binary or memory: https://www.certipedia.com/quality_marks/9108644476
Source: BYWK6AWZ.htm.2.dr	String found in binary or memory: https://www.ey.com/
Source: download-terms[1].htm.2.dr	String found in binary or memory: https://www.g2.com/products/tresorit/reviews?utf8=%E2%9C%93&amp;filters%5Bcomment_answer_values%
Source: loadAnalytics[1].js.2.dr, loadAnalytics.50824ddb[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: js[1].js0.2.dr, gtm[1].js1.2.dr	String found in binary or memory: https://www.google.com
Source: gtm[1].js1.2.dr	String found in binary or memory: https://www.google.com/pagead/conversion_async.js
Source: js[1].js0.2.dr, gtm[1].js1.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: loadAnalytics[1].js.2.dr, loadAnalytics.50824ddb[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-55V995K
Source: 360016486620[1].htm.2.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?mini=true&source=Tresorit
Source: 2579993131[1].json.2.dr	String found in binary or memory: https://www.tresorit.com
Source: d06e007965a94ba1cc247b010f833a5bcc7aaaa74b350d11cde4de1691b9af7b[1].js.2.dr	String found in binary or memory: https://www.userlike.com
Source: page-data[1].json.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/Wz_lesO_dHg?autoplay=1
Source: en-us.359e81b3d20d98d9308e[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/answer-bot/
Source: en-us.359e81b3d20d98d9308e[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/embeddables/
Source: en-us.359e81b3d20d98d9308e[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/guide/#gallery
Source: en-us.359e81b3d20d98d9308e[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/guide/features/knowledge-capture-app/
Source: en-us.359e81b3d20d98d9308e[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/product/tech-specs/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 18.194.14.15:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.194.14.15:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.94.39:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.224.94.39:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 138.201.9.137:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 138.201.9.137:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.53.111:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.53.111:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.71.154:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.71.154:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.67:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.67:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.218.84.11:443 -> 192.168.2.5:49788 version: TLS 1.2

System Summary:

Source: classification engine

Classification label: mal56.win@3/203@21/11

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{29914A21-77F9-11EB-90E5-ECF4BB570DC9}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF47A9DD0DF317F8E5.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3276 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3276 CREDAT:17410 /prefetch:2

Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree
Source: C:\Program Files\internet explorer\iexplore.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1	0%	Avira URL Cloud	safe
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://web.tresorit.com/l/UhlFL#OuqBEbBjao-gYEzs6URB1A	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://web.tresoervice-cookie-policyes/3600164s://tresorit.com/legal/download-terms	0%	Avira URL Cloud	safe
https://web.treso	0%	Avira URL Cloud	safe
https://sketch.com	0%	URL Reputation	safe
https://sketch.com	0%	URL Reputation	safe
https://sketch.com	0%	URL Reputation	safe
https://web.tresorit.c	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tresorit.com	13.107.213.19	true	false	high
s3-r-w.eu-west-1.amazonaws.com	52.218.84.11	true	false	high
tresorit.zendesk.com	104.16.53.111	true	false	high
stats.l.doubleclick.net	74.125.71.154	true	false	high
api.userlike.com	138.201.9.137	true	false	high
cf.zdassets.com	104.18.72.113	true	false	high
www.google.co.uk	142.250.184.67	true	false	unknown
dq4irj27fs462.cloudfront.net	13.224.94.39	true	false	high
www.tresorit.com	13.107.246.19	true	false	high
linkprotect.cudasvc.com	18.194.14.15	true	false	unknown
cdn.tresorit.com	13.107.246.19	true	false	high
webclient-cdn.tresorit.com	unknown	unknown	false	high
web.tresorit.com	unknown	unknown	false	high
theme.zdassets.com	unknown	unknown	false	high
stats.g.doubleclick.net	unknown	unknown	false	high
static.zdassets.com	unknown	unknown	false	high
userlike-cdn-widgets.s3-eu-west-1.amazonaws.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
subscribeapi.tresorit.com	unknown	unknown	false	high
support.tresorit.com	unknown	unknown	false	high
webapi.tresorit.com	unknown	unknown	false	high
p18.zdassets.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://tresorit.com/service-cookie-policy	false	high
https://tresorit.com/legal/privacy-policy	false	high
https://support.tresorit.com/hc/en-us/articles/360016486620	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c7bca9ff3a8f9c51ba73dfa40b7ec	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/img/common/favicon/new/favicon-16.86680dc9.png	imagestore.dat.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/e413cc86421d1b9e973d0c4fa5fb2	83720770[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/img/legal/privacy-policy/who-will-process-your-personal-data.63679477	privacy-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/443eac3d5268ce4e905957b990160	BYWK6AWZ.htm.2.dr	false		high
https://blog.tresorit.com/remote-working-covid-19	BYWK6AWZ.htm.2.dr, page-data[1].json.2.dr	false		high
https://tresorit.com/legal/download-terms	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/99e3ac2d99de37f6763c512fb303f	2579993131[1].json.2.dr	false		high
https://www.ey.com/	BYWK6AWZ.htm.2.dr	false		high
http://dbushell.com/	application-79172500fb4dbec2484043d570946543[1].css.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/9faebbe4367830516815e1023dd63	2579993131[1].json.2.dr	false		high
https://reviews.financesonline.com/p/tresorit/	download-terms[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/d09232945e961e2cfbed571a45bba	BYWK6AWZ.htm.2.dr	false		high
http://getbootstrap.com)	privacy-policy.2498fbaa[1].css.2.dr, f75b65452a58d368fce13d99c2d3afb6b42cf6f2[1].css.2.dr	false	Avira URL Cloud: safe	low
https://web.tresoervice-cookie-policyes/3600164s://tresorit.com/legal/download-terms	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	analytics[1].js.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fb99fe889f255327f1be2b2955931	2579993131[1].json.2.dr	false		high
https://www.linkedin.com/shareArticle?mini=true&source=Tresorit	360016486620[1].htm.2.dr	false		high
https://tresorit.zendesk.com/knowledge/import_articles?brand_id=3273746	360016486620[1].htm.2.dr	false		high
https://webclient-cdn.tresorit.com/styles.38e3553779edc688b861.css	favicon-16[1].htm.2.dr, UhlFL[1].htm.2.dr	false		high
https://tresorit.zendesk.com/admin/billing/subscription	360016486620[1].htm.2.dr	false		high
https://web.treso	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/aa1105a8220687b9b26f5c6b35483	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/5203328a28c547510a0984c22e9d7	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/ef5f365c33ec558e69e6d2bdaacfa	402309515[1].json.2.dr	false		high
https://tresorit.com/service-cookie-policy	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://cdn.tresorit.com/webv9/js/legal/privacy.b4028918.js	privacy-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/js/footer.ab1d79af.js	privacy-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/73d58f33b3468d1af79f3342e0004	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/97a84fc43ba0ffebf9020852e5a10	2579993131[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c2b517b8637eb724d0c2aecbc6d00	402309515[1].json.2.dr	false		high
https://web.tresorit.com/favicon.ico	imagestore.dat.2.dr	false		high
https://tresorit.com/	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35c	83720770[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/86680dc9fdb3da07d854408329ea4	2579993131[1].json.2.dr	false		high
https://blog.tresorit.com/tresorit-eurocloud-awards/	BYWK6AWZ.htm.2.dr	false		high
https://webclient-cdn.tresorit.com/branding.8e00ebc3a4ce41800c92.css	favicon-16[1].htm.2.dr, UhlFL[1].htm.2.dr	false		high
https://tresorit.com/business/dropbox-alternative	page-data[1].json0.2.dr	false		high
https://support.tresorit.com/hc/en-us/articles/360016486620-Legal-Statement-for-File-Previews	360016486620[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/23d4296b4480ec0ff58a85862cb4d	1946875062[1].json.2.dr	false		high
https://www.tresorit.com	2579993131[1].json.2.dr	false		high
https://tresorit.com/legal/download-termses/360016486620	~DF17AF9889C49009D2.TMP.1.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0cd4cb65d158da1e8ab263d245ef1	BYWK6AWZ.htm.2.dr	false		high
https://support.tresorit.com/hc/en-us	360016486620[1].htm.2.dr, BYWK6AWZ.htm.2.dr	false		high
https://tresorit.com/s	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	privacy-policy.2498fbaa[1].css.2.dr	false		high
http://getbootstrap.com/customize/?id=b09afa7b1b193aacab0e)	privacy-policy.2498fbaa[1].css.2.dr	false		high
https://blog.tresorit.com	page-data[2].json.2.dr, BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/24cbe232df779373f7424da15f8db	83720770[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/47bf1d0b3487703219155fdfb08ad	BYWK6AWZ.htm.2.dr	false		high
https://tresorit.com/legal/download-termses/360016486620448b/static/70f4006c678dc75f1848df66e73a7471	~DF17AF9889C49009D2.TMP.1.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-legal-cook	service-cookie-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/26f64577d3594db2e3c1096425fb1	BYWK6AWZ.htm.2.dr	false		high
https://support.tresorit.com/system/photos/360052587400/BaloghZs	360016486620[1].htm.2.dr	false		high
https://www.zendesk.com/guide/features/knowledge-capture-app/	en-us.359e81b3d20d98d9308e[1].js.2.dr	false		high
https://tresorit.com/xEnd-to-End	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://sketch.com	cookie-icon.71e6a142[1].svg.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/webpack-runtime-5820332ecd46b3d6b0ed	download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	false		high
https://support.tresorit.com/hc/en-us/articles/360016486620	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF17AF9889C49009D2.TMP.1.dr	false		high
https://theme.zdassets.com/theme_assets/228341/2c83919cb319fa605aa9452f423c0aeab4bc59ce.svg	360016486620[1].htm.2.dr	false		high
https://tresorit.com/legal/privacy-policy	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ~DF17AF9889C49009D2.TMP.1.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/70f4006c678dc75f1848df66e73a7	imagestore.dat.2.dr, 2579993131[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/img/common/userlike/bubble.589f1806.svg	privacy-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/cfbf56c01390960cb6dd2cab8e5fa	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/a1a44b5ef39130c7acd04884392c4	2579993131[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/98ea779063ea9379f26e2bb1fdfe9	BYWK6AWZ.htm.2.dr	false		high
https://www.youtube-nocookie.com/embed/Wz_lesO_dHg?autoplay=1	page-data[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/e68aa63a408fd5685ea87c9f07580	1825537731[1].json.2.dr	false		high
https://cdn.tresorit.com/webv9/img/legal/privacy-policy/legal-obligation.d6c2c103.svg	privacy-policy[1].htm.2.dr	false		high
https://support.tresorit.com/hc/de/articles/360012204353-Tresorits-ISO-27001-Zertifikat	component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js.2.dr	false		high
https://support.tresorit.com/hc/en-us/articlRoot	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://web.tresorit.c	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://tresorit.com/service-cookie-policyes/360016486620	~DF17AF9889C49009D2.TMP.1.dr	false		high
https://cdn.tresorit.com/webv9/img/legal/privacy-policy/what-kind-of-personal-data-do-we-process.7f0	privacy-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/47b6670e6b3e0f2887bbb24f1ac5a	3071672662[1].json.2.dr	false		high
https://blog.tresorit.com/tresorit-named-secure-cloud-storage-leader-stratus-awards/	BYWK6AWZ.htm.2.dr	false		high
https://tresorit.com/acceptable-use-policy	page-data[2].json.2.dr	false		high
https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-do-we-protect-your-data.efdf722c.svg	privacy-policy[1].htm.2.dr	false		high
https://www.zendesk.com/product/tech-specs/	en-us.359e81b3d20d98d9308e[1].js.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/445022c9ab9f9dedd4e20ae377987	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c6db46075d562512e8c916c193239	2579993131[1].json.2.dr	false		high
https://www.capterra.com/p/150689/Tresorit/	download-terms[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/da720f8ac970e9d2be4f18d69ddd5	4151256277[1].json.2.dr	false		high
https://tresorit.com/om/l/UhlFL#OuqBEbBjao-gYEzs6URB1Awebv9/c3f721ed327673fc84b46ac0ddd6448b/static/	~DF17AF9889C49009D2.TMP.1.dr	false		high
https://web.tresorit.com/l/UhlFL#OuqBEbBjao-gYEzs6URB1ARoot	{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
https://getbootstrap.com/)	download-terms[1].htm.2.dr, styles.38e3553779edc688b861[1].css.2.dr	false		high
https://subscribeapi.tresorit.com/v1/getlocation	script[1].js.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168	BYWK6AWZ.htm.2.dr	false		high
https://gist.github.com/5406af9303574a1abcb42c392e2dd76d	f75b65452a58d368fce13d99c2d3afb6b42cf6f2[1].css.2.dr	false		high
https://support.tresorit.com/hc/en-us/articles/360012204353-Tresorit-ISO-compliance	BYWK6AWZ.htm.2.dr, component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/styles-407fe62976dc5310c43e.js	download-terms[1].htm.2.dr, BYWK6AWZ.htm.2.dr, service-cookie-policy[1].htm.2.dr	false		high
https://tresorit.zendesk.com/api/v2/brands/3273746.json	360016486620[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/img/legal/privacy-policy/do-we-share-your-personal-data-with-third-pa	privacy-policy[1].htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf	BYWK6AWZ.htm.2.dr	false		high
https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/4e3f8165304b4398be8e61e43f7df	402309515[1].json.2.dr	false		high
https://tresorit.zendesk.com/knowledge/search_settings?brand_id=3273746	360016486620[1].htm.2.dr	false		high
https://tresorit.zendesk.com/knowledge/community_settings?brand_id=3273746	360016486620[1].htm.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
18.194.14.15	unknown	United States	16509	AMAZON-02US	false
142.250.184.67	unknown	United States	15169	GOOGLEUS	false
104.16.53.111	unknown	United States	13335	CLOUDFLARENETUS	false
74.125.71.154	unknown	United States	15169	GOOGLEUS	false
52.218.84.11	unknown	United States	16509	AMAZON-02US	false
13.224.94.39	unknown	United States	16509	AMAZON-02US	false
104.18.70.113	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.51.111	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.72.113	unknown	United States	13335	CLOUDFLARENETUS	false
138.201.9.137	unknown	Germany	24940	HETZNER-ASDE	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	358597
Start date:	25.02.2021
Start time:	22:08:33
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 7s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@3/203@21/11
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://tresorit.com/ Browsing link: http://tresorit.com/legal/download-terms Browsing link: https://tresorit.com/legal/privacy-policy Browsing link: https://support.tresorit.com/hc/en-us/articles/360016486620 Browsing link: https://tresorit.com/service-cookie-policy Browsing link: http://www.tresorit.com/legal/download-terms
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 104.42.151.234, 204.79.197.200, 13.107.21.200, 104.43.193.48, 168.61.161.212, 104.43.139.144, 88.221.62.148, 40.88.32.150, 13.69.228.14, 13.107.246.19, 13.107.213.19, 152.199.19.161, 40.85.81.191, 13.64.90.137, 51.107.59.180, 23.218.208.56, 142.250.184.110, 142.250.184.104, 51.11.168.160, 216.58.206.36, 2.20.142.209, 2.20.142.210, 51.103.5.159, 92.122.213.194, 92.122.213.247 Excluded domains from analysis (whitelisted): tsgwprodtm-wa.trafficmanager.net, arc.msn.com.nsatc.net, az579219.vo.msecnd.net, fs-wildcard.microsoft.com.edgekey.net, vip1-par02p.wns.notify.trafficmanager.net, e11290.dspg.akamaiedge.net, skypedataprdcoleus15.cloudapp.net, www-bing-com.dual-a-0001.a-msedge.net, audownload.windowsupdate.nsatc.net, www.google.com, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, www.google-analytics.com, www.bing.com, tsgwprodtm-sa.trafficmanager.net, fs.microsoft.com, apimgmthsttmyl7xwn0xacd1phjowumknvse66qa9gaawpvhhp.cloudapp.net, dual-a-0001.a-msedge.net, skypedataprdcolcus17.cloudapp.net, swn-breeziest-in.cloudapp.net, skypedataprdcolcus16.cloudapp.net, webclient-ms-cdn.azureedge.net, skypedataprdcolcus15.cloudapp.net, t-0009.t-msedge.net, blobcollector.events.data.trafficmanager.net, cs9.wpc.v0cdn.net, au.download.windowsupdate.com.edgesuite.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, iecvlist.microsoft.com, wns.notify.trafficmanager.net, go.microsoft.com, dual.t-0009.t-msedge.net, www.googletagmanager.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, skypedataprdcolwus17.cloudapp.net, client.wns.windows.com, www-google-analytics.l.google.com, apimgmttmpbthyxnqjyhqq26dero2h98ruw4mek2kcjh9ks6aw.trafficmanager.net, ie9comview.vo.msecnd.net, www-googletagmanager.l.google.com, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, star-azureedge-prod.trafficmanager.net, webclient-ms-cdn.afd.azureedge.net, a-0001.a-afdentry.net.trafficmanager.net, go.microsoft.com.edgekey.net, dc.trafficmanager.net, waws-prod-db3-005a.cloudapp.net, dc.applicationinsights.microsoft.com, skypedataprdcolwus16.cloudapp.net Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8P7RGF10\support.tresorit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	767
Entropy (8bit):	5.199648481953217
Encrypted:	false
SSDEEP:	12:JsrUVQuGIBvKosfCRKjNyrMRhjfSP31IQR5rUVQuGIBvKosfCRKjNyrMRhjfSP3T:WUVQuGIcosfSKjNyrQJa31IQRZUVQuGW
MD5:	77E79089E84E4A362504660434ED4173
SHA1:	7AC0B198745FA003D4844EC41DC22026190559F7
SHA-256:	C4455008CD880CF752D44796E797B25113118C15F9C1DCA2DCE601EE804FD2AB
SHA-512:	643674B931E6D6A14DBAA137015C874317C25889DC32FD25530CBFAE70662AD3E818B7A416927386095E0EC75ED05F9079594A328AF6A9BF861235BDB9A9FA3C
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="hc:da39a3ee5e6b4b0d3255bfef95601890afd80709:recently_visited_articles" value="[{"id":"360016486620","url":"/hc/en-us/articles/360016486620-Legal-Statement-for-File-Previews","title":"Legal Statement for File Previews","viewedAt":1614319800285}]" ltime="62813936" htime="30870534" /></root><root><item name="hc:da39a3ee5e6b4b0d3255bfef95601890afd80709:recently_visited_articles" value="[{"id":"360016486620","url":"/hc/en-us/articles/360016486620-Legal-Statement-for-File-Previews","title":"Legal Statement for File Previews","viewedAt":1614319800285}]" ltime="62813936" htime="30870534" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\web.tresorit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	562
Entropy (8bit):	5.101545862544747
Encrypted:	false
SSDEEP:	12:JsrUqCMIcCMOIQWrsrUKd1yS+SYQWrUKd1yS+SYQWrUKd1yS+SYQQ:WUgvOIQK0U+11aQKU+11aQKU+11aQQ
MD5:	ED239E4F09726D05B0FEF5107686CB57
SHA1:	75E8072366A020B1A094594E1E846D8085690B8F
SHA-256:	B2F2344B692F2A47B69BEF32051E16175317F7FE71B6F92239AFD9C8E8348E1C
SHA-512:	59A4FCB49849958F684BDB7B2F28FFB86B667F3E097F408862F89772AFE56F1DFEB854AA62F39672C5F5EF6D7783D7EE7F1AD34F2BCBB4326F49B9D645492DCA
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="Thu Feb 25 2021 22:09:24 GMT-0800 (Pacific Standard Time)" value="Thu Feb 25 2021 22:09:24 GMT-0800 (Pacific Standard Time)" ltime="4002221232" htime="30870533" /></root><root></root><root><item name="id" value="67488E031CD5EFA35DC3A88F48A8F4E66E4D2EFE" ltime="4005091232" htime="30870533" /></root><root><item name="id" value="67488E031CD5EFA35DC3A88F48A8F4E66E4D2EFE" ltime="4005091232" htime="30870533" /></root><root><item name="id" value="67488E031CD5EFA35DC3A88F48A8F4E66E4D2EFE" ltime="4005091232" htime="30870533" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\tresorit[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	13377
Entropy (8bit):	5.090480216936313
Encrypted:	false
SSDEEP:	384:1cc/i++w2B66PPP22UkokoloOo//plFFF6:cpK5
MD5:	BB81CDF3A6BE4CE22B57DFAAE09ACBA0
SHA1:	71436E649B6362EDE780FE00BDCC0C3041DDA99D
SHA-256:	BF1235FE5FF398AFDF5BAC4D586AE0A3A0B66600C336E638DBB983CB732C1DC0
SHA-512:	6482F30BF38E9F8112D803F5FA9CDD4C83E66AB2AC47B8AB6752A3620D325D8859E2C198E07331D14073C7EBA190A37F784382ADF316F2F6435D3CB1DB8810F3
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="localStorageTest" value="ok" ltime="4254121232" htime="30870533" /></root><root><item name="localStorageTest" value="ok" ltime="4254121232" htime="30870533" /><item name="tsid" value="43197901790.rot7d1ftv84" ltime="4256841232" htime="30870533" /><item name="abTestVariations" value="{"businessLandingPage":{"value":"original","from":"20210129"}}" ltime="4256841232" htime="30870533" /></root><root><item name="localStorageTest" value="ok" ltime="4254121232" htime="30870533" /><item name="tsid" value="43197901790.rot7d1ftv84" ltime="4256841232" htime="30870533" /><item name="abTestVariations" value="{"businessLandingPage":{"value":"original","from":"20210129"}}" ltime="4256841232" htime="30870533" /></root><root><item name="localStorageTest" value="ok" ltime="4254121232" htime="30870533" /><item name="tsid" value="43197901790.rot7d1ftv84" ltime="4256841232" hti

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{29914A21-77F9-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8560580030427132
Encrypted:	false
SSDEEP:	96:riZJTZG2IWJtlbfbzDUKMLMqnlsyQyxfWDx6X:riZJTZG2IWJt5fbz9MLnl6sfWMX
MD5:	A7BCAE69F2B23EDCFA6DB5EBCFF32968
SHA1:	2F83911A2127E7AC7D4921A0888CF6137508F11A
SHA-256:	20D68269FAC3D57618A24376DF9E365CFE6254C1DC7891BDFBD14AF930C703BE
SHA-512:	66185425A58D3DD5EF6529BCAE9C1847CF87038D6F985D8EE454E7A799EA65D2CEF27DE35E8A4E8A141141F45A69AF0E0D835F302DEE2AF20D32A34B2FC604C3
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{29914A23-77F9-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	159374
Entropy (8bit):	2.452734538830774
Encrypted:	false
SSDEEP:	768:5lylzl8hlJl0sJOYbS0loEchesJ9YbSj+mQfdj7N2sNpjdI7N2sSa/YX8XDVmK69:7D8vo1x5GtvXwkCJbt
MD5:	3198E03B1CD78095FB1447E85783BD9B
SHA1:	107A9112A5214BEB48D8106927B96C5D39C32574
SHA-256:	F20183EF4EC3DEDF83BA03AAE83C071031698637E203A0EE0944639513D78419
SHA-512:	AA3A870670B95B8AB6053E5A5B0BBB3AB4FE87E79F62D9540641881257AC3D49F83D35A1FF67E7A859FDD30D9A3DC9EDBA6354CF30982B3493A3AE655DA4970B
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{29914A24-77F9-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5645507468967599
Encrypted:	false
SSDEEP:	48:IwxGcprtZGwpaKG4pQ+GrapbSrGQpK5G7HpRiTGIpG:rHZtTQq6wBSFAYT2A
MD5:	7FF2A283A91043DF3B685415CB5E67DE
SHA1:	B0A6D920AD47175E74623A4280610DBFA0C9D5EA
SHA-256:	670E07B0A7500770488BA5560E98A5B8C8823B388E752967721E1AB0EC62ADD4
SHA-512:	18A0E70AA307303919FCFFE212EC7AEA42F1EE249B9061CA037E3342FB4B9586A609F8524CB9F230F8A64C95CF9622854907B4883D5F44DFF0B96F1286258C26
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	11973
Entropy (8bit):	7.827836434063394
Encrypted:	false
SSDEEP:	192:6SF3uhg7wXyq/qOcx7v4UBreQVmiseVMQu12LP3lMeJq7KI4bUtLJRS6khNLROdb:6Cf7wXyqiXAKMQh36/7KIPJRghROdKW
MD5:	31C14C5F315C40D42474B187C11F1B85
SHA1:	F108562CF3591C4B9B0AB071DDBA52EEFC6BA7D6
SHA-256:	83CBBA80AB1E6940C24B35ED6095EAF23752C7A51D4E1DBAECF7E9B9F846C773
SHA-512:	493E316FCC960216A06F5F8E6F14B16283F1D37342FBEB443764B69100A665BDEE5AB7962D4D7958CB5630BE7782869ECB4516D635E26F1D6467445ACAAAF759
Malicious:	false
Reputation:	low
Preview:	$.h.t.t.p.s.:././.w.e.b...t.r.e.s.o.r.i.t...c.o.m./.f.a.v.i.c.o.n...i.c.o......PNG........IHDR.............?.~.....pHYs...........~....fIDATH..WKL.Q.......uG...e..n...6qcb..l.?...D`.F#..Ku.F.1Qc.....!.......C..P.\|B?$....3.....I&}..}..s.[..U.A....K..yx..gY.Ajq..3L.........OD.4...3..:X.3...o.P.J...o#IH.a......,{>1/.2$..R.AR].)w...?.s..Zw^......q.Y.m_..e...r[8.^...&p..-...A}c..- ......!.....2_).E.).j...v..m....ZOi..g.nW....{<n8.P......o.=$8.K..9\|$....@..v.P<..j..>.n.\|.e2.a&.0a......be.....C..f..E%-{......C..N..jXi.~c.C,t..T......r..{. .L)s..V...6%.(.#.!.]...H..H$.R...^R..A.61(..?Y..>...(Z.....Qm.L.2.K.Z.Ic..........C..2!...(....."..Go..>.q...=...$%.z`....T..&....PH.h.Z!=....z..O........,VVV.1..f*.C..J..]EE..K..k..d.#.5.....`2yT!.}7....~.,...zs.....y.T...V......D.....C2..G..@%.72Y...{oJ."@..^.h.~...f..!a.D...6...H.a\|.3.... [>......]7U2....].......PU....Wejq..in..g..+.p<.QH.....j[............Q...p _.K....1(...+...bB8..\ra....v.l...(.....w.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1150006653[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5672
Entropy (8bit):	5.002338673488062
Encrypted:	false
SSDEEP:	96:uxpQpPpFp5pXpupqp+WZpXDpwp7ptpUqpU8epD1p7hdpHpEpspHptpcp/pUZpwpj:ypQpPpFp5pXpupqp9pXDpwp7ptpRpFeQ
MD5:	8D14361571EEBA4CBB3EEA5BCBB34AAB
SHA1:	7C870DB8C3180F68D7386950A85AC6D5950B84A5
SHA-256:	A27C9BCB8A83CE9F8E7EABB4100E55A21D154FBA2E3DAA8B056A6D66239A67EF
SHA-512:	78AF7CFA7C1B098244B8D4289C1A5E29C4BC6F05698B101DAC3FD4FEEE4F7C225FE83369F6CABFF85FE6F40DC1B70949D2F5D03A9F6B40BCC565DE29B6EDA65A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1150006653.json
Preview:	{"data":{"capterra":{"childImageSharp":{"fixed":{"width":112,"height":26,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/97611/capterra.png","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/97611/capterra.png 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/4a0b2/capterra.png 1.5x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/a0082/capterra.png 2x","srcWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/3c4a5/capterra.webp","srcSetWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/3c4a5/capterra.webp 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/3e739/capterra.web

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1342033464[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	5.072757191653649
Encrypted:	false
SSDEEP:	24:YgHGpZni7n2spEZWpEZNpEZrpEZwTpEZjIpEZj1pEZxqpEZwr:YNpZiz2sp/pcpKpdTpvpmpHpdr
MD5:	1A637E3CC128959885C97826DC43E5A4
SHA1:	757314EE7D6B42E2644C9168D5E2B70C5512A182
SHA-256:	749E1E8B59359DD68A4F84A05090AC2E440B08301283307125B6F14E131BCCFD
SHA-512:	39C87E3A1B39BE40215882ACFEF0569CD3A275B090B60A92526DFE67CDA26675833480301D51B472B29F949B0CFD470D841AF423F648782F1D7864CA38F57B98
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1342033464.json
Preview:	{"data":{"bubble":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/6245bd56895804a3c585635eb9a86a7e/bubble.svg"},"miklos":{"childImageSharp":{"fixed":{"width":40,"height":40,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583d95/f1827/miklos-denes%402x.png","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583d95/f1827/miklos-denes%402x.png 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583d95/7c014/miklos-denes%402x.png 1.5x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583d95/bd9af/miklos-denes%402x.png 2x","srcWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583d95/4bdd1/miklos-denes%402x.webp","srcSetWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/stati

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1455295141[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10580
Entropy (8bit):	5.036998928916191
Encrypted:	false
SSDEEP:	192:hpVpSprpqpkphprpgpcprpmkptpkphp9pppycpyrpy3cpy30pybpySpy5pyZqrpr:hpVpSprpqpkphprpgpcprp5ptpkphp9I
MD5:	558177428F5E4CC34F4D2179FC1FBCD3
SHA1:	A93A39333E1D043F1B13AFB82979D28EDB9F3995
SHA-256:	95370C6BFECAC0A1CE76E2181F33B9E8287C5DF3DB3FAD1E0CD47DF4584188FE
SHA-512:	32EAE6C8CECBD84FA00D4712676C6AC6B3F3AC9CDD3A4069B1103C2D6525500BFAFD1DF3C51BF14E67F7C8E4C5ABC5E6D1AD3CC1DFE00B4BFD1402B561D88022
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1455295141.json
Preview:	{"data":{"gartner":{"childImageSharp":{"fixed":{"width":104,"height":83,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/7eadd/gartner-peer-insights.png","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/7eadd/gartner-peer-insights.png 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/7a146/gartner-peer-insights.png 1.5x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/82325/gartner-peer-insights.png 2x","srcWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/c3560/gartner-peer-insights.webp","srcSetWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/c3560/gartner-peer-insights.webp 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1709926729[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	4.961511854848957
Encrypted:	false
SSDEEP:	48:Y/tp7D2Dp7OPp7hp7Dhp7fpVp74p7qhp77Xp72gp7WAxxg9p31:SpH2DpgptpHhpXpkpGhpnXpKgpSt9p31
MD5:	F3A0EA28C46CB3539C0ADEDB9ED7F6D5
SHA1:	82EA75C7D39E80A43CC69B159BA5A580AF9D1BB8
SHA-256:	2ED60D72816F5738BB372179B767D30182FC74B5A836E200EC6B799F9AA79281
SHA-512:	38E25794F8A910E1C13E4B7F0E078596412176D5B82CDFD9B2869C17475E6BDF3FAB4E03D4CFC095EDEECF5EF00C9CCDC3DBA23CF84AD6CAA873CCB789DEEA08
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1709926729.json
Preview:	{"data":{"whitepaper":{"childImageSharp":{"fluid":{"aspectRatio":1.09375,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/0cbfd/whitepaper.png","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/d95f3/whitepaper.png 70w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/c50b6/whitepaper.png 140w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/0cbfd/whitepaper.png 280w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/50a03/whitepaper.png 396w","srcWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/6bbac/whitepaper.webp","srcSetWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/f87cb8198aee8ccecfabb4ed9b1ba637/58

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1732750696[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8572
Entropy (8bit):	5.046955316884369
Encrypted:	false
SSDEEP:	192:2pQC9pQCBpQCqpQC5pQC8pQCopQCLCpQCHpQCUpQC8pQC1pQCipQCvpQCTpBlpBk:2pQWpQCpQhpQOpQhpQBpQICpQCpQtpQZ
MD5:	591A306188B7DE044F6BCA8F1786E072
SHA1:	DE9F12901CB7B41BC4848E598C218FEB7FCD547F
SHA-256:	5AE6929AD9E6FCFCAA73262E1EECE659FBCD2680989E56498C336521D6145D53
SHA-512:	F246826883B0A3C0170C76B325925F498F673B1BF19ED281DA65BC3A7B3F1E4A463EF5AC451AB6675A0382A19F7C94EE30E76EF57D3DF817BE796E91225A5EE9
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1732750696.json
Preview:	{"data":{"winHeroUs":{"childImageSharp":{"fluid":{"aspectRatio":1.7685185185185186,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/a1d63/hero-image-win-us.png","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/e36da/hero-image-win-us.png 191w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/84975/hero-image-win-us.png 381w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/a1d63/hero-image-win-us.png 762w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/a59a0/hero-image-win-us.png 1143w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/a4107/hero-image-win-us.png 1524w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1825537731[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	5.024972755397377
Encrypted:	false
SSDEEP:	3:YBE5GdealCpftRzDpANXMzcadASSUTxICBlRR2HKcZ9mGchddURjAIMdL3H1Y:Yg9DpAP6TuCBl+ZQhddGOi
MD5:	45299BD878BBE6165DC904A25BD8F182
SHA1:	9918010904755320B062EA95449B522BDF83A1AD
SHA-256:	698490F5907D6B21548C0B4FF10A982220FE1785D7B08A6104BDF11842CBD93D
SHA-512:	963268D431F85F74D40E47658A4B2E7AA0DFB7B4C89784E9BEF8A05A83C85C4F72A7CB67D2B2D71D692AFFB918B2DF19076E77461BC7A6AFBBCB8ECB7915DB28
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1825537731.json
Preview:	{"data":{"cookieIcon":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/e68aa63a408fd5685ea87c9f07580883/cookie-icon.svg"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\1946875062[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	473
Entropy (8bit):	5.085276475896308
Encrypted:	false
SSDEEP:	12:YgwpHcpAP6KCYXVwYYVlJLABCs4xpAP6KCcM/UJcpAP6KCD9dyzIDUH:Yg5pymt9M4xpLpRgGUH
MD5:	7998FF7701293538600F4F7CCDBC52D5
SHA1:	07FCAC1A48C9699342B49BD5DEC92CD472CE8D68
SHA-256:	31882B9EF5C1717F03F86B929EB832BF429F43FD54B9A66C7461F902F6E56D58
SHA-512:	31F95FBF6A297B2D7349D25E27A1ECF62EB55C8FD3D55C0475BB54C31847D2764E3D52F0DA29E58CB0775CA8ADE92EB123E0DCDB5AD5A116B06A8088AB5BA60B
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/1946875062.json
Preview:	{"data":{"iconBusiness":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/b510adb02ea25ec9a61318863daa0445/icon-business.svg"},"iconEnterprise":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/23d4296b4480ec0ff58a85862cb4d430/icon-enterprise.svg"},"iconPersonal":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/50e39322d8b2381eb13f16482a1c097e/icon-personal.svg"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\24-39909103d7ca3bcf6d60[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2911
Entropy (8bit):	5.136907092625975
Encrypted:	false
SSDEEP:	48:lD58ulaWxwGo23mfN/rbGyKs+vlqnSk86peqJBRE2BFOenamt5:0WqpMBhXFkeEfBxB3
MD5:	D80A1DA5099747B53F10F8849B6A26AF
SHA1:	0E735751326088749E4ABF295F6F5B2D481F5223
SHA-256:	5CBDF04CA5A226DD5C356E8B626FDF7D9F87FF88E4D223E7B476F28FDA0C12E6
SHA-512:	7F45744F36D9220EC40322A03BC72EC3E4A99F3858AD357DE9F60E2494F1DF17C3B27E9C150E9A5FB243086CFA793D13E2A97827E335F7EBBDBB5EA0DBFE7893
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/24-39909103d7ca3bcf6d60.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"7pAe":function(e,a,t){e.exports={userlikeCustomTab:"Chat-module--userlikeCustomTab--3ENgY",chat:"Chat-module--chat--1p8iV",conversation:"Chat-module--conversation--tF1O_",header:"Chat-module--header--2i2hN",account:"Chat-module--account--3C4y2",pic:"Chat-module--pic--1wr2p",text:"Chat-module--text--2peYs",name:"Chat-module--name--1PR2c",role:"Chat-module--role--GM_Ke",close:"Chat-module--close--2zGhN",body:"Chat-module--body--3MTRY",message:"Chat-module--message--1l57m",bold:"Chat-module--bold--2Xz30",date:"Chat-module--date--fHfpq",input:"Chat-module--input--1D42v",opener:"Chat-module--opener--Fecec",active:"Chat-module--active--16_SF",chatSlideIn:"Chat-module--chatSlideIn--2fcof",slideIn:"Chat-module--slide-in--sF-cM"}},"QdD+":function(e,a,t){"use strict";t.r(a),t.d(a,"default",(function(){return u}));var l=t("TSYQ"),n=t.n(l),c=t("Wbzz"),s=t("9eSz"),m=t.n(s),r=t("q1tI"),o=t.n(r),d=t("7pAe"),i=t.n(d);function u(e){var a=e.cont

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\2579993131[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2964
Entropy (8bit):	5.17066358829365
Encrypted:	false
SSDEEP:	48:YILKplpNtpcpLDpCpPe0pc0P8pe8DplpIdjpaW3pgFtpOUEcepWaJpW:JLKplpNtpcp/pCpPe0pR8peQplpItpJI
MD5:	49363DC1BB3EE47E00650683862CFFC1
SHA1:	6E66298F103FE335C825411BD53245A2CD750E77
SHA-256:	CC314C62158F1D3431170B14D1D76894283CFCE20064FAAF485FC7F29B3AC7B7
SHA-512:	DAC6A662CBF4DF86A06521033BA3B64AC6416961AFF3FE5970CC9F19F77BB5A807BE84C2D707C69BA2CCB70D8A47E5D8C16AB0D7BFC9F964CDBB7124EB4ECAA9
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/2579993131.json
Preview:	{"data":{"site":{"siteMetadata":{"siteUrl":"https://www.tresorit.com"}},"favicons":{"edges":[{"node":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/70f4006c678dc75f1848df66e73a7471/favicon-128.png","childImageSharp":{"original":{"height":128}}}},{"node":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/a7fbe8eea75f3ed56a126ed5da3fddeb/favicon-120.png","childImageSharp":{"original":{"height":120}}}},{"node":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c6db46075d562512e8c916c193239d45/favicon-144.png","childImageSharp":{"original":{"height":144}}}},{"node":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/a1a44b5ef39130c7acd04884392c4df2/favicon-152.png","childImageSharp":{"original":{"height":152}}}},{"node":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/86680dc9fdb3da07d854408329ea4391/favicon-16.png","

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\3071672662[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	5.018560220715043
Encrypted:	false
SSDEEP:	3:YBE5W/W71QlCpftRzDpANXMzcadASSUTxICBlRR2HKRSzeqTnpNd0HHXRDU5uejB:YgXBDpAP6TuCBlfqeqtNd0nBI5uA+y
MD5:	1AB4807B8911DEF6419C0A4F990272FA
SHA1:	8969EAE8E9935F9A0F3055081DF27F7D83AEB768
SHA-256:	A6AD9D02121ABF14A80E37FD884669D8B854C45D45A52A87803A9FBDD3E759FF
SHA-512:	79FA30E08CD5733420085BC3118402C9A80ABF989943049BB0DED69204350B59D9C6FD031C024BC396F124CFF88BB7C82068E991806E7146EB82F3408B297D0D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/3071672662.json
Preview:	{"data":{"swissFlag":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/47b6670e6b3e0f2887bbb24f1ac5aab2/positioning.svg"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\3765314863[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	14563
Entropy (8bit):	5.020266637659591
Encrypted:	false
SSDEEP:	384:7pUpypzpUdp/pfpLpHpjpDpRp/prpdpkpvdpgpqpWpepGpypMpWdpFp3pCpVdpeW:7pUpypzpap/pfpLpHpjpDpRp/prpdpk6
MD5:	8F9B40E464CE8B6DEFD1198F37B122D1
SHA1:	AF528F60D71F129B70B42A22C36ACD306FEB515F
SHA-256:	0F3287C1417633BD256BF234680B38807112498DB29A47A3EE7AD7F89C82FB8D
SHA-512:	E854624BE98AE3FC41DE1741C8208FD2F3AB5A349EEB465712E4DD373D4A144E394E9D34390637F4D7D1CCAE44138D6B5C0D0A2597B502C34D7717864E4F8D90
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/3765314863.json
Preview:	{"data":{"images":{"edges":[{"node":{"childImageSharp":{"fluid":{"aspectRatio":1.0775862068965518,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/db496/image.jpg","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/aa114/image.jpg 125w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/ab045/image.jpg 250w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/db496/image.jpg 500w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/4a8ca/image.jpg 750w,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/a99cd/image.jpg 1000w","srcWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/59fd7/image.we

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\402309515[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	794
Entropy (8bit):	5.135121388171615
Encrypted:	false
SSDEEP:	12:YgppAP6KCJ1ZVP/eHfpAP6KC7bGnLpAP6KCyXJZPpAP6KCja9NHM+hnCW/pAP6K/:Ygpp5LefpL+LpiPPpINs+t5/pdpUr
MD5:	7AE05CBC1AB04B82CAE5ADCE2EDDFE9A
SHA1:	71B0A36D3C302DC456032AAC61B20257FDC5723A
SHA-256:	36095C338B68A3370621188F2CC8AAB596CD3542977C2DB1B28DA6FE7771461E
SHA-512:	49A4DCA5442C1967F259C4A348DDFB8862132C8DFBCAE44650C9E127936D6F26FAC803E692F30CD0E1ACB70F7391B72FB0151917387B40E9E0A11D071CEA81E1
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/402309515.json
Preview:	{"data":{"compliance":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/c2b517b8637eb724d0c2aecbc6d00071/compliance.svg"},"complianceDe":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/4e3f8165304b4398be8e61e43f7df906/compliance-de.svg"},"mobility":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/ef5f365c33ec558e69e6d2bdaacfa473/mobility.svg"},"onlineStorageAndBackup":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/ec70aed13483eb497c744990f2671b9e/online-storage-and-backup.svg"},"secureFileSharing":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/b320c6ef45c38f7959c159cc6288984a/secure-file-sharing.svg"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\4151256277[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	164
Entropy (8bit):	5.037689101248309
Encrypted:	false
SSDEEP:	3:YBE5GdealCpftRzDpANXMzcadASSUTxICBlRR2HKfdvpfXc3m0IKjAIMdL8EUbHS:Yg9DpAP6TuCBlVdKW0e8NbHS
MD5:	B44DE592583AD638FB822C77349329F4
SHA1:	CB4A325A1D7872DB639F162C0B7B7B4F5C3D6F60
SHA-256:	971CF921CBE4263E90238524718DB1451F924EAC604DD5F928D6B2F6DA1C03D9
SHA-512:	F68CD84019208348F0572F578CDB3FCF16E6AA0AF610A1EE0928BE2069E31A8AB0B0234E00AC3097AFA1AB9D1FB952E2853735C3D1AFAC01A8561F112C0926D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/4151256277.json
Preview:	{"data":{"cookieIcon":{"publicURL":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/da720f8ac970e9d2be4f18d69ddd5a13/cookie-icon-dark.svg"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\50-41798991f0245f49fd42a9b8b7a99c0c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10734
Entropy (8bit):	5.3202368213455635
Encrypted:	false
SSDEEP:	192:r8U6ZtZcJkhkVmumKWEv/+oYrNQqBloHwN2oGBv:D6lNhGTmKWEv2oYJQON2JZ
MD5:	844792DE8F2A47539575700CFCF8E569
SHA1:	A6963CB1462C641022E174BF5FCF443A61AFA302
SHA-256:	0D075C5AA765130E1836818C370C3F7CEF41BFFACF5B6F11054188854E67C436
SHA-512:	62DACB7C23156A6AD3803B40963151CC72C2CF7E06DF6C5A6E9269865626AD3A382C82953F55907DE8D414CC3EE4B4B39BF3FB18C1361E6540C7A2E3516092BD
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/50-41798991f0245f49fd42a9b8b7a99c0c.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"0efe4d2baa95b81d2a6c":function(n,e,t){"use strict";t.r(e),t.d(e,"default",(function(){return s}));var a=t("8af190b70a6bc55c6f1b"),o=t.n(a),c=t("aa002c9ecdc30c05062b"),i=t.n(c),r=t("a8f8105d2d40178f277f");function s(){return r.a.get("current_brand_active")?o.a.createElement(o.a.Fragment,null,i()("txt.help_center.views.shared.setup_mode_notification.message")," ",o.a.createElement("a",{href:"/hc/admin/general_settings"},i()("txt.help_center.views.shared.setup_mode_notification.general_settings"))):o.a.createElement(o.a.Fragment,null,o.a.createElement("strong",null,i()("txt.help_center.views.shared.brand_inactive_notification.heading"))," ",i()("txt.help_center.views.shared.brand_inactive_notification.message")," ",o.a.createElement("a",{href:"/agent/admin/brands",target:"_blank"},i()("txt.help_center.views.shared.brand_inactive_notification.brand_settings")))}},"525da436d046ad36d588":function(n,e,t){"use strict";t.d(e,"a",(functi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\83720770[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4216
Entropy (8bit):	5.082446619349375
Encrypted:	false
SSDEEP:	96:udpqFpqCpqVpqxpq4pqlpqypqmWNpl29Epl29Tpl2Y4spl21Hpl21epl2Rm90p1a:8pIpHpopYpnp+pdplkpQEpQTpIspEHpd
MD5:	612D9A5E752C4680D3B6FAFE8E200BDC
SHA1:	8547555F475DEB380C38E7DF87DBDC4396E6521B
SHA-256:	7758957301A93AF4B84BBDE47F72D30DF0B8382D9A448DD0BC6E0A11408B44CD
SHA-512:	E4EBBC56360648BF107E124A808B155FED88198D7E958882760A47A5785ABAF3ECEAB5422955753C6A0C63868830D03387F20C8448A914B797C3CFBEFA38C4BA
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/sq/d/83720770.json
Preview:	{"data":{"capterra":{"childImageSharp":{"fixed":{"width":80,"height":26,"src":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35ccdf/37231/Capterra%402x.png","srcSet":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35ccdf/37231/Capterra%402x.png 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35ccdf/d49f3/Capterra%402x.png 1.5x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35ccdf/d7f6a/Capterra%402x.png 2x","srcWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35ccdf/a719b/Capterra%402x.webp","srcSetWebp":"https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe7c6b35ccdf/a719b/Capterra%402x.webp 1x,\nhttps://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0e863e9b7fe90f19120dfe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BaloghZs fia[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x79, frames 3
Category:	dropped
Size (bytes):	2972
Entropy (8bit):	7.7950527981305555
Encrypted:	false
SSDEEP:	48:TU1b2CxclkjqiVqCR7QbiAViJ/4EyN5/0oYdCzFkwuhkKcc5/Mvg4OyPYAHxazZ:TULJ5VZMBVilBC/0RdCKwKtc2Uvg/IYl
MD5:	4E9731D3D9A19B89C13EF7013F80D8FD
SHA1:	548111BAC1A4521793EC2AD4C10C0CD01B5CE609
SHA-256:	BB6AA2496FB0E3D495A0D21A355260DD95CD8C980DEB877B407C73BC56EA0414
SHA-512:	F6BCACE402B9328DD369EF83D423552C7F20225790CD8D5C26E6C21517FF50850B7C0CBAA085429D808C6B2359B5A972AD371C9A4C951AA9EE431E61CCDA6E9B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................O.P..".........................................<..........................!.1.."Q.Aa..2q.#Br...$.CRbs.............................................................?....VY....1.H..}:t.A.R..8....?....,$.N..z.j...c..y:.....{.o....YW..g~...j..\|O.!1.5-...N...VI./...).2.!H.QB..2....@..}A..B...@L..I>R....2.....PI...#....R.T.Nu..7)...T.t).O..`...m(..J]s..4.B(....XR~X......L...H.\....K4J.B.x...IBT..U.....u>..Gm.!...Gp.#....Q.=C.1...v'S.....r....Q..b;g.^"K.W.n.Gl.nQ$....A9.?M..)..Q-)iTy.-..I8W~?.#...i..E...,W.>....5Z"..e\|..H.P3.....+f.1\.[A....?.\|D..J.....g'.....u..r....2PZt.R..8.....py.O2...B.RB.......A[V...:.g..]..~H.G?....Ey...=...MY.M+.-'@O..%..,...X.P.;.....j.........?..Rh..vF...O....{....\.....]RT..'r..<....E;p}..z.MM.h.....mS.B.GC..J.B..Y....RG.AZT..S...$4..RH8.......}....yq.:..dmfH>..<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	35662
Entropy (8bit):	5.289565799540458
Encrypted:	false
SSDEEP:	768:eIEo7x4VqTHUlEulsfi+P1u0C9tJXTPDbYYFfct/1VMp9JddY8PmE4k7DgGSB:e2yYYac1TssM
MD5:	6C6281C15CBC981BC05942BAC40BCD7E
SHA1:	6015D314D852ECC0C0158731D8E06724805E38E5
SHA-256:	0D3118E306C6A26F1D2EFCB698984E6922C5E7E155C94A84760E36E5592A3C11
SHA-512:	7DB423D081304661C5981C6FC6D37CE2F32DBE8B8C38A9D2791DBD6110DB36261FA249A1662F667B58AA5B1A88446AD65D90B6EFBBEE0DA1378BD39BB1FE0DB2
Malicious:	false
Reputation:	low
IE Cache URL:	https://support.tresorit.com/cdn-cgi/bm/cv/669835187/api.js
Preview:	/*. @license. * Copyright (c) 2015 Andr. Cruz <amdfcruz@gmail.com>. * Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:. * The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.. * THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\assets-locales-en-json-es5.15e477332eeac65055a6[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	279280
Entropy (8bit):	5.390712961939544
Encrypted:	false
SSDEEP:	6144:90E8U1mq2gCbDgo2K2Yoo1XTv/rAzR0TXlVJaifSePEdS:aE8uEDezEVJaA
MD5:	AFF39F646CED83CB984CE5F0B1210FE2
SHA1:	990C0934461E664AFECD5F7EB3511D2765AF53E5
SHA-256:	59A5551EE946383BBB2F960B44B62DEEA599B500473FDD9E761693D9B7F50E58
SHA-512:	076C22A65FED84FD20ED021C60CC20D7E4726BBF6139D44C62534C38927F92F5AA1040EC4B5FD059911D3CFDDD20B52F8CBEDDC0022B8D10E86013E97399B1E7
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/assets-locales-en-json-es5.15e477332eeac65055a6.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[10],{J2pw:function(e){e.exports=JSON.parse('{"WEBCLIENT_HEADER_INSTALL":"Download desktop app","WEBCLIENT_HEADER_UPGRADE":"Upgrade","WEBCLIENT_HEADER_ACCOUNT":"Account","WEBCLIENT_HEADER_ACCOUNT_ADMIN":"Admin Center","WEBCLIENT_HEADER_ACCOUNT_LOGOUT":"Sign out","WEBCLIENT_HEADER_ACCOUNT_MY_ACCOUNT":"My Account","WEBCLIENT_FOOTER_COPYRIGHT_PRE":"Copyright","WEBCLIENT_FOOTER_COPYRIGHT_POST":"2019 Tresorit. All rights reserved.","WEBCLIENT_FOOTER_TERMS_OF_USE":"Terms of Service","WEBCLIENT_FOOTER_PRIVACY_POLICY":"Privacy Policy","50_NGO_DISCOUNT_PROMO":"50% for Nonprofits","ACCOUNT_BUSINESS_PLAN_HEADER":"Plan for teams","ACCOUNT_CHANGE_PLAN":"Change plan","ACCOUNT_DEVICES":"devices","ACCOUNT_FEATURES":"Features","ACCOUNT_LINK_CREATION_LIMIT":"Links","ACCOUNT_SOLO_PLAN_HEADER":"Plan for individual use","ACCOUNT_UPGRADE_TO_SOLO":"Upgrade to Solo","ACCOUNT_USAGE":"Usage","ACTIVITY_LOG_ACTIVATE_USER_SSO":"{{target}} activated Single Sign-On

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\common.9b9686e6[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with LF, NEL line terminators
Category:	downloaded
Size (bytes):	319935
Entropy (8bit):	5.305039545119538
Encrypted:	false
SSDEEP:	6144:2vq5WMnvzMsM76m3JvDtKLYxEnGIPlFlEeM:zWyvzs2YxEPI
MD5:	9B9686E6E2137D5CB1FA9570274CD55F
SHA1:	001517BC14E018058502AFA728ECB3DD597C48A9
SHA-256:	D24131E8A465E23E80861A8F4E4395753371940BE27BFBF6E8FF79D47B5F80C9
SHA-512:	00318BD219AEC6233AC470E2B5684183CA8E5AD4067A8AE7CB32ACD46D113F0A9A69C66EB855F24F88F412CC43B09BF26367712C9C47EE067C7AE27EA1B8E2F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/js/common.9b9686e6.js
Preview:	// Copyright . 2017 Tresorit. All rights reserved...!function(e,a){"use strict";var t=function(e){if("object"!=typeof e.document)throw new Error("Cookies.js requires a `window` with a `document` object");var r=function(e,t,o){return 1===arguments.length?r.get(e):r.set(e,t,o)};return r._document=e.document,r._cacheKeyPrefix="cookey.",r._maxExpireDate=new Date("Fri, 31 Dec 9999 23:59:59 UTC"),r.defaults={path:"/",secure:!1},r.get=function(e){r._cachedDocumentCookie!==r._document.cookie&&r._renewCache();var t=r._cache[r._cacheKeyPrefix+e];return t===a?a:decodeURIComponent(t)},r.set=function(e,t,o){return(o=r._getExtendedOptions(o)).expires=r._getExpiresDate(t===a?-1:o.expires),r._document.cookie=r._generateCookieString(e,t,o),r},r.expire=function(e,t){return r.set(e,a,t)},r._getExtendedOptions=function(e){return{path:e&&e.path\|\|r.defaults.path,domain:e&&e.domain\|\|r.defaults.domain,expires:e&&e.expires\|\|r.defaults.expires,secure:e&&e.secure!==a?e.secure:r.defaults.secure}},r._isValidDate=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	25449
Entropy (8bit):	5.255230318315465
Encrypted:	false
SSDEEP:	384:JOD3uNuwXsfNNstumbhS1eUIKXrd6SbNElS:Jg3g6fNN4umbhS1eRE6wNqS
MD5:	460036FD6564388D83B2D1B8C23B8D28
SHA1:	83975687B174C6114CDD2DE7DD9878CA934B0306
SHA-256:	6C0352DB64AD45CD2C245BAF5447B5E311A3F60EB443F489276D1AEB9F186ED8
SHA-512:	F8827B30EAFAA3F0B23D3B2B16AB990ACC6851CB32AD124AAB9FAFB101461940BC8EE15CAD51C0E6220575AA8DAF60C0A26BCD998DD1071AA3DE81F8910DE835
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-home-home-tsx-ceb28d0ba224b443c0a8.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[12],{"1OFS":function(e,t,a){"use strict";a.d(t,"a",(function(){return _}));var n=a("TSYQ"),r=a.n(n),o=a("DFqO"),l=a("ZrBS"),i=a("80li"),c=a("Hflr"),s=a("XC/i"),u=a("Ef8o"),m=a("Wbzz"),d=a("q1tI"),g=a.n(d),f=a("mv+N"),v=a("3LuZ"),b=a("65uz"),E=a("9eSz"),p=a.n(E),k=a("p2nU"),h=a.n(k);function N(e){var t=e.text,a=e.company,n=e.name,o=e.role,l=e.link,i=e.logo,c=e.image,s=e.video,m=e.openModal,d=Object(u.b)().userEventLogger;return g.a.createElement("div",{className:h.a.content},g.a.createElement("div",{className:h.a.contentInner},g.a.createElement("div",{className:h.a.logo},g.a.createElement(v.a,{src:i,alt:a+" logo"})),g.a.createElement("blockquote",null,g.a.createElement("p",{className:h.a.text},t),g.a.createElement("p",{className:h.a.author},g.a.createElement("strong",null,n)," - ",o)),g.a.createElement(f.b,{to:l.url,target:l.isBlank?"_blank":"_self",rel:l.isBlank?"noopener noreferrer":void 0,onClick:function(){l.event&&(null==d\|\|d.tra

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\component---src-templates-individuals-individuals-tsx-4324e80631c261efd3ab[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	25012
Entropy (8bit):	5.197582036671899
Encrypted:	false
SSDEEP:	384:iNu5jAsrtEaSQudLwwaYml6xSMroOhVvs6rxMLIOoB:cxcttHudLwwaYmSVvs6TR
MD5:	43B1E19710C324784E352ECFA1DADCD7
SHA1:	AB1F48BAA0B198DF8AC7E25C964637F02827B666
SHA-256:	AA9757ECCA5F9468FD26A03ABBD44BF7980E10E47E22FE7E99562A7F11C81530
SHA-512:	75406E3D05D7EF70919FB207D70C74F1401BF8A6194DB89235289AB0A14619B95154844D4E47E793E1BD126C53542B42786B161A2CE379BB0B4EA9B2DD940F40
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-individuals-individuals-tsx-4324e80631c261efd3ab.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[13],{"1YrQ":function(e,t,a){e.exports={hero:"Hero-module--hero--3qSwO",content:"Hero-module--content--QO8rg",text:"Hero-module--text--3I3u7",buttonContainer:"Hero-module--button-container--38vs9",btn:"Hero-module--btn--3_Wdg",pic:"Hero-module--pic--RMkKD",illustration:"Hero-module--illustration--17DEA",arrow:"Hero-module--arrow--3jDDS",arrowMobile:"Hero-module--arrow-mobile--ipxht",arrowDesktop:"Hero-module--arrow-desktop--2zzhN"}},"6YxU":function(e,t,a){"use strict";a.d(t,"a",(function(){return s}));var n=a("Ef8o"),r=a("q1tI"),o=a.n(r),c={platform:null,hideDefault:!0},i=Object(r.createContext)(void 0);function l(){var e=Object(r.useContext)(i);if(!e)throw new Error("Platform compound components cannot be rendered outside the Platform component");return e}function s(e){var t=e.children,a=Object(n.b)(),l=Object(r.useState)(c),s=l[0],u=l[1];return Object(r.useEffect)((function(){if(a.userAgent){var e=a.userAgent.detectDeviceOs();u((fun

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\cookie-icon-dark.da720f8a[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1165
Entropy (8bit):	4.447544908593748
Encrypted:	false
SSDEEP:	24:tBH0jxMY2SHteZRQV5a2DwXtMciF1zV7jF2gP5cEbC02sz94F01rR3jlW2J/2JtU:3C2+t4QS2KTmj752i5cEbZ2sRI0I2t20
MD5:	DA720F8AC970E9D2BE4F18D69DDD5A13
SHA1:	7DE554E601C2E4E1E8DE0F064D2BD7EFD8AB060B
SHA-256:	37A059EADAC09281080B77A7B0402841BB4354A5E0FEDFF84FEAF2E29B560EB0
SHA-512:	15D63EB7F920B3D55BCA0D0EBA69E7847E8E651A36F340FA8B9292E442426B06F829529BEAB764D009892D8E49D71D3BF22CED029ED94DEBB6C47FDB9FDF133C
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/common/cookie-settings/cookie-icon-dark.da720f8a.svg
Preview:	<svg width="30" height="30" viewBox="0 0 30 30" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M18 1c-1.105 0-2.105.448-3.172 1.172A3.987 3.987 0 0012 1a3.982 3.982 0 00-3.039 1.4A4.985 4.985 0 007 2c-1.38 0-2.63.56-3.536 1.464A4.984 4.984 0 002 7c0 .696.142 1.359.4 1.96A3.983 3.983 0 001 12c0 1.105.448 2.105 1.172 3.172A3.987 3.987 0 001 18a3.982 3.982 0 001.4 3.039A4.985 4.985 0 002 23c0 1.38.56 2.63 1.464 3.536A4.984 4.984 0 007 28c.696 0 1.359-.142 1.96-.4A3.983 3.983 0 0012 29c1.105 0 2.105-.448 3.172-1.172A3.987 3.987 0 0018 29a3.982 3.982 0 003.039-1.4c.602.258 1.265.4 1.961.4 1.38 0 2.63-.56 3.536-1.464A4.984 4.984 0 0028 23c0-.696-.142-1.359-.4-1.96A3.983 3.983 0 0029 18c0-1.105-.448-2.105-1.172-3.172A3.987 3.987 0 0029 12a3.982 3.982 0 00-1.4-3.039c.258-.602.4-1.265.4-1.961 0-1.38-.56-2.63-1.464-3.536A4.984 4.984 0 0023 2c-.696 0-1.359.142-1.96.4A3.983 3.983 0 0018 1z" stroke="#444" stroke-width="2" stroke-linejoin="round"/><path d="M10 18a2 2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dayjs-locale-en-es5.827a93210d7f5294a6a4[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	323
Entropy (8bit):	5.127608117155282
Encrypted:	false
SSDEEP:	6:lD3r1daZuric7PUrQPRBNjgvXIQ24DKLyis+pHMkzc945Vtpcr8PeX/Hqgmo:lD71AZeicLU4XNoXA4Myis+psCQ4rtCP
MD5:	0910C02CF18A98A483D7CB9BD51392E4
SHA1:	9AA528E232451114C344913640C14E57D5AB8560
SHA-256:	FB924A9FDBCB9E7A2BD0FDC9BC1E632126B1359DCC13D006DE2B5A845BF0BACF
SHA-512:	F7DAC9CFB09FEC5D09DBF19604E379E812841D2ACA6F2369544A0BF757E59C94255356376617C8CA2231E58F006922C1C49421ED543A36C0DC1D82A1B8A6F057
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/dayjs-locale-en-es5.827a93210d7f5294a6a4.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{njAx:function(e,_,n){e.exports=function(){"use strict";return{name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_")}}()}}]);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\deployment-slot[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:lCM6n:0M6
MD5:	7F2BEE169A2E7EF2E495C1F63D224CBF
SHA1:	25B6EE7DAF4EDB980E31FD73D817DDBCF4DC460E
SHA-256:	F7E18CE4BC1B97F3D56ED3C7CB931FA84721290CBEC68B034ADEB142BCD72C5B
SHA-512:	7577AFC28997ABC46DFA92F41671499AEA3ED685C29A763CD4A1179FE6720A561531EBBFD9F24263B36AC581E3F0DA60415CDCBEE3A92B59F578DC71C45299DD
Malicious:	false
Reputation:	low
Preview:	..production.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon-16.86680dc9[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	703
Entropy (8bit):	7.664045198801064
Encrypted:	false
SSDEEP:	12:6v/786+wEZmkNu3a/pitKHIpQ/3BiMeEQ1jfujibJ3racJq7W0Y:6cSdC/33ehjf7M4qq0Y
MD5:	86680DC9FDB3DA07D854408329EA4391
SHA1:	9F0825BAE13CDAF2125F642900524516F3721A17
SHA-256:	2D31FFDD81FD140969BF4BA949954328657F2B6D921A7FCBFC11150A9C30EE2D
SHA-512:	B6F9AD58B688DACBC1EDEE766A78C2F29C8B493D99B48CC1B166C8BA873C34569BB41C75EE2CFEF665F154E2D14E2178C4B52791731974BFBC767767A75F97D7
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/common/favicon/new/favicon-16.86680dc9.png
Preview:	.PNG........IHDR................a....gAMA......a....vIDAT8.uS.KTQ.?...P.6L.HX.........VD.i...l..b6.+.j!-.$".E.N......E..Ff.4-.s.P.w.}.s..0.s...w............T.3 4A.....C..Bq....LL-....4.(..i....N..f/.)Uc.]..w.iT.10&.0B.P.Q..Z.A.W.....g'N.vDe....R..T.$. 5........~.>-.'..D...:@(..*O..Mg.."...V.$.X..<.\|..]3K.g..`.E.a...k.0......h.u...............F.\|....,[.....c.zk&....1.!..;..sL..z.....~.d.iX@.Y......d.t...;.!...x.\..0C......o........'..........-.t.1..v.p.......+....h.........AH.....q....>...3c...o\g.Z..5.M.T.7].n..,~+.\Bg!.@...1a....g..d..6.G.RG..1.p.5....%`..^i....f...K.b.:#..JV.j...R.....]..W-.T.ly...+.$-4Jr.UL.)....y5...#..>....x.}^g.b........9.S......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon-16[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	10672
Entropy (8bit):	5.802017824895588
Encrypted:	false
SSDEEP:	192:gi4E/6f41+nrnIdr6RjLJDUdKqOPy1rZmg3mS2O:3W2UrYr6Jg111p
MD5:	D9678DA248B07B315DCD6E7DF0473BAF
SHA1:	26DADEA158157DFC938D9E68C5E272E02A11BEA7
SHA-256:	EEE07DF5AE9873335A9E9E72FB9A0569387360C9DEC838001F3A0D7929E7EAE7
SHA-512:	D1B66C583C3C1C35635CB4E717BD39C1195EBF110634932724EFB2911DC52204944C93FD560B7FADBF6E328FC5D4F5DEF3FD6BDA24526C83B799D5D2AE3B9B10
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head><base href="/"><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1"><title>Web Access - Tresorit</title><meta name="description" content="Tresorit is an encrypted cloud storage service that lets you store, sync and share confidential documents."><meta name="keywords" content="Tresorit, link, file, folder, encrypted, content, browser"><meta property="og:site_name" content="Tresorit"><meta property="og:title" content="Web Access - Tresorit"><meta property="og:type" content="website"><meta property="og:description" content="Tresorit is an encrypted cloud storage service that lets you store, sync and share confidential documents."><meta property="og:image" content=""><link rel="icon" href="assets/favicons/favicon-16.png" sizes="16x16"><link rel="icon" href="assets/favicons/favicon-32.png" sizes="32x32"><link rel="icon" href="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	242238
Entropy (8bit):	5.476426657787261
Encrypted:	false
SSDEEP:	3072:5AFAaX1abD0w3lB0Sl5y9n/c+/n52AFAaX1abD0w3lB0Sl5y9n/c+/n5O:5aA22pDl5I3saA22pDl5I3M
MD5:	1FD28197C0A84D836B50ADA54E1C47AC
SHA1:	D7F44B75BCA1FFB320E2D13BDA4355A335703F3D
SHA-256:	DBEB4AE1A561A92CB715029F5E7B3F14A64D1806F54382DB91F3416CFF9B0495
SHA-512:	08421F982D6D137B6E1E624B5DD6502DF157E569900022DC042FC0A542C562C9F16038F9FBF528C4BB25E20DBF7A7E42C8DCA84A8210FC4A9AA0BA6A900C7ABA
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"13",. . "macros":[{. "function":"__e". },{. "function":"__e". },{. "function":"__e". },{. "function":"__r". },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"signup_conversion_value". },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"google_ads_conversion_id". },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"google_ads_conversion_label". },{. "function":"__u",. "vtp_enableMultiQueryKeys":false,. "vtp_enableIgnoreEmptyQueryParam":false. },{. "function":"__c",. "vtp_value":"623229727". },{. "function":"__c",. "vtp_value":"SgvLCIiD-dkBEJ_2lqkC". },{. "function":"__c",. "vtp_value":"FcDSCJiB-dkBEJ_2lqkC"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\host[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	26217
Entropy (8bit):	5.433118927101112
Encrypted:	false
SSDEEP:	768:TKPLg/q/ikAGFKVQI/uot5x09SQMDLddB3y:Gg/MikAZ7/uol09SQT
MD5:	88B056726ACE593C6CFE0E92543DF20F
SHA1:	03F75F933BF33AFDA199296FF0CD19830274553B
SHA-256:	0A7006DBB5E976B8D61720007902DE944905E9CAEF9ADA0FA309B610A29872DD
SHA-512:	D9CCAD3F0F9C21F17BE321E0983BE906CEC37040224535E1F223074290243239781261B8E9E9C3C80CE7C6C8B95DE80F1EF5C960DEC1D1247FE0804D8C0DF38C
Malicious:	false
Reputation:	low
IE Cache URL:	https://tresorit.zendesk.com/auth/v2/host.js
Preview:	!function e(i,o,s){function t(r,a){if(!o[r]){if(!i[r]){var l="function"==typeof require&&require;if(!a&&l)return l(r,!0);if(n)return n(r,!0);throw new Error("Cannot find module '"+r+"'")}var d=o[r]={exports:{}};i[r][0].call(d.exports,function(e){var o=i[r][1][e];return t(o?o:e)},d,d.exports,e,i,o,s)}return o[r].exports}for(var n="function"==typeof require&&require,r=0;r<s.length;r++)t(s[r]);return t}({1:[function(e,i,o){function s(){var e=(new a).getBrowser();return e.name.toLowerCase()}function t(){return new Promise(function(e){document.requestStorageAccess().then(function(i){e(i)}.bind(this))["catch"](function(i){console.log("ACCESS REQUEST REJECTED: "+i),e(!1)}.bind(this))})}function n(){return document.cookie="_zendesk_thirdparty_test=true; SameSite=None; Secure",-1===document.cookie.indexOf("_zendesk_thirdparty_test")?(console.log("Third-party cookie not allowed"),!1):(console.log("Third-party cookie allowed"),document.cookie="",!0)}function r(e){var i=s();if(e.forceStorageAPIFor

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\how-do-you-use-your-personal-data.b78ab9af[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	353
Entropy (8bit):	5.196845441254399
Encrypted:	false
SSDEEP:	6:tnrLnl/kmc4slZDsKMjR9eOISYyq3BYro+39VhFZKxEWP8h69VhFZFmqE:trLnl/kjxMjf+ZyqxIr3P0xEWP8oPjs
MD5:	B78AB9AFE7A45EBCD9B4BE6497DB21C7
SHA1:	F828124D162CDE461D414E54030ACB9AA2F58A99
SHA-256:	CD61D7B2F26A3254E459F44AD600D64FFE455BABE721DF80799FE5743CF1BB2B
SHA-512:	EA11E275E4F9E3EC29818FBF6E67DB68E15189CDF53EB9289C498CCCC6399F0027C9EE2E73F8CE8EFDDFDAC23CABDF75A4DDAFBC96BED96846C35DFD8FEE922D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-do-you-use-your-personal-data.b78ab9af.svg
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#E54" d="M23 11V2H9v4H7V0h18v13h-5v-2z"/><path d="M1 9v11h5.237l2.733 3.374L11.5 20H17V9H1z" stroke="#E54" stroke-width="2"/><path d="M5 13h6M5 16h8M12 5h8" stroke="#E54" stroke-width="2" stroke-linecap="square"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\how-long-we-retain-your-information.29bfdd81[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	357
Entropy (8bit):	5.146757389029633
Encrypted:	false
SSDEEP:	6:tnrRNAoMTq3I9mc4slZYvdGoAF9Y3ZSKsKMjR48RsLZ5YT6cnHJQN9KxWuuW6mqE:trrtXI4EixxMjq8RqH+ZHK9KxWuu3s
MD5:	29BFDD8173DB6EE436F3DF57D7E2A4E1
SHA1:	E656D1A598BD15A97737240BF536D15EEA57341B
SHA-256:	04B5DD2223550C789D17EB7EFDE4BE9C301EAE6FF500182BD40655E87B4EA350
SHA-512:	11F4B50885AD8DE352BC7AC304F3867C0ABCA65640113AC4600D6334621203F7241198C0C4F616A5031C7B38C90F84269C9646254D96AC5BBC9E342BB9ECA575
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-long-we-retain-your-information.29bfdd81.svg
Preview:	<svg width="27" height="27" viewBox="0 0 27 27" xmlns="http://www.w3.org/2000/svg"><g transform="translate(1 1)" stroke="#0AB5C2" stroke-width="2" fill="none" fill-rule="evenodd"><path d="M.625.625h6.686l3.592 2.395.158.105h13.314v21.25H.625z"/><circle cx="12.5" cy="13.75" r="6.25"/><path d="M12.5 11.625v2M12.5 13.75h2" stroke-linecap="square"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	85515
Entropy (8bit):	5.497588057897327
Encrypted:	false
SSDEEP:	1536:cI+XQ2gUM0fz6f9axUJ0H68SvPay6AA3Vs/m90mM1X9ZKPVVSqPmBhfiDL1i:cI+XQ/UM0BxUuKUVseamzeBoi
MD5:	460B294F69F99F63D4841C140C5786FF
SHA1:	0A93ABDCDBD64BC38F58E39A9FE17B1E620A9359
SHA-256:	25570965C700060083E7225D1E83C43D1BAC51F58E48851332A57C088E6A83BF
SHA-512:	382B6D4BFC2A34479D92BB2FEAF87E9A0C440D51FF99F754F6DFE86AEA46CB7E81F01D41478890146A05B4B79A530A666A98F907BCC4EC83E4B9AFE8A51F6BCC
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"64",. . "macros":[{. "function":"__e". },{. "function":"__dee". }],. "tags":[{. "function":"__asprv",. "vtp_globalName":"google_optimize",. "tag_id":6. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":["macro",1]. },{. "function":"_eq",. "arg0":["macro",0],. "arg1":"optimize.callback". }],. "rules":[. [["if",0],["add",0]],. [["if",1],["add",0]]].},."runtime":[].....};./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},da="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\miklos-denes@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 40 x 40, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1317
Entropy (8bit):	7.774038675281654
Encrypted:	false
SSDEEP:	24:D+Ruu3sD03IVFRatr2FBScbD+CUaP6WKahP3DzGZ6MdWokYtWKFl1:D+DUMUQc7UH8/DugokYZl1
MD5:	9AB368361AFD2E8F6EA7E8F7E109D8AD
SHA1:	CCD44D7183DF381001303341DDE94CC644AE0660
SHA-256:	FC5B6FA7D9EC0B1F858D8A3EFAB807EF87A6C51C0AA7C3084915AFE039490B43
SHA-512:	307DBC3671627B755757D37C9E3ABC99035C3ECA659F18B8FED2D48D8CB81ABD13F35AAD7FBD781AFE113B48582DC8378D201CDF3AC98C07117B4EBB31556EAF
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/dd401b36eda69d61d7854d2069583d95/f1827/miklos-denes%402x.png
Preview:	.PNG........IHDR...(...(...... H_....PLTEGpL............................................. >c..>Vt..........................t.aR)Ef...&Fi...X\|................................s..........w...~j.....gS.....rSD....\I.wh..Q8+....q\lI8.z....]@3......~j....lV..~ymj+..>,#......P(...r....#tRNS.=Z..$....z...........z..Z......fE....IDAT8.u..r.H...e@.m'.J.H.c...1...@B..v..Y.....mIU......a^..woru9......5.~..v..B.!.q...7(..<..._Qv8zG..9B. H.$.."7.(..?...!`. +...h...Ql..oH....B.............{.y/...5...-..X..t.8.....73f4.4IX$4.$..%$...n.:\|..<.....,.o............;K.nXld......@Y...TU...S..5...f.&../.'.L.6.j...Y..A..1../...+U..E[o.....e?B...R.[E..r..mz...pL.0......a.Q..y.A.........:......,.uhy.Fz.'.....p...z..2u\|..u.x...y.\|.r-.U..{..C.<T..l;...%s.r.VG.!..C...tM.r.p..:....F.q..6vbl...`L.ozKWz....`.0...&tu.p.........)?......Vu7. MM...0...(.fnMl....X...6.....H*.."........Y.Xz..+fBA(Ry.....Z'E.f...ZC...GS....)..U.$E..^i.+.#.....q..v.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\necessary-for-provision-of-services.56e42b90[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	4.960046454877614
Encrypted:	false
SSDEEP:	6:tnr0Qol8C9mc4slZs493TtsKM3flxuXcUV1Kd7FobXtMujeVdWEZlYJ08eK9m:tr0dmSlRtxM3/xUnSQXt9jeVhgeK9m
MD5:	56E42B90EB42589D4FE1B5299A6CB08D
SHA1:	E6E8AD08D4835D996ADC55BF79BB31B58CAD5EAD
SHA-256:	C91AA71D69731E8019E96E2A7947C2427C4EEEB79B5C0CF027EE8E64CC04FFA2
SHA-512:	11AEC5FA555236F23614AEF860536F774868EA9D5E6B10B075CE5F9785F713A480F1F3D3F1BE334485B608518A02271E13755FC9F62D8D0A32958C3FDE368C37
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/legal/privacy-policy/necessary-for-provision-of-services.56e42b90.svg
Preview:	<svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"><g stroke="#444" fill="none" fill-rule="evenodd"><circle cx="10" cy="10" r="9.5"/><path d="M5.5 6.339l4.5-1.8 4.5 1.8V10c0 2.018-.85 3.465-2.286 4.469A6.984 6.984 0 0 1 10 15.488a6.998 6.998 0 0 1-2.214-1.02C6.352 13.462 5.5 12.015 5.5 9.999V6.339z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\page-data[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	26287
Entropy (8bit):	5.153745923613452
Encrypted:	false
SSDEEP:	768:xqRswTaaVpJpyp3pHptpgp3pqp5p6p6pxptp9p4phpKpypgpRp2pdpYpVplp+pmA:xqRpTaabHg5JT65Y3ooPTjS/4g6vsDyk
MD5:	82B641A642E66DFB638082AD66BB4820
SHA1:	C3559609CF94F2E6ADDC2801EFFC3C57ABB0D163
SHA-256:	2EB93605E0A8C89F943EE7434D93422E1D8F57B004DBBA8A0E7AA2E070F963BE
SHA-512:	BE5746C3DF1494A5278A2A89508E384DC06FE6490F77AA61B69128116E47D9BFE699199276D8B10AC10B1AD63A28738145374746C29B712E732BF05875736525
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/page-data/index/page-data.json
Preview:	{"componentChunkName":"component---src-templates-home-home-tsx","path":"/","result":{"data":{"page":{"home":{"hero":{"title":"Secure cloud collaboration, made easy","subTitle":"Tresorit is the ultra-secure place in the cloud to store, sync, and share files within your organization and with external partners.","ctaText":"Get Started","videoButtonText":"Why Tresorit?","videoUrl":"https://www.youtube-nocookie.com/embed/Wz_lesO_dHg?autoplay=1","ctaDescription":"Include your collaborators right away."},"positioning":{"title":"Tresorit is a Swiss, end-to-end encrypted, zero-knowledge content collaboration platform designed to safeguard the digital valuables of individuals and organizations with the highest classification in the cloud."},"useCases":{"items":[{"title":"Share files securely with anyone, inside and outside your organization","text":"Replace risky email attachments with encrypted links. Tresorit empowers you to send and receive files safely from anyone . even non Tresorit users

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\polyfills-es2015.db045ca2fed4b9a0e77e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	260398
Entropy (8bit):	5.38346368416316
Encrypted:	false
SSDEEP:	3072:7NKTXGLoVSBHvMux/QBPH5/AROEYg4jDIgrMsLjN:7c7+oEBHDSvSYZnIgrfN
MD5:	8AB90F1B4AF39347D8EF5FC86E926483
SHA1:	60D826EAA55E3CCFA39208B88F6FB727C44B6AE3
SHA-256:	D2BF6FD61CBB1B7EADB13BB37E222E5F4B72C728C05B839545DF17C13E0EA51B
SHA-512:	639255A0E34E9FC5018FEA07E618ADF7F9F9C7189C391A96A259BEB1D5D3A9B9B7D830C261685A3690513A034064D8DAB1D61CBCFA43A7F192FA9B66164C4325
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/polyfills-es2015.db045ca2fed4b9a0e77e.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[44],{"++zV":function(t,e,r){var n=r("I+eb"),o=r("eDxR"),i=r("glrk"),a=o.toKey,s=o.set;n({target:"Reflect",stat:!0},{defineMetadata:function(t,e,r){var n=arguments.length<4?void 0:a(arguments[3]);s(t,e,i(r),n)}})},"+2oP":function(t,e,r){"use strict";var n=r("I+eb"),o=r("hh1v"),i=r("6LWA"),a=r("I8vh"),s=r("UMSQ"),u=r("/GqU"),c=r("hBjN"),f=r("tiKp"),l=r("Hd5f"),h=r("rkAj"),p=l("slice"),d=h("slice",{ACCESSORS:!0,0:0,1:2}),v=f("species"),g=[].slice,y=Math.max;n({target:"Array",proto:!0,forced:!p\|\|!d},{slice:function(t,e){var r,n,f,l=u(this),h=s(l.length),p=a(t,h),d=a(void 0===e?h:e,h);if(i(l)&&("function"!=typeof(r=l.constructor)\|\|r!==Array&&!i(r.prototype)?o(r)&&null===(r=r[v])&&(r=void 0):r=void 0,r===Array\|\|void 0===r))return g.call(l,p,d);for(n=new(void 0===r?Array:r)(y(d-p,0)),f=0;p<d;p++,f++)p in l&&c(n,f,l[p]);return n.length=f,n}})},"+FBT":function(t,e,r){r("NV22")},"+M1K":function(t,e,r){var n=r("ppGB");t.exports=function(t){var

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\polyfills-es5.e6a74a61b1a07f8bf861[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	355220
Entropy (8bit):	5.384675303595292
Encrypted:	false
SSDEEP:	3072:BM9zHHPoFiMznPcW0jFYr0I2BJjWNvKNjstgrjeo/DXkg:BM9voFPMFY3gJjuvy4yj/
MD5:	2E637929139B23A8DD5CCCE1BA753C5E
SHA1:	41A7CABFC93D1802FFE2CFFA93B2D59820171B34
SHA-256:	157031D5813B2BC308D1269B6C5F4D9F0C96B4FC4FE1F6894111DB26A7B8C0BC
SHA-512:	FCC29ADC52254754CAC6868DD91270ED40B9C2891EADBAE559DF75FDC4DAF8BF13009B7749EEC76F3D8B419A91FBAE7F06A163464338EF9DB87F9E245628AD73
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/polyfills-es5.e6a74a61b1a07f8bf861.js
Preview:	!function(){function t(t,r){var n;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(n=function(t,r){if(!t)return;if("string"==typeof t)return e(t,r);var n=Object.prototype.toString.call(t).slice(8,-1);"Object"===n&&t.constructor&&(n=t.constructor.name);if("Map"===n\|\|"Set"===n)return Array.from(t);if("Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n))return e(t,r)}(t))\|\|r&&t&&"number"==typeof t.length){n&&(t=n);var o=0,i=function(){};return{s:i,n:function(){return o>=t.length?{done:!0}:{done:!1,value:t[o++]}},e:function(t){throw t},f:i}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var a,u=!0,c=!1;return{s:function(){n=t[Symbol.iterator]()},n:function(){var t=n.next();return u=t.done,t},e:function(t){c=!0,a=t},f:function(){try{u\|\|null==n.return\|\|n.return()}finally{if(c)throw a}}}}function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\privacy-text-only.a1b7b9c6[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	5.187096963892858
Encrypted:	false
SSDEEP:	3:RF9VmDD0USjmXM3kliDfqeGFfjg5I8L8jOkADLM1XCKJR20gJYRWPHXM+9/sE6hb:j9/USj6l9v5jgWBmWVbDRWP8O07Nf
MD5:	A1B7B9C62CBEB0B60F23B6FDEC176985
SHA1:	BC01F3ECFE193EF85E5903882A4A35018699657A
SHA-256:	04E2BB4415753942C421C0AF3F97397E2398FA760C126282D6ABE2EF7A22214B
SHA-512:	B12FE3C64FC64EC810FDB5D965EBF1D260A0E70006BFD9ED4355F6BEADC94C344B2B079C605DFE0C7C42482833D3A0794FDF1D3FFD133C89337EA81D9DA2552D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/js/legal/privacy-text-only.a1b7b9c6.js
Preview:	// Copyright . 2017 Tresorit. All rights reserved...!function(){"use strict";-1<window.location.href.indexOf("text-only")&&(document.getElementsByTagName("body")[0].className="text-only")}();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\privacy.b4028918[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	9279
Entropy (8bit):	5.058758672551952
Encrypted:	false
SSDEEP:	192:2SrPqi7FwEFlNQq/WJI3wvNFVRK+3cC7Dcvu:2K7awNSJI3w1FVRRcCPcW
MD5:	B402891810004E3F5E610996ECAA3A21
SHA1:	BC3273B5947A201981C520D04AF154DEC8B2529A
SHA-256:	216E288B66450C6AE5178D58C1F3C272715F88EC32175CADAC8F09A868DD0FAB
SHA-512:	4603B8BC457B0F6647021FDFDD570E7845DEF0F9730A0A832C57174D43BD7AA31EF116AB3F4F9532CE25BFC2436B2EB22D2F0C4F005EC8EE2BD8AED1E9D56030
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/js/legal/privacy.b4028918.js
Preview:	// Copyright . 2017 Tresorit. All rights reserved...!function(g){"use strict";var m=function(t,e){this.type=null,this.options=null,this.enabled=null,this.timeout=null,this.hoverState=null,this.$element=null,this.inState=null,this.init("tooltip",t,e)};m.VERSION="3.3.7",m.TRANSITION_DURATION=150,m.DEFAULTS={animation:!0,placement:"top",selector:!1,template:'<div class="tooltip" role="tooltip"><div class="tooltip-arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,container:!1,viewport:{selector:"body",padding:0}},m.prototype.init=function(t,e,i){if(this.enabled=!0,this.type=t,this.$element=g(e),this.options=this.getOptions(i),this.$viewport=this.options.viewport&&g(g.isFunction(this.options.viewport)?this.options.viewport.call(this,this.$element):this.options.viewport.selector\|\|this.options.viewport),this.inState={click:!1,hover:!1,focus:!1},this.$element[0]instanceof document.constructor&&!this.options.selector)throw new Error("`selector

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\runtime-es2015.2a47e8de932cc619e8eb[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	9027
Entropy (8bit):	5.958308868505635
Encrypted:	false
SSDEEP:	192:8/HC9ylpzuMG3YDc3/+6YZRaztve+/MkbD5g6Ut:dylpqM+XGRaJe+/Mk38
MD5:	80240DD74EBAF1167729F41BF362C431
SHA1:	98449732B943ED4959B7655C7B4BE36A07404C25
SHA-256:	FE33E251D6A6F5D04AF070DCDE18F31C1A2BA4922383D00D199B85AE073CDC57
SHA-512:	7BA3D1AE3EE0C3D74372A0621452016649417AE9C2F15AE2A95C0C940373FA09F4FE7C61DC87597C530A356E7F0A77052A209B2B917F9530EB694B57DB44FE44
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/runtime-es2015.2a47e8de932cc619e8eb.js
Preview:	!function(e){function a(a){for(var s,d,l=a[0],c=a[1],r=a[2],i=0,f=[];i<l.length;i++)d=l[i],Object.prototype.hasOwnProperty.call(n,d)&&n[d]&&f.push(n[d][0]),n[d]=0;for(s in c)Object.prototype.hasOwnProperty.call(c,s)&&(e[s]=c[s]);for(u&&u(a);f.length;)f.shift()();return t.push.apply(t,r\|\|[]),o()}function o(){for(var e,a=0;a<t.length;a++){for(var o=t[a],s=!0,l=1;l<o.length;l++)0!==n[o[l]]&&(s=!1);s&&(t.splice(a--,1),e=d(d.s=o[0]))}return e}var s={},n={2:0},t=[];function d(a){if(s[a])return s[a].exports;var o=s[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,d),o.l=!0,o.exports}d.sriHashes={0:"sha384-ksMhJ9LZRgoSIbIxmIgvDnUd0i6wzvgM8rg8x4RbicnTbNImLBf3yNLNXM/eE1FZ",1:"sha384-DRJiIk0xRTIemw6Z9QvogYfDfwO14Nouj8Q5+B5UWJ2drotikbT9A2OvgbZcF8tD",3:"sha384-btdYhXRZ7GYAyqnDSZEU0HHNA6ENDxbmv9jijeb+NyVjLm8DDIawCwCI3ViSgKkm",4:"sha384-DL2719VrnUgdJeR8HfUI3/GGkxXakC581ZDaPE8GtB2tCoEUJYmjXL/v8W+AF42Q",5:"sha384-0IXaPVwhzlgRgpdXM6gvrKjon4WQmCQ1XbGm9rKKA38GvGB28qVdxe1kJET4OBkn",6:"sha384

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\secondary-arrow[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	4.793873492786546
Encrypted:	false
SSDEEP:	6:tnr3rpqULYmc4slmvUvmtRLtmKnYiIYtEMyu3VY41g3AlX5RME:tr3rpq6YIzttm0YulY41g3AlXDME
MD5:	BCB48FFF8C1A507AD0C0BEE6948A2441
SHA1:	A78F640112EFBDEAF62CA2B8E4A5AB636AA85AE6
SHA-256:	165273D810A199CD42133F08C54ACBBA4C7127D401A688B68210E3748BFA908B
SHA-512:	203AF6968195C7D393E310154F2F140A6F3E7D95F2285E834A81EF6541AF6F1065ADBC0D76448977479FC47B67EAF10249B22E3E86AF45859CEF96614367E7D9
Malicious:	false
Reputation:	low
IE Cache URL:	https://web.tresorit.com/assets/img/live-link/secondary-arrow.svg
Preview:	<svg width="10" height="6" viewBox="0 0 10 6" xmlns="http://www.w3.org/2000/svg"><path d="M9.33 0a.675.675 0 0 0-.48.212L5 4.33 1.15.211A.685.685 0 0 0 .67 0C.294 0 0 .311 0 .7c0 .193.068.358.192.487l4.29 4.572c.152.165.32.241.518.241a.66.66 0 0 0 .513-.24l4.295-4.573A.684.684 0 0 0 10 .7c0-.389-.293-.7-.67-.7z" fill="#00a9e2" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\service-cookie-policy[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	390516
Entropy (8bit):	5.387645888910216
Encrypted:	false
SSDEEP:	3072:DksECAUEAUFbvrUoWZNxxAxbt2s0XMwPw6gcVwx9TYI6USn+rfEqW0qUw0YOoMdp:4sEbBWZwtExDj0j
MD5:	84409DAA6139B144671A70385E02B788
SHA1:	86F8BCC8B73BDB9BB45B8BC3BA2B5BF04B44E16B
SHA-256:	8E20B2F5DA7FEA81B71D412972E2396CF03AD32AFE2B4CF95C1700E52B8396D6
SHA-512:	AA7FAFAB1C475D793BCE11F99776EAAB94AA5B72CCEDE36AC7D4700E363B8581ABB485AF35F148927067C9DE23668FF82F35FAE66493B3920528599243F1048E
Malicious:	false
Reputation:	low
IE Cache URL:	https://tresorit.com/service-cookie-policy
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><style data-href="https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/styles.ce419b103dab4a823bcb.css" id="gatsby-global-css">.Button-module--button--2X_Ir{display:inline-flex;align-items:center;justify-content:center;text-align:center;height:50px;padding:0 28px;border-radius:5px;font-size:17px;font-weight:500;line-height:1.2;background-color:#00a9e2;color:#fff;transition:background-color .2s ease,color .2s ease,border .2s ease;cursor:pointer;border:2px solid #00a9e2;text-rendering:optimizeLegibility;text-decoration:none!important}.Button-module--button--2X_Ir:not([disabled]):focus,.Button-module--button--2X_Ir:not([disabled]):hover{border-color:#008ddc;background-color:#008ddc;color:#fff}.Button-module--button--2X_Ir[disabled]{cursor:default;opacity:.5}.Button-module--button-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\sidebar-bg-tresorit.70e70407a3b1e4d16cc8[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, extended sequential, precision 8, 1200x2232, frames 3
Category:	downloaded
Size (bytes):	51787
Entropy (8bit):	7.6897617969011005
Encrypted:	false
SSDEEP:	768:ob3h+0cxbmO7JbkLEHEjgeoVOLZWiAP7PoJkinXopnL0BZHPWb5vPHG:oLE04bmqJb+8bVOLMiAProqnL0BZObs
MD5:	F99114DD7D777BAC8B9D593134F96219
SHA1:	2F6C824C6431F695A67B4DE73A8B667683F9A466
SHA-256:	A4CDE51CCC11E7FFF1E2E8AA4924C9A11073A633F0869AB65377881275C8DC8E
SHA-512:	D8252C1F88C57ADA577CACE555FA747BC63DF03BCE6628D7992F2416488E3D907FE9A9292B1460332273ABA46D0D2289D3721C296290D46314F53624C576DEB7
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/images/sidebar-bg-tresorit.70e70407a3b1e4d16cc8.jpg
Preview:	......JFIF.............C............................................................................"....................................................................................................................!1."2R.#ABQSabqr......c.........3C......T.s..$......................!.1Q..".BR2Abr........Sa..#Cq.c...........!.?.../....P..6.(D..XffQ+QaB.0...p.....n....-..m.0..-%..J.).UUz2EUe..E........M...R....2('h.(A..3......N..(E.h!H.....3.k3(De(2x.(@.3..fP..a..Jc.B....XM......#..(J....mLaBW;.....3..P...DPd..(.+.&.2.....pb.Q4&V..U..,"....B..A..D.ff..0...h.PN.%.(....q..OP...0....-H.........JQ,'.U0/M.....U.B.......(Bc..#......ff...,(..2(..(Av!.....YaF0.Nv...D..%H..P.13-fb8....-.J.L.".8..0....E. .......e(%h.(I....s.(..N.V`..Pa(P..J.5..%.....P.a9..^W...KY..i.../l'...%.Dq..A........3...P...dPa(P..ET.....0.(..TUW;Y.a!.....aB....&.2)C.yt0....H...U..32..)..0.B..V..R,U..+mh.U..E"..%T..+1..eT.QJ.aF...Oe.'jBf.Y.@E".m..N=C..c...%....0.D...+x..e..9Ro....E..P.4X...E

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\sidebar-e2e-white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	4.711429814087937
Encrypted:	false
SSDEEP:	6:tnrwdhC/i3mc4slmRgzXW8jGMJBG1h98viT1FeRkrHe4faAutME:trwdU/i3IqfDJBG/90iTmer+SaA8ME
MD5:	14F690B56EF1C95E4392FFEBFD7AC888
SHA1:	17FC4AF2FE05FC9DE89F0CF8F442B5E75F450621
SHA-256:	6F1C084F995B9D93C695EE8D0DC11A7D0E720E2661AF5B8C3CE525B04C2AD530
SHA-512:	7D4779C46640958D9C57424F1AF9358E326DA88D4677FE5F7E26683B98510FBD0090E307B4C9D9B97698ADC08763C451914B8851E6F267EEC35195D882ACD564
Malicious:	false
Reputation:	low
IE Cache URL:	https://web.tresorit.com/assets/img/live-link/sidebar/sidebar-e2e-white.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M12 0c6.627 0 12 5.373 12 12s-5.373 12-12 12S0 18.627 0 12 5.373 0 12 0zm0 5a3 3 0 0 0-3 3v1H8a1 1 0 0 0-1 1v6a1 1 0 0 0 1 1h8a1 1 0 0 0 1-1v-6a1 1 0 0 0-1-1h-1V8a3 3 0 0 0-3-3zm0 2l.102.008c.505.077.898.715.898 1.492V9h-2v-.5l.005-.153C11.056 7.59 11.482 7 12 7z" fill="#fff" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\subscribe-31f0f3c3cd612a84bf995ce8736116ef[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	22188
Entropy (8bit):	5.418532338052362
Encrypted:	false
SSDEEP:	384:Aky7vr4rTm2vurGr0qKH9DeJGYIemKWEv2oYJQOuWhRvyPoAUBmOPxhjLqhyqDdi:AksjqTm2sc0veJGYIemKWEv21uIvGgBv
MD5:	6E0B58783ED03318D2DE73EB28167FA8
SHA1:	FC409692F0EB450FDED119A4855CFA5B5D5AB3A2
SHA-256:	3507B96326B7B58A9FF90A3B12A0C4C93F91AD3F3459037E322DA21DC223BAB3
SHA-512:	C31CDC382C1158C9FCE7A266DA803150CDC3FAA695189DFC996BA4547D94157AC8AB3F1BCB4342EDD4E04F7A3EA696FD73155639267816B210B590AC9CC2BC65
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/subscribe-31f0f3c3cd612a84bf995ce8736116ef.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"043a59f82ffc9750a385":function(e,n,a){var t=a("745a70c961e0aad60670"),c=a("a30f98a1b5878c1b0983");"string"==typeof(c=c.__esModule?c.default:c)&&(c=[[e.i,c,""]]);var r={insert:"head",singleton:!1},o=(t(c,r),c.locals?c.locals:{});e.exports=o},"05decd0422de0aa28b91":function(e,n,a){e.exports=a("06530a2c1309280ff0c5")},"06530a2c1309280ff0c5":function(e,n,a){var t=a("9f4fac5aae4db9c85a5f");e.exports=t},"412fcd05b78d694c9578":function(e,n,a){"use strict";var t=a("65d96aee20091f55476f"),c=a.n(t),r=a("f50e233540a5c40f0ea1"),o=a.n(r),i=a("8af190b70a6bc55c6f1b"),f=a.n(i),s=a("8a2d1b95e05b6a321e74"),l=a.n(s),d=a("be0037ee9446566ee46d"),u=a("3e9c7e5351d86134f5f6"),b=a.n(u),p=a("c941771c892f8eea9763"),m=a.n(p);function v(){for(var e=arguments.length,n=new Array(e),a=0;a<e;a++)n[a]=arguments[a];var t=Object(i.useRef)();return Object(i.useEffect)((function(){m()(n).call(n,(function(e){e&&("function"==typeof e?e(t.current):e.current=t.current)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tresorit[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2468
Entropy (8bit):	4.440181293643534
Encrypted:	false
SSDEEP:	48:r+of8Lt+1LTxCTVuDVFoBtqR5lQjSVPpxCTVuOy/cU:6oM+1LTxCTVuDzoLy56G7xCTVuOwcU
MD5:	763DC4526375F817714E129B12482EDB
SHA1:	0C74EE42763689206B9498D61665EAF517E0A64C
SHA-256:	37C8DFFDDB59FC895D50E060AF65B28A4157E380F8C60A502ED6BF7BF23E65C2
SHA-512:	BE8299B42E9F6C378104B6116493E030D9C036FE5873B9EBDDDD911B7A6DE7D0CAC5BAE11CD89BC3D9FD3B69E71984770428A830172C0B5A4FD765D1209D3509
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/763dc4526375f817714e129b12482edb/tresorit.svg
Preview:	<svg width="120" height="50" viewBox="0 0 120 50" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="100%" y1="74.328%" x2="0%" y2="26.342%" id="a"><stop stop-color="#2B6DF1" offset="0%"/><stop stop-color="#00C4D5" offset="100%"/></linearGradient></defs><g fill="none"><path d="M19.345 15.208L14.5 12.452 3 18.995v5.602l16.345-9.389zm3.026 1.722L3 28.057v3.948l11.5 6.543L26 32.005v-13.01l-3.63-2.065zM14.5 9L29 17.25v16.5L14.5 42 0 33.75v-16.5L14.5 9z" fill="url(#a)"/><path d="M39.63 30.276c0 1.126.472 1.546 1.598 1.546.574 0 1.104-.078 1.809-.298l.389-.122v2.4l-.215.064c-.885.263-1.663.376-2.373.376-2.58 0-3.914-1.299-3.914-3.862v-7.786H35v-2.238h1.924v-3.328h2.732v3.328h3.77v2.238H39.63v7.682zM52.424 20.07c.405 0 .774.035 1.087.113l.227.057v2.594l-.373-.093c-.246-.062-.654-.095-1.045-.095-2.124 0-3.678 1.74-3.678 4.64v6.748h-2.758V20.356h2.68v1.905c.832-1.383 2.233-2.191 3.86-2.191zm8.44 11.96c1.593 0 2.576-.73 3.096-2.242l.07-.202h2.613l-.078.363c-.596 2.776-2.841 4.397-5.701

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\userlike-production-2021.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	409226
Entropy (8bit):	5.279512892382842
Encrypted:	false
SSDEEP:	3072:TIBwA5EkuzUqdUq23qasl1wi5u73XPDmIUQS+IAdw8OX+XcxTPFNrb1TGp6waGsw:TICA5EkuzUqdUqbaB5aIiwR
MD5:	5DD1E5A454D3597F9237C4E11F4FD7F7
SHA1:	13BCB9DC6A55C55C39597B85C872A46815748D42
SHA-256:	F6BE3A07A767B9068A6F2F43CFD9B6B7030EF182A2B53F6B901848807B1BEACE
SHA-512:	B73EA1E09A9419D7D9C356491FBB0E6660750B128848CADE01310EB379BE6783D1D7FDF33A91BEE2ABE01FA4C66D36B7346B3662866663A7F119087011D11C39
Malicious:	false
Reputation:	low
IE Cache URL:	https://dq4irj27fs462.cloudfront.net/javascripts/userlike-production-2021.min.js
Preview:	(function(){function r(a,u,l){function o(i,e){if(!u[i]){if(!a[i]){var t="function"==typeof require&&require;if(!e&&t)return t(i,!0);if(c)return c(i,!0);var n=new Error("Cannot find module '"+i+"'");throw n.code="MODULE_NOT_FOUND",n}var s=u[i]={exports:{}};a[i][0].call(s.exports,function(e){var t=a[i][1][e];return o(t\|\|e)},s,s.exports,r,a,u,l)}return u[i].exports}for(var c="function"==typeof require&&require,e=0;e<l.length;e++)o(l[e]);return o}return r})()({1:[function(d,m,e){"use strict";(function(e,t){if(typeof define==="function"&&define.amd&&(typeof d!=="function"\|\|typeof d==="function"&&typeof d.specified==="function"&&d.specified("userlike"))){return define("userlike",t())}else{return t()}})(window,function(){var e,t,i,r,n,o,s,a,u,l,c,p,f,h;r=d("./utils/jq.coffee")._jq;l=d("./global.coffee");u=l.get;s=l._ullog;i=l.UL_EMOTICONS;t=u("CONTEXT");l.set("avoid_globals",(f=window.userlike._config.options)!=null?f.avoid_globals:void 0);d("./utils/favicon.coffee");n=d("./popup.coffee");n.a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\webpack-runtime-5820332ecd46b3d6b0ed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6558
Entropy (8bit):	5.3578583398721085
Encrypted:	false
SSDEEP:	96:EtOPTbqvEuM1SYoXjT6yjwM8v7qvEu/TBzALSoCPYFE0SpbX6N:XTf1SYoXjT6w58vUTB8L+PXxpT6N
MD5:	3643FFC27FBA79D0C282FAA1294BF833
SHA1:	4376D8A7DE190F80FA86D9F5B4461E78183BA973
SHA-256:	71DE6BFC58E2450052D58FF8980782549907CABBC06CCD9688C1FB7FC714CFC0
SHA-512:	C12F1D63B08EBAAA2F125EAFF0099A6FA8F388487F2A38E5C93071159D67EC45586156D6A5C08DA5F4E5ABB3086E893FA59586B18BBC26351AB8571C2F592C2D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/webpack-runtime-5820332ecd46b3d6b0ed.js
Preview:	!function(e){function t(t){for(var c,r,a=t[0],d=t[1],l=t[2],p=0,u=[];p<a.length;p++)r=a[p],Object.prototype.hasOwnProperty.call(s,r)&&s[r]&&u.push(s[r][0]),s[r]=0;for(c in d)Object.prototype.hasOwnProperty.call(d,c)&&(e[c]=d[c]);for(f&&f(t);u.length;)u.shift()();return n.push.apply(n,l\|\|[]),o()}function o(){for(var e,t=0;t<n.length;t++){for(var o=n[t],c=!0,r=1;r<o.length;r++){var d=o[r];0!==s[d]&&(c=!1)}c&&(n.splice(t--,1),e=a(a.s=o[0]))}return e}var c={},r={4:0},s={4:0},n=[];function a(t){if(c[t])return c[t].exports;var o=c[t]={i:t,l:!1,exports:{}};return e[t].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.e=function(e){var t=[];r[e]?t.push(r[e]):0!==r[e]&&{0:1}[e]&&t.push(r[e]=new Promise((function(t,o){for(var c=({0:"styles",1:"44f20ad372b7c9b781225eccfe7980df78cb5adb",2:"b8f1c4893a13786602fe25c2d0dbd06a2f483a7e",3:"e2b7582985c7477862579275689cf02300691196",6:"component---src-templates-about-us-about-us-tsx",7:"component---src-templates-brave-brave-tsx",8:"component---src-template

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\what-is-the-legal-basis-for-processing.bbcfc331[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	538
Entropy (8bit):	5.013049256026757
Encrypted:	false
SSDEEP:	12:trLnl/kjxMjq4WW8cYngArqZ6kg4ji30xm3gT0LnULQKixsT3ji3js:tPnRkjxMOpNngA9kg4G30kcZLtiMG3js
MD5:	BBCFC331923718CD1E44EBE5B6197AAD
SHA1:	78AF4037D6F882103ADCAF6152F2C94EA7DA64AB
SHA-256:	F751984315188484DF5663DF4AD929797DAFC78CEE2CAE623145C3CC047A478A
SHA-512:	82C42A3C963FC027B3AB1B0606F2417A47F51EA0241E6903A3134D87F16C7FF7240683AA717720F72E34AE306C78048206410E9EFC7BBC76C37A6318A3256B1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/legal/privacy-policy/what-is-the-legal-basis-for-processing.bbcfc331.svg
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M23 2v16.995h2V0H4a4 4 0 0 0-4 4v17a4 4 0 0 0 4 4h21v-2H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h19z" fill="#069"/><path d="M7 1v11.37l3-3.375 3 3.375V1H7z" stroke="#069" stroke-width="2"/><path d="M24 23v2H4.22C1.905 25 0 23.226 0 21s1.905-4 4.22-4H24v2H4.22C2.979 19 2 19.912 2 21s.979 2 2.22 2H24z" fill="#069" fill-rule="nonzero"/><path d="M22 19v4" stroke="#069" stroke-width="2" stroke-linecap="square"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\25-9cc026ebefdd64d0e0d9[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8793
Entropy (8bit):	5.128527244488855
Encrypted:	false
SSDEEP:	192:ZE2Nqh91jdMoOdBmMWyxDpsZmgyHTcVGpJYhKMy56Y3:ZdIdSBmMd4sHnJEY3
MD5:	AFEFC2EB3DF4D257C9A865A292108B3B
SHA1:	085DC253B99B580F937F00C32D761F49385BC018
SHA-256:	236CAAF4D2D70A511325A8F39388B682282C5DD5A39DAC5784FFF3472F9865FC
SHA-512:	C4BF9AC3F0FFDB6495BB7C560B2986F527A0EC8D83A28B2C3AB095F82EC49955BE497B1B68AE3C41B41AE75E0A084FC9DCB18F266E1C349F35C6956C4DF62636
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/25-9cc026ebefdd64d0e0d9.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{Wr5T:function(t,e){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var t=function(t){for(var e=window.document,n=i(e);n;)n=i(e=n.ownerDocument);return e}(),e=[],n=null,o=null;s.prototype.THROTTLE_TIMEOUT=100,s.prototype.POLL_INTERVAL=null,s.prototype.USE_MUTATION_OBSERVER=!0,s._setupCrossOriginUpdater=function(){return n\|\|(n=function(t,n){o=t&&n?l(t,n):{top:0,bottom:0,left:0,right:0,width:0,height:0},e.forEach((function(t){t._checkForIntersections()}))}),n},s._resetCrossOriginUpdater=function(){n=null,o=null},s.prototype.observe=function(t){if(!this._observationTargets.some((function(e){retu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\2c83919cb319fa605aa9452f423c0aeab4bc59ce[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	143891
Entropy (8bit):	6.031038477347037
Encrypted:	false
SSDEEP:	3072:KQNCcs0J8lz0II6LjNA+Z5Zwgrvbaz43XBD6S:pjszO1gj+arvba0RDt
MD5:	B36A0F0DB2B4D8297BB8926C563E6CE0
SHA1:	2C83919CB319FA605AA9452F423C0AEAB4BC59CE
SHA-256:	74F56E25E2DA0CCC57B3F98A74071E83792AF7031FCA68DC24B9707C2A360C95
SHA-512:	82B030292F3FF319BB33D13412F0A0D1698B5D9828C61D25ABE96BD69A676AC1F10A8DE7BC546411E66C6704FD1D0EA979B0812F1171E0284EB0BC33D0436DED
Malicious:	false
Reputation:	low
IE Cache URL:	https://theme.zdassets.com/theme_assets/228341/2c83919cb319fa605aa9452f423c0aeab4bc59ce.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 2578.44 273.12"><defs><style>.cls-1,.cls-2{fill:none;}.cls-2{clip-rule:evenodd;}.cls-3{clip-path:url(#clip-path);}.cls-4{opacity:0;}.cls-5{clip-path:url(#clip-path-2);}.cls-6{clip-path:url(#clip-path-4);}.cls-7{fill:#345;}.cls-8{clip-path:url(#clip-path-5);}</style><clipPath id="clip-path" transform="translate(0.16 0.06)"><path class="cls-1" d="M119.91,0,239.82,68.23V204.68L119.91,272.9,0,204.68V68.23ZM185,65.58l-160.19,92v32.65l95.1,54.11L215,190.25V82.65ZM160,51.34l-40.07-22.8L24.81,82.65V129Z"/></clipPath><clipPath id="clip-path-2" transform="translate(0.16 0.06)"><rect class="cls-1" width="239.82" height="272.9"/></clipPath><clipPath id="clip-path-4" transform="translate(0.16 0.06)"><path class="cls-1" d="M959.94,176c0,9.31,3.91,12.78,13.22,12.78a47.41,47.41,0,0,0,15-2.46l3.22-1v19.85l-1.78.52a68.46,68.46,0,0,1-19.63,3.12c-21.32,0-32.36-10.75-32.36-31.94V112.42H921.66V93.91h15.91V66.39h2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\73cec85d22050965d942e5f177ceb56ae001fa15c107ae349f0b90db08a105dc[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3423
Entropy (8bit):	5.229087104178354
Encrypted:	false
SSDEEP:	96:HwCGQ0GYw7mBFYWzMUCy+rWWzmudlNkNKfSdJ:Hw0GBFYW9Cyi/pkiSdJ
MD5:	0ED6871E8B632F72535F5EF24CD597B8
SHA1:	3A04B5862D19CC98E85853362CFCB4860E0BB216
SHA-256:	30140AEE9269F1B091044DC261116315A4C41304476C1DA94751C58A543D9A8D
SHA-512:	37CEAA6C228E842904E4111C95C0C3C4C48C02A1BD028F80CBDEDBEBBCBC675B66FD5322AF9B007D5EE331CCC91B49A1119C75D379763EB6140297B6C2FD5787
Malicious:	false
Reputation:	low
IE Cache URL:	https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com/73cec85d22050965d942e5f177ceb56ae001fa15c107ae349f0b90db08a105dc.js
Preview:	. /. . * .__ .__ __. * __ __ ______ ___________\| \| \|__\| \| __ ____. * \| \| \/ ___// __ \_ __ \ \| \| \| \|/ // __ \. * \| \| /\___ \\ ___/\| \| \/ \|_\| \| <\ ___/. * \|____//____ >\___ >__\| \|____/__\|__\|_ \\___ >. * \/ \/ \/ \/. . . * (c) 2021, Userlike - https://www.userlike.com. . Userlike Chat Client. * Appkey: 42f9863a-7496-37b4-a765-132813ce6669. * Widgetkey: 73cec85d22050965d942e5f177ceb56ae001fa15c107ae349f0b90db08a105dc. * Created: 2020-09-11 20:24:56.739621+00:00. . /. . (function (root, factory) {. if (!(root.userlike && root.userlike._router) && (typeof define === 'function' && define.amd && (typeof require !== "function" \|\| (typeof require === "function" &&. typeof require.specified === "function" && require.specified('userlike-loader'))))) {.. return define('userlike-loader', function() {

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\BYWK6AWZ.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	467301
Entropy (8bit):	5.465598988195267
Encrypted:	false
SSDEEP:	3072:DksECAUEAUFbvrUoWZNxxAxbt2s0XMwPw6gcVSx9TYI6USn+rfEqX0qUw0c9bZoJ:4sEbBWZwtExivgsj/O
MD5:	2602FA59EE06719DA41B86D606787086
SHA1:	D71C6108BFD7BF5233BD8D213C459923D5DEAA13
SHA-256:	68D5E0AE2A4021F581BE20CBDDD117C410ED14864F4A41175F44E30558E3D75A
SHA-512:	31277231DB72979DE84FF19EAD3A35CE4A50AB33E7D2580E796FFC874FAF1B007A1F359D7BB21E2E02551FD54B16CD8BD2CFCF87E122D165CA45C197044D6264
Malicious:	false
Reputation:	low
IE Cache URL:	https://tresorit.com/
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><style data-href="https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/styles.ce419b103dab4a823bcb.css" id="gatsby-global-css">.Button-module--button--2X_Ir{display:inline-flex;align-items:center;justify-content:center;text-align:center;height:50px;padding:0 28px;border-radius:5px;font-size:17px;font-weight:500;line-height:1.2;background-color:#00a9e2;color:#fff;transition:background-color .2s ease,color .2s ease,border .2s ease;cursor:pointer;border:2px solid #00a9e2;text-rendering:optimizeLegibility;text-decoration:none!important}.Button-module--button--2X_Ir:not([disabled]):focus,.Button-module--button--2X_Ir:not([disabled]):hover{border-color:#008ddc;background-color:#008ddc;color:#fff}.Button-module--button--2X_Ir[disabled]{cursor:default;opacity:.5}.Button-module--button-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\G2_Fall-2020@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 52 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1297
Entropy (8bit):	7.747214639219976
Encrypted:	false
SSDEEP:	24:hiWDjw1i02hCoJx18/cpKLzs80CUGF2UPMYl/pZbeV4J:lDj5VJdptCUGF2kMs//
MD5:	45FCD87E23E819FA50664741C077D485
SHA1:	F2ABA874FEC3AEE2AB460CBFF47A7B35404B2F90
SHA-256:	3C556B56195480D470422ABCEE654C87D251F63722DE2DF2B785AB7F96131868
SHA-512:	752750101F3E48751167125A2209FD67A20D05D019984035F4CD6055AC21C2FCACAB273B3A8ED6FC7D60D3975C662D0863275EF01C6B9F4F1D653BF26B625E67
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/e413cc86421d1b9e973d0c4fa5fb2c60/e9f46/G2_Fall-2020%402x.png
Preview:	.PNG........IHDR...4...<.......i.....PLTEGpL..............................K.....K-.........%..&..%..(....&....R6.........$...........c.....hhp...yy...............UV^......F(........q.........]D........7.........r......BBKls.!....tRNS...\......;.....H...l..B.A.....IDATH...W.<.....u.M....I,IHy)..U....M..R..9...$.q_..:............i8t..B.$......6.w.=....08.z...v..j.:."......,...fm..!..A.1.vh..@....@.,.^@8p4..N.B;.[...V-.1..j.^_.=.-.3..m...].p;......@.w4`F.......zLx.R.......1..-}.@...f.:./.-.Gb...g-u.u.8.i.O-.OZ..m.<b....,l.g.... A....Q..0`....cLZy..B.J.%.%.g.1..F.W......JK..3...B..<.2..tgi.!.l.........&.v.O\|....lGP.)'.!..!...."....C.d.EB.8.D..N./DT..#."..:.i\.....8.RR..T.X....nD... .u!....Yp%.,..)..R#9...c...=...K....Th.&Z..aa<q{..6.4m..`.u6@....-.....[.9\|....?).......T...0..P..F..l9.i6m.a.P....lRU.%.w:[..l...E........SchR.'UYU.2....V.<....rR....yK.t.[w...,.[.e....m..UY..2.k...Wg...ab...z^.y]5.5..jj.>A"..K#...$.&.&...1M.... .O......M

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\GetApp@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 80 x 53, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1329
Entropy (8bit):	7.790514958722551
Encrypted:	false
SSDEEP:	24:1VhxjWyURqjWzEangSD2Yjmy4UFsVUieMkPOlN+pSOiqMjPgFB3JyliPc:RxhUcurney4cMFlkPObisqMjgDlc
MD5:	B16A5FC64F92A42C0F1F60AB9FE29CA3
SHA1:	8EB69FFF3322A563D1F96FE993BC8220A5FD3C3C
SHA-256:	128357789B39CC041E84F3782EB2615E99ECB1D3EAAC8361A118E7EB35202111
SHA-512:	602555FA0ED40FAD450F75CFAFF78908946B59241618EE4D8FCC52066E1A492F28058AF93B4626395A4D05E8DEA7FC7E9CF8429360CFBDE71E6EE05508250F4E
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/24cbe232df779373f7424da15f8db51b/37231/GetApp%402x.png
Preview:	.PNG........IHDR...P...5........v...{PLTE=CK6<D...=DNDJQBHPFLSCKR=CJDKR.........w{....T[a......XSIdjp.#....)...j\D.i=...9bh.v7C.......2......#..N...zj...u..x..T..e.2....tRNS......./.+y..2...[IDATX...w.:...B.f..Cx..$....p..$.a7.y...!Y....v...&C...v....Z..a-...q'.4.l...@...........?.b.......@\.....,....C.@...>XD3......?....z\|.d.....&.t.K..}....;...e=,..o..{...n.....@P.,.@v&J....B.l'...@\|..._..p..D b.K..@i+.I.#h)......I..b...x...H.`.Z.y..I.Js.....:1...F......>#.z...z"........W..Z:e.q.O".VuA.b...}^.?...p.....F`Z.........TY.(zH..<Y. .{.>..u...L]....&`.k..xz@]..E...8.?.c..`Se92d.N=yn..=...&...e....Yl>.?.z....M......R.5.]]...4W.......p .0..!....4..1.Fio._2V.=...rb%mBQ...,.V....,&Ebd._..<K..n..D..`...x.Es.G:.hb-.e?do.Nqo...`.^...V..............z.w..k.....................W.)a3+......5,g3..^)V{.e..W\....G..Th..6.....ZYR;.jO..&....\|3.{G....z.1M...u......d.y...4..G.U%.&..'....4....9..)(...*..p.X...4.w......&.t.~..x;>.p..9!.-Y.B.......v....l....@.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Graphik-Medium-Web[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 45742, version 0.0
Category:	downloaded
Size (bytes):	45742
Entropy (8bit):	7.989439086007692
Encrypted:	false
SSDEEP:	768:4KbXZW4A38zR4WEwwjxNOpc84x75Oc2E0eT134qW02o63GoCt6TKT4Vu5qMCC:lZWfAWRNoc840E0ei/WoCoTKTMuAMCC
MD5:	E3768EE459FC097A09447588D182629C
SHA1:	1854A197CCBD0FB7089049E48B4705A2F19FFCB5
SHA-256:	C0732B88019601119B6E40F95EB3B28D7506B88353D51650A7FA79A9E7FDBB95
SHA-512:	058D34663C9F11A36DFF6612F3A27773DF02118E855441BE113A16D517B4F2262F0A7416E6099C4BAF960DDD1FDF597862DF8A62BDD5368F26933CB49144C58F
Malicious:	false
Reputation:	low
IE Cache URL:	https://az579219.vo.msecnd.net/201609071250ng/Graphik-Medium-Web.woff
Preview:	wOFF..............s4.......p...>...z........GPOS......#_..\(.I&.GSUB.......Q...V...dLTSH..............].OS/2...$...U...`fZs.VDMX...D............cmap........... . ..cvt .......T...T....fpgm...\|...;....w. .gasp................glyf...l..f.....Q.hdmx........... ....head.......6...6....hhea.......!...$....hmtx...\|.......Pc.W.loca...T..........maxp....... ... .2..name..}H......._.._post...0...~.....@`.prep.......G....x#j=.........O)._.<.................?......n.c............x.c`d``6.....2...I.<...2`...v.............d...\...............0....x.c`f.e..............B3.e0b....fcffbbcb..3 .g.__.....L..}...M.6+00L..1q3.fP.B.....;...x..Mh\U...sn%...I.ib.&.d...4Qci......R!.D.[]..............."..F.)...qe.)b..'..h.(A..srn..]........V.wc..j;.VsCM.eU....mIy;....g..~.Zc..?k...N..6M.&e.Q..T..S.\R.....2QF{.j.5..c.J.....1.Uof4`2.2..U..z..0..vV..55.Z..6..{Z...:LN#..{..wi.r.nVC........5.~.,@......q...2w...,.. .C..~&.E...;.{.W...+...c.9.8..t.,....[.[.Y..........y.\|....?.o.u."

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Graphik-Regular-Web[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 42251, version 0.0
Category:	downloaded
Size (bytes):	42251
Entropy (8bit):	7.987243052457572
Encrypted:	false
SSDEEP:	768:DVTGVeA7qo6JzLPSUkbXPodLMHgvk7B1272l+f0YL3NvqyV260toAMYNSuRMtIJV:2qsPom2ggyM0YtXV2LKALNSmMGJV
MD5:	E3B076F7C87DC8138F2F01CB17D4C01B
SHA1:	0913A13AE4A2EBE0E6A0129198C4A21CF4EDC966
SHA-256:	8A4B321353C20D7390B78952B99C9CB8A5BE22B1053ACC7059C9610978E26EDA
SHA-512:	069505588F99617DA4232A396A3555A1492A935A474A0B7A4CABEEF0E74254FDAF96FF2150AB680BFA105249BFE1FF4891C80058A6E1FD61FD653F4D0BF9C0A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://az579219.vo.msecnd.net/201609071250ng/Graphik-Regular-Web.woff
Preview:	wOFF..............ax...........?...{........GPOS.......\..J...8BGSUB...p...\...n....LTSH............g..OS/2...$...U...`e.r.VDMX...............;cmap...<...q.......!cvt .......L...L.F..fpgm.......;....g.\.gasp................glyf...d..c9...?I..hdmx...\....... x...head.......6...6.N..hhea.......!...$....hmtx...\|.......PLHr.loca...L.......,.W&.maxp....... ... .3.Aname..y........c.lr.post..{.........hTW.prep...............6............_.<..........u.......?... .$.J.Y............x.c`d``6.....R._.....P..0...q.............d...c...............x....x.c`f.b..............B3.e0b....feffbbcb..3 .g.__.....L.F........)00L..1q3.fP.B..n......x..mH.U.....1..(3..j>?_.WMD7m.:.....2u..9.d..U.A.Fo...c...U..._E.A.bD....^U....t..s..f..~.....{.l..3...@U...A.j.W....q.B...V...M5D5..0k..Y.....{B.vEM....Y...U...3..."..}.q.K#fK........+..... ..Y. ...3!-...h._...r....gR.5......;.....O....?..;..sJ..\.l.....]&.C.V-.F.0g...P..W..)j.5...\.9...s.}..{=.7...Z..z....*..Ua..De..[j&...v..6\U5..3..k_.N

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Graphik-Semibold-Web[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 45448, version 0.0
Category:	downloaded
Size (bytes):	45448
Entropy (8bit):	7.990224616090935
Encrypted:	true
SSDEEP:	768:Wgxc/B0SdMT58NRQYwPu5DZP6qLL4XllSgTLG6+RRGmuOGEDwxrQi5W:Zxc/Vd0urbmquLlD9Okl5W
MD5:	188125A84EC5564BE32C0497B6343741
SHA1:	DC9BFCAA6FC0C873F9685F067F78F49CF5A65206
SHA-256:	DC67C67DF0E1D17FCEE9B6670C6AE7894495DF34766F00F7CC09E0101FC0B2B9
SHA-512:	896F75FC291DF7DA1CD1B47921600299A88AEB0B316A51C9065A01CF52319BCA64A0BC141F1449B1916CEEE0420A9852C19912CCCA7D1231454EAC5910E63A53
Malicious:	false
Reputation:	low
IE Cache URL:	https://az579219.vo.msecnd.net/201609071250ng/Graphik-Semibold-Web.woff
Preview:	wOFF..............ud.......H...@...\|........GPOS..........Qx....GSUB.......r......>LTSH...4..........Q.OS/2...$...U...`f.t#VDMX...............3cmap...\...o...~...ncvt ...,...a...b...Lfpgm.......;......'.gasp................glyf......j......Vg+hdmx...\|....... ....head.......6...6...chhea.......!...$...)hmtx...\|.......P.{[.loca...........,..K.maxp....... ... .3..name...l.......g.4..post...X..........prep.......!.....9...........X_.<...........L.....?........h............x.c`d``6............^...2`...\|I............p...c....................x.c`f.f.``e``...........2.1...r.3331.11........./....o&f..~...f.....&...N3(.!..d......x..ah.U....<..Z..w.m..m........M.6.....L..,...r..BM)."........A.}.._...C..%.P.H{...G.b..o.y.=.....9w...0.??c...N..Z...Q}..vY....E.03\|.Fk....a..B.V.S....7....a..jm'.#..r....#......Ij.j5c..Z.$.4.~R.}.A.../.M...B..>.......;.x..G.....S..s..6....Z;.L.=..Qu..J8SExO..)M...2e.IM..-....T.=...j.a.}....w.7d.5....s.....e.vE.^_.>.j...n.Si.2.P9..."\|..0CC.\.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\UhlFL[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10812
Entropy (8bit):	5.7981410336780685
Encrypted:	false
SSDEEP:	192:gp4E/6f41+nrnIdr6RjLJDUdKqOPy1rZmg3mS2O:0W2UrYr6Jg111p
MD5:	04B25B1D9A81BFFF2AF9F29C3C0407B5
SHA1:	45E6581D88792604A6E7C4065C3E11A1D7702AFA
SHA-256:	3F4855F2103C30DC41394319B577298EF6BEF5BF72A0A1E685BED4774A86F854
SHA-512:	6A856B1BD472F386BAEDB2213664BF1E11A0414CF629B14C12618E1894D4D30C9758D942E6FA8B3B473E5C2346EBD2132B4E7FEF7272DEB17F9CFD7C127B3BD4
Malicious:	false
Reputation:	low
IE Cache URL:	https://web.tresorit.com/l/UhlFL
Preview:	<!DOCTYPE html><html lang="en"><head><base href="/"><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1"><title>Tresorit Web Downloader</title><meta name="description" content="Tresorit is an encrypted cloud storage service that lets you store, sync and share confidential documents. The preview of the content will only be available after opening the link."><meta name="keywords" content="Tresorit, link, file, folder, encrypted, content, browser"><meta property="og:site_name" content="Tresorit"><meta property="og:title" content="Files shared via Tresorit"><meta property="og:type" content="website"><meta property="og:description" content="Tresorit uses end-to-end encryption to keep file exchange secure and private. Access the received content via this link."><meta property="og:image" content="/assets/img/common/open-graph/live-link-og.jpg"><link rel="icon" href

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\a85808487b46aeceab75a29f756d75f2d472499b[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14839
Entropy (8bit):	4.178517713120346
Encrypted:	false
SSDEEP:	384:8vKRqvYYZdfDNOkORTj6xzRpNvPWLNkAYmkF6ktgcPyRGy0XGKJP:8vxvYcfDNOkORTj6xzTNHWGAYmkokE8z
MD5:	388A8DCF199F4FD88D1A8965B9A49AA2
SHA1:	A85808487B46AECEAB75A29F756D75F2D472499B
SHA-256:	A7F8886746C01AB44C07B387659A5E4971DB7F7D5872BF95C9370252419FC147
SHA-512:	2AD9541F1BB09F9F3463211CC275CD2390D55A3CD96A5740AC4F180A3E9EBEB3F00999D696F977ED7A406FBD3F4D97DF73F26C0F2027337AB441492052D920D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://theme.zdassets.com/theme_assets/228341/a85808487b46aeceab75a29f756d75f2d472499b.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="284px" height="31px" viewBox="0 0 284 31" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 49.3 (51167) - http://www.bohemiancoding.com/sketch -->. <title>new-logo-knowledge-base</title>. <desc>Created with Sketch.</desc>. <defs>. <linearGradient x1="100.131041%" y1="74.0558532%" x2="0.130116273%" y2="26.0697094%" id="linearGradient-1">. <stop stop-color="#2B6DF1" offset="0%"></stop>. <stop stop-color="#00C4D5" offset="100%"></stop>. </linearGradient>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Artboard-Copy-18" transform="translate(-40.000000, -63.000000)">. <g id="new-logo-knowledge-base" transform="translate(40.000000, 63.000000)">. <g id="Group-2">. <path d="M17.6952724,5.86507886 L13.2747225,3.28600677 L2.78

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	47332
Entropy (8bit):	5.518633523108405
Encrypted:	false
SSDEEP:	768:UyC36rcBLbfsl5XqYoyPndHTkoWY3SoavVVy2WiCgYUD0FEw0stZb:UyDAZfY5hVdHTwY3SoIjw0sD
MD5:	6A10EB2BB5C90414980729F4F96FFBDA
SHA1:	8BBBD5948255549E4B691B614AA3177DEA9AF1B7
SHA-256:	0F3BE44690AE9914AE3E47B7752E1BDEA316F09938E9094F99E0DE19CCD8987A
SHA-512:	5A505CBAAEEAB8961AA0DE94767F76A09B6F03E60EB0C72954B85EC0392EE1CE383D2088939A314D3175AB24B7A69390C841CFE0237C1D1C40966B43F22AE929
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},r=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var t=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var v=window,x=document,y=function(a,b){x.addEventListener?x.addEventListener(a,b,!1):x.attachEvent&&x.attachEvent("on"+a,b)};var z={},A=function(){z.TAGGING=z.TAGGING\|\|[];z.TAGGING[1]=!0};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\capterra[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 112 x 26, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	7.793816622205168
Encrypted:	false
SSDEEP:	24:YdFx+fQYNUXstAwaR+fbEiRpkYSg7/iaProaMNYTrJ+Mdy7Avs:wefRNUMg+fbEibkybzh5Mn
MD5:	AB43CC4F17401F6CEDE82964544BAB7A
SHA1:	0726D00F8CD1F399C8373EE546887C5144E70251
SHA-256:	D2AB123C392FB6C3F4C699B8280C3293B460F61D57D20B51397B0F7C5328FE1C
SHA-512:	27CD5C087832930183156491CBA0D2863D24D3A96C8377F891D95295BA40A13EF2B8B1ACF0E7BB9464CB98F0D0DB58505F567FB20F92945683E6E0E3C6E772EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/fc1e2a5eb5d3e5b5a12d6af6ebfdf681/97611/capterra.png
Preview:	.PNG........IHDR...p.........XQ(E...iPLTE...]..5i........7q.O........Dy [.........`........n........Kw.o........:<.x..4...y..{0..WW.}2..H.L[...&....IDATH.V...&..`... .m2i/..?.o..:_.Lo:.-....H.....m..2.....~..~...!./.K..S...~...>.....G.._o_^.}.;........Y..1....`g..Z..~..~.Uk..`.JF....C..[xx.S.....cx.Z.s...F...>b....`.\>.vP=.s.A....`.:hu.5M..wA}.!"..v.\....$.."..a....?.........(.E 4.[.cV..R#..9.J....9.I.....17.y..e.JZQj....9_o...G...%s...}.....h.FZ.EJL.....3....."7......V...u.`.......h..=Y,.....A.\|b$...z.WR~1.y&...o..8.$..,u..{.LL.......N......n.i.f.+......YJ.,!f$.39...Q.$....3.I....x.3..U........BN.-.u.n.#.P..!..&.....4:f..2.o(..1.E....c.O@.x..2..#... .P........:.....Y..m..C....R1J...........82.u...{.....G..S*(..n#.7..Q.'@.x`n...}..P..q..Sp c.q.. R.....:HV.....H..+..<.O..o...0.k8.f.=G'....-3......N.......G..3...05....Q9.U..LHa.K...C.IP.4.z/...{.............s#......v.~..$K...(.^.^5nc.E.TW..E.J."lMe...jWK...h%>.,l.%.-8:v..E........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cea-19-finalist[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 83 x 106, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4388
Entropy (8bit):	7.939739802417702
Encrypted:	false
SSDEEP:	96:5PKQPvxSBRM9NXiguw4tQfqigraaG7pc1+lRfDA1hnhMVOA:zSBRMziC21iWMl1jf81ZhMz
MD5:	E8636B3335818C9F95E75500A89209C6
SHA1:	E7CFFCD638A14323F59BBD23C46A703E50FD8156
SHA-256:	082F99D37C1FEE9AE0663D741A2B12A4B5E22E0E026E9EB2F2B736A45A993BAB
SHA-512:	EFB5DE83A4650CD1C890482E1371426181206DBCEE00F4C59600A3E490E0D339264EB9209EE8806768AF864A747637911DC25914BCC284D3B1B17581451CD884
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/aa1105a8220687b9b26f5c6b35483a94/000da/cea-19-finalist.png
Preview:	.PNG........IHDR...S...j........W....PLTEGpL.........j.............b........-a..........3....'....................X......C....T....Mv.........6sG..=..X..r..g.......Kv.[....F.....e..r..=..o..z....}...............?m....d..a..o..V}.d..k..{.....B..P....O....N......j..\.......2..g..'\....t..<k.(..\|..Z..4g.d....._..z..K..n.....d....d.....g..Jt......u..3g.d....W......Bq................,...A{;..3...Q..<w8h.!...H.Bo...d....ttRNS...............)..1'_./#.uY.L.A..B9...s.j8..h.:.....NO.:..P......r..a...c~..t....\|E.....'..e`.r...G..jy....R.......IDATh..._....O...... o.....b....v.m.Zk}.W...}.g{......_~.$........\|3s..o..<..yI......M...[9W......z.S..:.`..;.....w........8u.a...6.p...S<..4..a..)...J.P.....JI0.J./[...O.....p....tM....B&j...].axO....Z.h..E...f..;..\....v..2..y..yg.x..!..........V...f....t.a1k-.{..Z..-..WFz....'......5..O...W...........h.}.46.....O..w{........Q.,.h.OZ...Z..>....h..O.....,....{....9+d..M..D....>.6.$b.v.Od.O.k.;.......p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\component---src-templates-legal-cookie-policy-cookie-policy-tsx-c337ec1ef929c5810717[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1765
Entropy (8bit):	5.1439198078837896
Encrypted:	false
SSDEEP:	48:lD58aUCn7NfkLTOig8ScG8fW+csqHI4N/P:vm8cu+csqHIm
MD5:	6DB4AF938921C2856B73978053A7D8F5
SHA1:	BBF1CE792C32127CB2C5B31B2C24EBE4F376DC0F
SHA-256:	A10FB2A049A6AE57A180ED603B6D99D2209A4B6A0BA276B0BE07F1AD55AAAA4B
SHA-512:	1DF2C8C169DD67FD05E6C07ED67CCF6475482BAF5DE1AFC85946A5E85BCA5F1CA24B47751DD3C1D8BE418BC439D279C98D8305B98E46B3DEBC78CD7CBFB07BFB
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/component---src-templates-legal-cookie-policy-cookie-policy-tsx-c337ec1ef929c5810717.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{SI7x:function(e,t,a){e.exports={userlike:"CookiePolicy-module--userlike--1zQjU",pageHeadline:"CookiePolicy-module--page-headline--2sYGl",mw860:"CookiePolicy-module--mw-860--1knyQ",pageSection:"CookiePolicy-module--page-section--1Ou28",versions:"CookiePolicy-module--versions--1JOEE",breakWord:"CookiePolicy-module--break-word--pGK76"}},v2sd:function(e,t,a){"use strict";a.r(t),a.d(t,"default",(function(){return s}));var n=a("TSYQ"),o=a.n(n),l=a("ZrBS"),i=a("65uz"),r=a("q1tI"),c=a.n(r),u=a("SI7x"),m=a.n(u);function s(e){var t=e.data,a=t.page.cookiePolicy,n=a.title,r=a.subtitle,u=a.policy.join(""),s=function(e){var t=e.page.cookiePolicy,a=new Date(t.date),n="cookiePolicy"===e.page.subType?e.archive.nodes.map((function(e){return{date:new Date(e.cookiePolicy.date),url:e.currentPage}})).filter((function(e){return e.date.getTime()!==a.getTime()})):[];return n.sort((function(e,t){return t.date.getTime()-e.date.getTime()})),n}(t);return c.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\deloitte[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 185 x 52, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4103
Entropy (8bit):	7.94631337636591
Encrypted:	false
SSDEEP:	96:WeBmBWyuVChavDHnoqUHyQak/gmji0Q9QTpo26l6PMAN:LOWyuzLHDUHymZTW6PMAN
MD5:	AAC07BA32684BC141D8661B252FEDF49
SHA1:	99EA3BC2483490EC41941504D15117FCF207718B
SHA-256:	5061BD1DFF0D32343D4DC076EBA2DD1D24D9ACA855EE52C41DCA12531E533B61
SHA-512:	803DD7BC5DFB780F75192AC366D2F7A43F442CA7DC057A09FFAD69F7C41ABE58DD9E10E9D173E22E4A23CABC52DE9CC8D73B69A13B769B9AAA561C582B1BB3CC
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/29637efd3df1bd7f934848d6c806529f/8f3af/deloitte.png
Preview:	.PNG........IHDR.......4......]ih....PLTEGpL..........A..7..@.s..[x..=.......;d....=f.......[}.t..Gm....7`.X{....[\|.\}....g..Hn.~.....d..4_.g..Tv.Aj....3_.t.....(W.In.....n..r..8`.In.Tu....Wy....n..Yy.%T.Tv.{....#...w...P.?f............j......x.>..<..8..G..D..M.#S..A.+Y.2^..2..J...C..iMm.....FtRNS.............).#?.4.Q..mq...!`B..V.u.?../Oh....d..........mQ..l.....IHC...tIDATh...[.J..'.$!...[D6Q@..U...~.......I@.<..G:.....9s.!...........@.Fv4J.w...n.O..-..n.........Eg.6..#.i.D...0....W8]1.=J.t5x:..5...}...c.[.{!.eYueU.e]W...C.H...."....:;.).l.~......@.z..<.]We.c:\|..$..^...<.]=.oz..=8.G$O.]f....\|k.E.=gO.....7.....$W.fT[.{C...F...\|...H..."..u6....G^.%../yz(..A%Ft..b. .."'.T<...Q..%.0$..7 ....@D2.aF.&........Kd.....g.9.../...N..K.RB.>.kT...(....i-g^qnI.v\|....\.8}.\Vl........2....l.2..... tG...i.).U..,l..t...,.....t.oQV.....G....O...0...Hv..j0o..E..X..+..r..*.<.W.g.........<..oa....].......@....0.<......EN..W`C.J.SOV.o-.@g.-r.Y../Hc....BM...!<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\deployment-slot[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.180832987205441
Encrypted:	false
SSDEEP:	3:lCM6YXM6n:0MTXM6
MD5:	E9CFB61168D6A4D4367FAA3FFCB54A56
SHA1:	AD9952E52B838B83B12EDFE280B435C9255906E4
SHA-256:	CDA791E124B7EDAE6D8DA03A23FD9BE019121E58AE462568C7C1E444A2516EA3
SHA-512:	5AB3CED75FF65E085F229CC6A2FF45B7CC467C1B5929DBC5C383EC7E6ADE7CD89D3AB5FC8EB4DD9E1FE40AF8D83EA4DF0E1BD639C8A319FA7CCE7C54447F1B16
Malicious:	false
Reputation:	low
Preview:	..production...production.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\do-we-share-your-personal-data-with-third-parties.3183cc5b[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	5.133977783301387
Encrypted:	false
SSDEEP:	6:tnrLnl/kmc4slZs49/uZSKsKMjR4EQazkqlQT8qvRGMXg6mqE:trLnl/klkxxMjqEQaIvvvQ6s
MD5:	3183CC5BB29B6CEDEBD35BF985DCCCC5
SHA1:	85F461D81A7FE34AEF31ACDF48D04E3430B198BA
SHA-256:	40FEDF5C3D23E417F5E622875BDDD9562B4C271AA7C7240989856675A1127370
SHA-512:	CFECBA3F42B5E0585F7073519E45904A4343A28E4D667CBA9DF8F7FB2FC622604FFE0883DD7AF25020C2D151A62CBEAE58F74B5F0E710EBD48604181CEFC0576
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/legal/privacy-policy/do-we-share-your-personal-data-with-third-parties.3183cc5b.svg
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" xmlns="http://www.w3.org/2000/svg"><g stroke="#00A9E2" stroke-width="2" fill="none" fill-rule="evenodd"><path d="M19 1h5v5h-5zM19 10h5v5h-5zM1 10h5v5H1zM19 19h5v5h-5z"/><path d="M8 13h9M4 8.65V3.5h13.5M4 17v4.5h13.5" stroke-linecap="square"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\download-terms[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	396244
Entropy (8bit):	5.401826649898274
Encrypted:	false
SSDEEP:	3072:DksECAUEAUFbvrUoWZNxxAxbt2s0XMwPw6gcVKx9TYI6USn+rfEq8O0qUw0vFoMn:4sEbBWZwtExY/p7ghjGC
MD5:	2CF3F36E65276728D03C3E240EACEFE1
SHA1:	66FDA390CDFE51BFFE94886B71CF61B3DFD23C98
SHA-256:	402CF10DF67E5CABDC898C358185EF1A98745A48936038BDDB1162BC4DAB5ED2
SHA-512:	37CE3774217B3355AA99A0C0DC2FD23D4B7A03AAD888027E77F1691FC3DE2B4FA6FFEFE293CBD54AA50AFFF1811612E0C6D8CB2E122EA5052C865ECDD44E3D8F
Malicious:	false
Reputation:	low
IE Cache URL:	https://tresorit.com/legal/download-terms
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><style data-href="https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/styles.ce419b103dab4a823bcb.css" id="gatsby-global-css">.Button-module--button--2X_Ir{display:inline-flex;align-items:center;justify-content:center;text-align:center;height:50px;padding:0 28px;border-radius:5px;font-size:17px;font-weight:500;line-height:1.2;background-color:#00a9e2;color:#fff;transition:background-color .2s ease,color .2s ease,border .2s ease;cursor:pointer;border:2px solid #00a9e2;text-rendering:optimizeLegibility;text-decoration:none!important}.Button-module--button--2X_Ir:not([disabled]):focus,.Button-module--button--2X_Ir:not([disabled]):hover{border-color:#008ddc;background-color:#008ddc;color:#fff}.Button-module--button--2X_Ir[disabled]{cursor:default;opacity:.5}.Button-module--button-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\f86205acf14e10b04442f20c8e648ccb82a15406[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1564
Entropy (8bit):	7.758508591936258
Encrypted:	false
SSDEEP:	48:RXq3kIw93PUzlMjJw4gdXw0yLRPNX0+qzFMEyxz:Ra3k9/wlMu4uOLROdKh
MD5:	9BF4908104EFAE45DBC1F0DCC66803E3
SHA1:	F86205ACF14E10B04442F20C8E648CCB82A15406
SHA-256:	2C9DAF81F0815C9E951666E6F80D7E1F3E146BE631541D4CC924D133FE2007AE
SHA-512:	0C257CB60745320AEC45D17F6ED88A71333EE3C2154E76BBD279E4E858870646B6B4E5250643D2E3484E76FABB5DD34D7175D4EB88C23AC97F1A7706C9AFE3D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://theme.zdassets.com/theme_assets/228341/f86205acf14e10b04442f20c8e648ccb82a15406.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.....bKGD..............pHYs...H...H.F.k>...JIDATX.W[lTU.]k..)..pP.H..`...~........&..%$.`...M....y.....Z%.DHL.......h.CI....B....:..l?.<Z:.[....g...:..C...N^^`....@.R.z.....6.7..M....]'V\....cxhr....bf.S!..I._z...(..4...!.X..#.%3..Do...~.Z...R.I.....c..XJ..K..p.o....D..?.D..jP.Y...V........Px..Jz.....W.0..<M....Oo.........E.h...0..@,..rgIx..X)..{J.k.zO....&...".X.hX':1.Q]0,.2.gUW~l....W.U.ta.Q..zX........@.....\E..G.....Xu.Z....~og.&u.+.S........r[.u....l._#.XT...&..P]..TA.N.....Q.4lv...-SO.Q.....P..V......_..\|J....O[..)u..P(H^S..W..t..H+... b.N..@S...l..W.X.j...:..-8..7.D...R.@.O.{.[0.k}.s..qZC.....f*..m.....M..[.`..Qx.u.5...9..Z.. .!....kf]..w.N..D.K.)..t ..Z..dm.t.m!...g.R...@..U..o.>...WVA.!.d..I...;......{..CI.W...{...ONT.<...l%qF".$..&u..._gLO..g..I(..X'2a...f.:....~..b6.......m\|...[>$4..1.V...l.y5\|a...,H..l.\|_..g.F.PU....Rs."\|rL....1...c."(rW..%...l.....FT ).R,.....-=.C..'FN....$.&.....N@^.+..1^

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\favicon-128[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7960
Entropy (8bit):	7.946047636387503
Encrypted:	false
SSDEEP:	192:syq/qOcx7v4UBreQVmiseVMQu12LP3lMeJq7KI4bUtv:syqiXAKMQh36/7KIj
MD5:	70F4006C678DC75F1848DF66E73A7471
SHA1:	4983D7D04BAF2673A821FBE0DE084FD289EB6B6D
SHA-256:	555C3D716F250548D0B135CB74C6E3300D9C8C935C6DF969BB0753072039652C
SHA-512:	F0270008B7561027963D5AD8CB405D47F5395230FDEAD7C35ACDD62447CF89B76183B223B2F0B9C911C423AE5A70EB6A18FB349C05B4F97A0637E1DA667A05FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/70f4006c678dc75f1848df66e73a7471/favicon-128.png
Preview:	.PNG........IHDR..............>a.....gAMA......a.....IDATx..]..]E.>.......=a...H.A.#...(.~ #.+..~.K..IX.....q.S.....De.. ;.!..H......t.......OU.~...u.z.;......n.s.s..u."...1.A.D"..F..}.a.......b...[......w..dd...N.YYY...U.d.7..:0.....Hv=.).+....lqBO......\|.....`...QK.n/. .999....h.q..\|"........#.....C.2)q.._yyy..Z.~R.R....'G\.Bnn.*Q.,BR..v..v.Zr.).Y...]]]I...f.i....3.O!^.X.1y......^e.>Y"...x+...9....= .@.4e....`t./.......q..............j}....At.2.O........c.....+..O/...X.....d.2.O..G.....v].....6.a.L.7.(........He..p...s.A........./......Y"iT.d.....wM. ...t.......w.(........8}..@.!e9\....=...K...v9....k8.L.\|.....E...J...1\.a.o..U...O75HO.....9.oq.Q%...2).5C..Z......8yp...\|.h7bp.a=.C.~.f...F..$..(.{....O..O."QYqR.\6w..k..J.(..0..........1...6...w.kM."Y.;.8r.~.}...._.+w.2SN.....&r.............e.j...f.dS.)x.....7.l...g>..zq..'.P.X\!.M........L.....On.G.mc.t..G..q.~.....5....~.^....Z4.S....R.fQ.LQ..=.7.....`2h./v6...eW.Qi.w...m..[m.)G..9\d..\.,.Fzb2+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\favicon-76[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	10672
Entropy (8bit):	5.802017824895588
Encrypted:	false
SSDEEP:	192:gi4E/6f41+nrnIdr6RjLJDUdKqOPy1rZmg3mS2O:3W2UrYr6Jg111p
MD5:	D9678DA248B07B315DCD6E7DF0473BAF
SHA1:	26DADEA158157DFC938D9E68C5E272E02A11BEA7
SHA-256:	EEE07DF5AE9873335A9E9E72FB9A0569387360C9DEC838001F3A0D7929E7EAE7
SHA-512:	D1B66C583C3C1C35635CB4E717BD39C1195EBF110634932724EFB2911DC52204944C93FD560B7FADBF6E328FC5D4F5DEF3FD6BDA24526C83B799D5D2AE3B9B10
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head><base href="/"><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1"><title>Web Access - Tresorit</title><meta name="description" content="Tresorit is an encrypted cloud storage service that lets you store, sync and share confidential documents."><meta name="keywords" content="Tresorit, link, file, folder, encrypted, content, browser"><meta property="og:site_name" content="Tresorit"><meta property="og:title" content="Web Access - Tresorit"><meta property="og:type" content="website"><meta property="og:description" content="Tresorit is an encrypted cloud storage service that lets you store, sync and share confidential documents."><meta property="og:image" content=""><link rel="icon" href="assets/favicons/favicon-16.png" sizes="16x16"><link rel="icon" href="assets/favicons/favicon-32.png" sizes="32x32"><link rel="icon" href="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\gartner-peer-insights[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 104 x 83, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2635
Entropy (8bit):	7.909360499277412
Encrypted:	false
SSDEEP:	48:z/llR8Vobu1ODiLke2pHe92yiVgHZyQcpznx5Xh8fnqqxjgXlkStRx22AqW+huvn:z/llyo6QGLkege94gHZs9wnqtZAqdhuv
MD5:	8C927EC595E3B47D9E9098A94BE3E94C
SHA1:	2F79139D645969C7AFA81DD8EE7E999C86A9A0E0
SHA-256:	4314ADA42A04F24E54E09C5926F5C440291E11AFC3F8BA79CC7BC3EA8126D62F
SHA-512:	ECCB31748CA0370CE92B9D516F6DD98FDA6CA5C4B459C2E0DAD355D4FC3CE842CF431A2E33789C9F8C149B1FA0FCBC8783E924F695E0A53AD99A7C98DCA52206
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/0bb8b32f59311fe333aacce843168d18/7eadd/gartner-peer-insights.png
Preview:	.PNG........IHDR...h...S.....D......]PLTEGpL..6..5..5..5..6..5..5..4..5..5..5..5..5IA!..5.....5.....5...........5....................4b.:.....tRNS.%VeF.7...v......y.XJ8.d....r..b....IDATh.Z....D..Qq_z..?.U.:.~..<...V.$E%.....u.e...9k..........<..>O.,.Q.m.[>.....,. ..0...0....v..R.-.n.c..c.......mL~....10J..a......W.....^b..eq.z..F32_l....%U.X.\.$......../.C...+T.}..a.d_{].%..=..eFd.3=...-.........7...I...E.2..~q....../....ZlG.../.x.\|....d.7[.{Ls.4....H.R\|..\.fk...t..N...\|j.!..d.\|X..H..E...T.It}u.....t.y.....}...'......g...T.Q...\.S........%,y@2".&X...........\..<].....e.I..%zv.`.F.l"].^R....p9....I...r.N?.m.pN...6BQba..W#?...d....g..~.O.O.V......Q....9..S.u.i..(g.......Py.=...K..`.!9..Q..x4Ma.1\|5.q...\|.."#e.i6.V.A...NMGc.z..AT.....+...../E.Tb.w...XVoH.@9.rE\|...:..b8u....g..e'.. b....C9W.y.j...^.....B...R....i..p.1.:L...0.4...p..u........[...(.<...+.Fb...h...i..a]6..u.T.s. .N?0\5.....]..x..0.U.B..B....+...x.....t...4..\Vg../;bE.k.I=UnK.....A.gP

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	121119
Entropy (8bit):	5.476426657787261
Encrypted:	false
SSDEEP:	1536:5AqFs09uojZ87AUxX1dAbD0wj6yRDboexlpg45FeSlW2/yQwt2Cvn/D9JINOf/le:5AFAaX1abD0w3lB0Sl5y9n/c+/n5O
MD5:	2CF504FF462A9669DD991603A4D4911C
SHA1:	D734FE6CC349EF31819EF553B4E1DB567D5DCD13
SHA-256:	C2002C99B4A415FBFB88E8F1081B1DDF000CC34A3E51D915AE40347CFA9412BA
SHA-512:	26347C79FF99F320E5E7300E81DCB5FD2503693F20DA2C302004FAD4CB0D831904F39D68930A476F082998116552484EFA5E2B552A2F327B06B88720EDC0C7C9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-55V995K
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"13",. . "macros":[{. "function":"__e". },{. "function":"__e". },{. "function":"__e". },{. "function":"__r". },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"signup_conversion_value". },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"google_ads_conversion_id". },{. "function":"__v",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":false,. "vtp_name":"google_ads_conversion_label". },{. "function":"__u",. "vtp_enableMultiQueryKeys":false,. "vtp_enableIgnoreEmptyQueryParam":false. },{. "function":"__c",. "vtp_value":"623229727". },{. "function":"__c",. "vtp_value":"SgvLCIiD-dkBEJ_2lqkC". },{. "function":"__c",. "vtp_value":"FcDSCJiB-dkBEJ_2lqkC"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\hc_enduser-f2b41b28e96aa3334b731e6c3ba64b11[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	1269110
Entropy (8bit):	5.7096868149942015
Encrypted:	false
SSDEEP:	24576:nzRTmdHFEBtBkH+9JaitS+pLuayTwNfJ/8w54MZFIFLV2h6xW8iXDKsIOTFWUTMl:nzRaDHMJaitS+pLuayTwNfJ/8w54MZF0
MD5:	2351D29852B169841041031CF2B8CCD0
SHA1:	80B17075C268C1E8B588F5CCA460585088F7A91A
SHA-256:	33F1372E5D6C18FE495B7F93805F9972D7E3D29CE96170618359537452037959
SHA-512:	BA8AA10B44E4B29D862E98802FC3351F87CF8ED78CDF2FC16EB7B0E516BF3007E5CB3449A8EB3BAF1C349030E190AAD4383D259F5C6A29A84B816E246879E8FE
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/hc_enduser-f2b41b28e96aa3334b731e6c3ba64b11.js
Preview:	!function(e){function t(t){for(var n,a,i=t[0],o=t[1],s=0,c=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(r,a)&&r[a]&&c.push(r[a][0]),r[a]=0;for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(e[n]=o[n]);for(u&&u(t);c.length;)c.shift()()}var n={},r={37:0};function a(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,a),r.l=!0,r.exports}a.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var i=new Promise((function(t,a){n=r[e]=[t,a]}));t.push(n[2]=i);var o,s=document.createElement("script");s.charset="utf-8",s.timeout=120,a.nc&&s.setAttribute("nonce",a.nc),s.src=function(e){return a.p+""+({0:"AnswerBotModal~ApproveCommentModal~ApprovePostModal~ChangePasswordModal~CommentActions~EditCommentMo~4c842df1",2:"vendors~CommentActions~PostActions~actions~subscribe",3:"BadgeAssignmentsModal~ChangePasswordModal~EditProfileModal",4:"EditPostModal~EscalationModal~MovePostModal",5:"vendors~EditCommentModal~EditPostModa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\head-hook.719cb298[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	11664
Entropy (8bit):	5.15229397823854
Encrypted:	false
SSDEEP:	192:2SNvr7aD1H3qV9nEoLnaPul4hcUORy11o086yCpuuYDfu/t40Nm:2Sr7aDlO9nEQggUUy1i0ICE1rl
MD5:	719CB2988ED3FFAF174EE1C394898125
SHA1:	0F006951B510367648D67B1D1B72C4B5F12D47AB
SHA-256:	6138BC74685227A839A8E46AE0A95A82B12E533E22E823B74D6836F78ACAD5B1
SHA-512:	4A600B78365EE60A4A29C6DCBC9F3A89EACC0B9EA3272EC2E296A16EBE14F1B6EDB2EF15F5BF99289FCAAA7EA06382D10289AB0450C1C034EA54D95E4EF572FA
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/js/head-hook.719cb298.js
Preview:	// Copyright . 2017 Tresorit. All rights reserved...Array.prototype.find\|\|Object.defineProperty(Array.prototype,"find",{value:function(t){if(null==this)throw TypeError('"this" is null or not defined');var e=Object(this),r=e.length>>>0;if("function"!=typeof t)throw TypeError("predicate must be a function");for(var n=arguments[1],o=0;o<r;){var i=e[o];if(t.call(n,i,o,e))return i;o++}},configurable:!0,writable:!0}),window.Symbol\|\|function(t,e){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e(t):e(t)}("undefined"!=typeof window?window:global,function(t){"use strict";var e=Object.defineProperty,n=Object.defineProperties,o=0,i=[],a=Array.prototype.slice,u="object"==typeof t.ES6?t.ES6:t.ES6={},f=Array.isArray,r=Object.prototype.toString,l=Array.prototype.push,s=function(){},c=function(t){return t},p=function(t){return"function"==typeof t},h=function(){},y=function(t,e){this._array=t,this._flag=e,this._nextIndex=0},g=function(t,e){this._string=t,this._flag

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\hero-image-win-us[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 762 x 432, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	122128
Entropy (8bit):	7.97517013929975
Encrypted:	false
SSDEEP:	1536:GPZ0hOfcRmukYbg5oQY25Ei0QncvhXdPUZOwK6QscRF6YxcvFkv8WwCqHFt+DzSv:GxSqfu3g5ZncvoZyOd2yltsztObnL
MD5:	FBC4C4DC33A2A789215E3755E8DC79DC
SHA1:	9648089E619C476B5374CD675F7566D38F343647
SHA-256:	234C47DAE639E992BCFDABD8190424097849C633AA883B8EB44075FC599BFE54
SHA-512:	03ADC7B0229FE20D958D73207AB52EE62DB6402AA5CB90EF461D3A614EC71B0CDFFB7CC36E97428740DC0592874564E94FE29D4E41D89F008D1F5E3AEFD38238
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/65e0731d46420c7b56ce4566905d5772/a1d63/hero-image-win-us.png
Preview:	.PNG........IHDR..............4.B....pHYs............... .IDATx...\|.E....$.J.!4..A?EA..AQD....J..."....{.U@..{..RIH.'.J..g....].!.......m.....}..{:K.$.WE.UTQE.UTQE.U.B.w...9[W.UTQE.UTQE.UTy..^B\|:..7.q.g..UTQE.UTQE.UTQ.1...%.....P.L...T.T.R.L.+W...9..._.3g..\.....UQE.UTQE.UTQE.....p..X.b..V..V.^.._~..G..3....3........w../<....z..nl..M......UQE.UTQE.UTQ._.{...I.Az."E2.U.]...x....<Gqy.^..g.]j.Ee.,Y..K...\Xv...F..QD.......{.y......-..h.>.._.UTQE.UTQE.U....=..C..P.bE..>.(..&.k..e..[.n}-"".....g....s.N.?..sS..{..=d....{.n..7...g_.ti.C...0`@a..g.....o..O.^Z\|.......]...%J.U.d.B..t:.JJJJJJJJ)%._.-S..s.9.......U.Tq.Q.............<&&f.........>.+./.?\4......>\|xQ.....,.W.&M.=.......yyy=.../....i....._IIIIIII).T.T.....:m.b.{.W.y}..Q...G.......T.V-...?.v..W.^.{..`=....?.[...M.m...n}....(........<x......G.......>.......B..].lY~...~.x..WA.~G..B+....VRRRRRRRJ...b.P'. ...)......GN3.h.X..?c.\|..'Xg.[..f.ad}.M.\.~}...;:..`..b...zr}9-...C.P.7"b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\how-do-we-use-your-data.e503980c[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	5.010614153670085
Encrypted:	false
SSDEEP:	6:tnrLnl/kmc4slZs49ngFZSKsKMjR4gtHI8W:trLnl/klFgFxxMjqKI8W
MD5:	E503980CAAEB18E9422D0B336E6C2161
SHA1:	0089B613198BD5927F251B6C1D34C4E5CB280FB5
SHA-256:	FC1ECDEF6E893709A9EBAE6B646E2378A4ED37D8345316662998090CDC0D586E
SHA-512:	FD1B87E83A0CCEEE1C819E7A7D17515FD7ADA84890458297CCBCE815ABC205F77A5A524C7B5F32770843FA439EAB5E94E08071F3DAB4121FC08B98F94FF8D45A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/img/legal/privacy-policy/how-do-we-use-your-data.e503980c.svg
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" xmlns="http://www.w3.org/2000/svg"><g stroke="#BC6060" stroke-width="2" fill="none" fill-rule="evenodd"><path d="M1 1h5v23H1zM10 1h14v5H10zM10 10h14v14H10z"/></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, progressive, precision 8, 500x464, frames 3
Category:	downloaded
Size (bytes):	11702
Entropy (8bit):	7.896901089434707
Encrypted:	false
SSDEEP:	192:LtGjN1DpQ8jjLFEI6B0fa4EZqfmx6hMgIOK6IILzYzU05kRU2YBEjgS3AbpNMZ0y:Lo5RDj/ixIm0M+K6I7zX+RrYBEjgBNaF
MD5:	51C2EAE89110F80563AC4860FFE3F997
SHA1:	16644444A2B15D51EEB915456A831112D644527F
SHA-256:	54CFED89CD4526F1A5601A15D295B03E9EB0C00C032396ECB3A049897094C498
SHA-512:	D834E0A370025E75B28502BFB4EEAC03527B3CA32D5FF8F0B32158C772BAF3E8762EA0790699A41D0543EAA06011E390471BCFB6541AFA825A0BE2251CBF7580
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/7e1ac607c3e5793795fec2d499a3944e/db496/image.jpg
Preview:	.....C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc..........."..................................................................................L...0E/.@H.LI.z\.OO7H............8........&.L...........L....&$.....$.................g.e. .1'E.a................ ......@.D.....g.e&$...M.a...y.@.LH...*..............0"`D...@J$.A.j.D.n.~....:x\|.......}....... .....&..@"`D..k.P. .I.j.@[....`e.+...o4..H.....S.;,.g.q ..8@...... .. ........6....y..#...r3.^...).{k.G^{YO7..>{Yk=>..Y................\...........G?@.7.....=\.../,.b7.v..Z.......}mg................Z.@..@.......nH.O../&=.gN.n..N....k.......vr.=o3..z...p...@..$@ ...D.1 ..:m[.........[F7^.6...g&[5..a9k...rvV.X..8@..`...L.@"&..\..b@..t. ....$.?.....XWu/1.[+._-....u....d.H.....!0.... ...e.D...bN....O?@....\...Sa{...d..I...B..LH.....@..........2.".$.1'L._.....<R.kl..s.+%..^..gb..@.H...U.S.u9d.s..0.s..0.y7P...o..\.."R......b@/..8

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, progressive, precision 8, 500x464, frames 3
Category:	downloaded
Size (bytes):	18075
Entropy (8bit):	7.94656423386746
Encrypted:	false
SSDEEP:	384:RJtXu5W9otp7oGZYDj1x4d5wPGrEaxn+H6vj685sz:ZX6WYoGcjv4d5wP+EKj5sz
MD5:	CC080770A88CAD327921D5807115C42B
SHA1:	2901AF7834129FE325407FE61E70BF2527081595
SHA-256:	E111DC427F71B0E73ACE5DF2B24EA4940B44DD0A3A9F66CDC185590265B8929C
SHA-512:	D6F2D43BAEBC94A0B209AC5C382E9B3A50881B1CB681C2B7F009078C707906806A0EDEA81EE055FB2F8B768D133FDEC12196857AA433CB734F98CE550F7A820F
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/cfbf56c01390960cb6dd2cab8e5facc5/db496/image.jpg
Preview:	.....C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc..........."..............................................................................:.9zp...d...d..T.O.V.>w..gn..k.....I.V.eZ..fU.I...6d.....f.0.y...J....fu....\....h0.....N...\|...&...=.RMd.e].....>.5........bMP.!..X.J&...\M:.... "...J..41.y.R.L. .:.. ..k..Y....%k:T;..59'.....Y..O)...zg/..(...KVL^w(..4... ....]0...S.1.4.'..nn.0..s..L../V.olt>^..../..Usy..M....yR.e.V.4@P....14........h..'V...2..pq..&c.G2t..{.+..\|.Q......d.....^.2^e-.m...m3.f.4..E1ks..._2.~Iy'X..R..3[3.qq6f...+34.A.:.D6.jv.q...j..lJ<W..b.l.....S....O..E..<..K%5.Vy....t........+:..%..\|.(kx@X. ...r.....?.:.6.I..I...X,.w...f.a.e...h.k.\h..8.e.LK......7L.u..\..^Z......e.<-..&.......r..h..'t(gR..Fu.......C.....{..t..r^W...QiE&X...-...]4~_Lg.Z/N3.y..4...rQ.K0}..F.\...@E..g....T"..VW.4.i...I_X...qT ...P. .De....A..{\|w^g}u'...Q.u....U..TT.g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, progressive, precision 8, 500x464, frames 3
Category:	downloaded
Size (bytes):	32939
Entropy (8bit):	7.964349955631949
Encrypted:	false
SSDEEP:	768:DnRtrRNgUb3T+imFJ9OITNT2Iz3fwWwZjs:DnRtrDgU2iCTII7fwWAjs
MD5:	7122C49ECE1261D6AB2B8917B2A401B8
SHA1:	9AFF3824E483FDF128BF5AD17435FAF3AA2DFB54
SHA-256:	8F76284C0186ED219AFD605784DD3713689BC3F961F242B193CFF6CF1F5E70BA
SHA-512:	3192662DD33EDD324BED74AEAB38EF79690C4F2AE6F573E1C126361EA07F07A43BD389E438480341B525C2392C9A05BA9DAA0A0FAD9E94171776A4A4BF300616
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/445022c9ab9f9dedd4e20ae377987e70/db496/image.jpg
Preview:	.....C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc...........".............................................................................&+\|3JC......A.>.P.....l.C.U..}7.r.......Y.....3....W..1..P.p.hH..F..#\.:.Q.\|Iv..K.C..K..o.-...WZ.10=..<..._..W.t#>%m....A.a..K+.<.T.),g5..tL...K.6.wB9.w....N...j.X8A.9..$.......`U.'........B^t..h....8...}.Q.$...y..XT..D%..A.MRW[......y..6.w"..\..L.K...G.....B.w.,......v=\JgN.......-..t"...{W[.lf..(.%..........W.X.9U..F.....g1u..M:..C.:=e:7&..-cjDX.U..T.(.}...@...k}.....>..C.L.#....$j..\|X.......iz.....u.$..!.5.V"L..R[=8(.}....W-{0.Kr......1..%(..z1...4....g.. .4...P.TO....4ZO.K.fR8.("p9...f.8@i....hx..p.}S..S...JN..I.7...{A....0...W.v.......sz<V.......R.....Vu.P..".`.{..a..5../O......yL.zv..(..(.j.h^..&..Q...'...<..b3u..r.....w/Y.cL..S.M...H.{...n0..L5...........=3.jJ.8...0b..x..U.QoE...>].q.5}..e.)...6Z....[..r...SV.B

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	85515
Entropy (8bit):	5.49771039885246
Encrypted:	false
SSDEEP:	1536:cI+XQ2gUM0fz6f92xUJ0H68SvPay6AA3Vs/m90mM1X9ZKPVVSqPmBhfiDL1i:cI+XQ/UM0lxUuKUVseamzeBoi
MD5:	025F0ADD3F637A2A271F0DFA0C52DABD
SHA1:	2D7C17A43A3BFB7854B8DD902236E108B917CFDF
SHA-256:	92C53C2BB19E3C83DEB232E12747AC14B72D2DBB4DBF36F359BB182281C2907E
SHA-512:	27264AAFA525122A26B979F105DB68A772DDDFB8D3DF4CA2CC89AF9B841706E66895B862A203452F78DD843883FDA27B64CD7BC2FC1A0EE75292023D9A472E81
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"64",. . "macros":[{. "function":"__e". },{. "function":"__dee". }],. "tags":[{. "function":"__asprv",. "vtp_globalName":"google_optimize",. "tag_id":6. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":["macro",1]. },{. "function":"_eq",. "arg0":["macro",0],. "arg1":"optimize.callback". }],. "rules":[. [["if",0],["add",0]],. [["if",1],["add",0]]].},."runtime":[].....};./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},da="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},fa;.if("fu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\langs.2f55a20e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	12602
Entropy (8bit):	5.354717065384571
Encrypted:	false
SSDEEP:	384:2D7bww4AMbs3uxELzbzuErXGfJVpBBeF2bLmiOkfg/dK/D3s0zL7Fb:2ms3ux+3zXrXeVpjeF2bLmiOkfaK/D3r
MD5:	2F55A20E5349017539BC9CED92B71A1A
SHA1:	924391990495B71A712A98E495B095314EF5999F
SHA-256:	37BC473DE29A7A0345052310C653440FCD65B4B57468C7FAA03C75AF5C990D91
SHA-512:	22EE05ED41DD6D3F3E2BB9748DEECAA797A07014823D26A8FB6B790A2F2F73A7DEBD14F92E271D337C51237A2B0AA1B5F3D2EA77B572FD1887EC6FA90EA81834
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/js/langs.2f55a20e.js
Preview:	// Copyright . 2017 Tresorit. All rights reserved...!function(e,i){"use strict";var t=function(e){if("object"!=typeof e.document)throw new Error("Cookies.js requires a `window` with a `document` object");var a=function(e,t,n){return 1===arguments.length?a.get(e):a.set(e,t,n)};return a._document=e.document,a._cacheKeyPrefix="cookey.",a._maxExpireDate=new Date("Fri, 31 Dec 9999 23:59:59 UTC"),a.defaults={path:"/",secure:!1},a.get=function(e){a._cachedDocumentCookie!==a._document.cookie&&a._renewCache();var t=a._cache[a._cacheKeyPrefix+e];return t===i?i:decodeURIComponent(t)},a.set=function(e,t,n){return(n=a._getExtendedOptions(n)).expires=a._getExpiresDate(t===i?-1:n.expires),a._document.cookie=a._generateCookieString(e,t,n),a},a.expire=function(e,t){return a.set(e,i,t)},a._getExtendedOptions=function(e){return{path:e&&e.path\|\|a.defaults.path,domain:e&&e.domain\|\|a.defaults.domain,expires:e&&e.expires\|\|a.defaults.expires,secure:e&&e.secure!==i?e.secure:a.defaults.secure}},a._isValidDate=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\loadAnalytics.50824ddb[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	5.289096734622704
Encrypted:	false
SSDEEP:	12:j9/USa71g4SjcKQpcDqW2GIwfvuHnat6Iwv28DRWCWuHnLpbDRWCOQ:2Se1g4SIKQSuW28vuHvIQ7RWjuHBRWFQ
MD5:	50824DDBD86CC25680763652A35E8237
SHA1:	08AF5DFD28661E81DB55C2E5C262E06029D484CB
SHA-256:	60F3150A452CE8E218F3ECB22D35DA3B9AD9BA5BD56BB6B6A9D2032F97A14D9C
SHA-512:	96D1C98183D9950CD950F53C94347F9BD1185188296DC57DA2CAA53A70AEBCC7D3C18473A730E0DBA3242776750F273FBB7804012EFA8F5037A8BC4D747B684D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/js/loadAnalytics.50824ddb.js
Preview:	// Copyright . 2017 Tresorit. All rights reserved...!function(){"use strict";!function(){var e=function(){var e;try{var t=(a="tracking_settings",(n=document.cookie.match("(^\|;) ?"+a+"=([^;]*)(;\|$)"))?n[2]:null);e=t&&JSON.parse(decodeURIComponent(t))}catch(e){console.error(e)}var a,n;return e}();if(!e\|\|e.performance){var t=document.createElement("script");t.async=!0,t.src="https://www.google-analytics.com/analytics.js",document.getElementsByTagName("head")[0].appendChild(t);var a=document.createElement("script");a.async=!0,a.src="https://www.googletagmanager.com/gtm.js?id=GTM-55V995K",document.getElementsByTagName("head")[0].appendChild(a)}}()}();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\modules-link-download-livelink-module-es5.0581faab9da94ea1dfc1[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	150108
Entropy (8bit):	5.471871772270175
Encrypted:	false
SSDEEP:	1536:tCcOyu+cDFQtGarzTvr+4h0ixoC5RmQKhR4ptGxjKrpepTCbUHthAdTw85JOC7ZC:theYVrTmkjepTCbMASPCFwQ+zz
MD5:	B5562067481A345D0304D09DEC997A85
SHA1:	867ADACEEDA1A26BFE7E6649FC7A06D7D8507C0E
SHA-256:	A3F72074A16D3ED3327FF5662955DFD942294C5BAADF6A20A284D2B0230D3D3A
SHA-512:	92A4C9930317B012A842017B80FD568EA54D938979D750C060E8C0E572DF9DEDD38299BFB4B66D922E2E912B1D44EFC3C95DDE136A3E0D408814E069C1E07098
Malicious:	false
Reputation:	low
IE Cache URL:	https://webclient-cdn.tresorit.com/modules-link-download-livelink-module-es5.0581faab9da94ea1dfc1.js
Preview:	!function(){function e(e){return function(e){if(Array.isArray(e))return n(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(e))return Array.from(e)}(e)\|\|function(e,t){if(!e)return;if("string"==typeof e)return n(e,t);var i=Object.prototype.toString.call(e).slice(8,-1);"Object"===i&&e.constructor&&(i=e.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(e);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i))return n(e,t)}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function n(e,n){(null==n\|\|n>e.length)&&(n=e.length);for(var t=0,i=new Array(n);t<n;t++)i[t]=e[t];return i}function t(e,n){if(!(e instanceof n))throw new TypeError("Cannot call a class as a function")}function i(e,n){for(var t=0;t<n.length;t++){var i=n[t];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.definePro

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\privacy-policy.2498fbaa[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10101
Entropy (8bit):	5.079833090833755
Encrypted:	false
SSDEEP:	192:RCrSRc+pTpwpspyO7YfxRfIqbIdZFs/KTS25dr0Gg6EuAK:grqpTpwpspCDfIqbIZF+KTS25dr0VIAK
MD5:	2498FBAAF693BC219145ABB7FD7BF195
SHA1:	60445EAF3BFAAAB8E07289460B15DA9CF02D2D42
SHA-256:	CF0630778A449DCA9218D16BF7B54CF23851C5E69D2F12AB5F57E1A9DDACCD72
SHA-512:	1FBB25B47A6A2E1FF5576FFA6AB6458597FFEAF2F69DBD7F8AD260A805945C3A7DCD6B01446E5D641DE7E44C492FA4F8A1BDC757CB5B6214FEB44CC6DDA7D85D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/css/legal/privacy-policy.2498fbaa.css
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=b09afa7b1b193aacab0e). * Config saved to config.json and https://gist.github.com/b09afa7b1b193aacab0e. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */.sr-only{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip:rect(0, 0, 0, 0);border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:auto;margin:0;overflow:visible;clip:auto}.tooltip{position:absolute;z-index:1070;display:block;visibility:visible;font-size:12px;line-height:1.4;opacity:0;filter:alpha(opacity=0)}.tooltip.in{opacity:0.9;filter:alpha(opacity=90)}.tooltip.top{margin-top:-3px;padding:5px 0}.tooltip.right{margin-left:3px;padding:0 5px}.tooltip.bottom{margin-top:3px;padding:5px 0}.tooltip.left{mar

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\privacy-policy[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	69803
Entropy (8bit):	4.847253042532737
Encrypted:	false
SSDEEP:	1536:Bk1oob1I0qhLfZeSI1NW/aMskju4W+KglTSp2jceYLRk8cuaoXXIXKXAiyKA2Aby:61oob1I0qhLfZeSI1NW/aMskju4W+KgS
MD5:	31C48350B2217A7D6E672CE6D5ECCD32
SHA1:	FF84B87660CCCF09BCED0B4A4CEE3D14714B4E49
SHA-256:	3448F4B03E94EEACB8515C71C7073979590F1CA300FF7FEECE042ECD5FEC4A4B
SHA-512:	E8EE2B66BB7DA341F98881A264E86E78214A0B7B7CED5EF8860E80FEB277B858F033A4A2D2701A5358141931DA9065AB6A7E7980FC8564758D635B2323D966B0
Malicious:	false
Reputation:	low
IE Cache URL:	https://tresorit.com/legal/privacy-policy
Preview:	<!DOCTYPE html> <html lang="en"> <head lang="en"> <meta charset="UTF-8"> <title>Tresorit Privacy Statement . Tresorit Privacy</title> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta http-equiv="X-UA-Compatible" content="IE=Edge"> <meta name="description" content="Tresorit is a secure cloud storage solution using unique end-to-end encryption technology. Get secure cloud storage, sharing and collaboration."> <meta name="keywords" content="get tresorit, get the app, features, plans, blog, about us, support, tour, get it for Android, get it for Windows, get it for Mac OS, get it for iOS"> <link rel="canonical" href="https://tresorit.com/legal/privacy-policy"> <link rel="alternate" href="https://tresorit.com/legal/privacy-policy" hreflang="en"> <link rel="alternate" href="https://tresorit.com/de/legal/privacy-policy" hreflang="de"> <link rel="alternate" href="https://tresorit.com/fr/legal/privacy-policy" hreflang="fr"> Styles --> <link href="https://cdn.tres

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\resource-2[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, progressive, precision 8, 355x237, frames 3
Category:	downloaded
Size (bytes):	4269
Entropy (8bit):	7.615597642024459
Encrypted:	false
SSDEEP:	96:1yi1TqOtna3bpmWI2zIRU0fBS8I4p4o2+qHXWBSzW1ZnPvKvgXNKFa:M0Gka3FZzAfBDyoQ3Yagx
MD5:	DEAF0F031E6E1124BFDBC08CF49E5E99
SHA1:	00FD99536E57A51E1204A68424E52497A3B3AB16
SHA-256:	B1FA8FBEF570DEF8D3F523F6DBFEAE75F6261B96BF883F90CE934A4F1E714FD4
SHA-512:	BB6D8B763D3512CF6F03AB73C9BD9CA8EC43FD74A544C7AE673B2DC44635157478FC229A2D15A3E25D33181B2625BE97F5B7F69974289705CA14AB70CAFF465D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/c3f721ed327673fc84b46ac0ddd6448b/static/443eac3d5268ce4e905957b99016069e/85384/resource-2.jpg
Preview:	.....C................(.....1#%.(:3=<9387@H\N@DWE78PmQW_bghg>Mqypdx\egc...C......./../cB8Bcccccccccccccccccccccccccccccccccccccccccccccccccc........c.."............................................................................@.............................y.HP...........9p.....f....Ow.5g^.A..7;..^.=...............x.gD...2.k)z...i.[....<..l.........<Ok....4...dZ..]k~...]s,.C}...@..............H..f.b".....+...YcI......Z..............%et...YI..=J.}ce.].x./ .^=............G...4E.6Z-R/^..E.[KlF....&~_f+...............i>.\|..{1.....:.R.k..c=V..My....Z,...........\|..{M...Y.Q...,M..9.\|.X................Q.*..u..h.7...B<..#.ZhH.........m.'...O?Vn.n....M...,&..q.].................T.^.O:.y..&g......=.....9.../1 ..........BEb.8.....\.4.`...3.$...........................(.........................1@.!A. "02P`p..............$:..jmm.n...=M#..=]#..=j.6C...j...?.....6..Y...4._"{PQ./.b......<.."j.#iHBl..~ei..-.......q...x..l.l..{C.N>.....]Yk..%..~..8.^...\.d...].=...jh..{.(\.d.V

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\script[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17751
Entropy (8bit):	4.945743216776636
Encrypted:	false
SSDEEP:	384:6NoIxBDQsBbpdNUIavcQ9/sKie2xb0l85B:5IxQ/sKieC0qP
MD5:	FB08CCF88286F238073CFB6EE04C5775
SHA1:	F489D875B973A0B7A8CF8FE2DBE843614265163A
SHA-256:	0BDF364999CB2B6B795B4631870E568950512062839A35E1E43B0F0EC8A45F41
SHA-512:	C3A1CF4C7089A210964A3ACBDC87517A3AE71A4C0020722A0AD2F34A6D19AADB9B23D615012D3E478CA069623C72D01C809A5C846BD9208C2BA3D5D26A98AEBF
Malicious:	false
Reputation:	low
IE Cache URL:	https://p18.zdassets.com/hc/theming_assets/228341/3273746/script.js?digest=360221703940
Preview:	/. jQuery v1.9.1 included. /..var urlParamsToSanitize = ["email", "p", "id", "m", "token", "firstname", "lastname", "first", "last", "phone", "company", "company_name", "name"];..var currentUrl = window.location.href;.var sanitizedUrl = currentUrl.replace(new RegExp("([?&](" + urlParamsToSanitize.join("\|") + ")=)(.?)(?=&\|$)", "g"), function (g0, gKeyFull, gKey, gValue) {. if (gValue) sessionStorage["sensitiveParam[" + gKey + "]"] = decodeURIComponent(gValue);. return gKeyFull;.});..if (sanitizedUrl.indexOf("#data=") !== -1) {. var parts = sanitizedUrl.split('#data=');. sanitizedUrl = parts[0];. try {. window.hashData = JSON.parse(decodeURIComponent(atob(parts[1])));. } catch (e) {. console.error("Failed to decode #data= hash data", e);. }.}..if (sanitizedUrl.indexOf("#") !== -1) {. var _parts = sanitizedUrl.split('#');. try {. window.hashData = JSON.parse(decodeURIComponent(atob(_parts[1])));. sanitizedUrl = _parts[0];. } catch (e) {}.}..if (sanitizedUrl !==

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sidebar-lock[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	393
Entropy (8bit):	4.667429602172576
Encrypted:	false
SSDEEP:	12:trfnlGBItmtci7YHDr7oJrxluahRdbalpBjHME:tT8B7jSr7oV3mpVHME
MD5:	845248FDD1495C2BE44E40A8CB8D31BB
SHA1:	4626BCF59766617501565746BFD6AA23940809DC
SHA-256:	8C2FCBF77C04B2BD5582294FB0715390C4C30EEAC574366C4EC66981BD163103
SHA-512:	98B3CDD19675D3C65088FE3EA6E173A7E0971E44E3513A32C17229D2BCD84608CBFDB6538F20C5199B083D62BBC4EBB5B85F03B25E12288DCC0B1EDC636931D5
Malicious:	false
Reputation:	low
IE Cache URL:	https://web.tresorit.com/assets/img/live-link/sidebar/sidebar-lock.svg
Preview:	<svg width="18" height="22" viewBox="0 0 18 22" xmlns="http://www.w3.org/2000/svg"><path d="M9 0a6 6 0 0 1 6 6v2h1a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H2a2 2 0 0 1-2-2V10a2 2 0 0 1 2-2h1V6a6 6 0 0 1 6-6zm0 2C6.929 2 5.225 3.18 5.02 4.693L5 5v3h8V5c0-1.553-1.574-2.83-3.591-2.985L9 2zm-6 8h12a1 1 0 0 1 1 1v8a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1v-8a1 1 0 0 1 1-1z" fill="#3FCAFF" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sidebar-swiss-white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	186
Entropy (8bit):	4.958980173776285
Encrypted:	false
SSDEEP:	3:tRBRNqHHFW+nHFIKcvXVnyvDmJS4RKb5KVErcHMLNr6I04cdtQP1psDzcGRIhR6l:tnr2lfnlGKmc4slmCEcvP1mDZu/7utME
MD5:	409DD7929A3C822E615DBBB0EA26DE13
SHA1:	D816E1093AD9A9037E7F3762709D5A66B1BA3059
SHA-256:	F3FE3B3B1F8F261AB3B1FED268CFB64A8E1CCC4576C90C29E8623482677979A7
SHA-512:	466C55EBE802643C67BBAECAFAEA75C51EB16F8EBBAD79C05A6144F054898FC650BF304363545A55EAE8B8C3ED0D28CAA1647A35AB48EB96F991C7E8E35AC659
Malicious:	false
Reputation:	low
IE Cache URL:	https://web.tresorit.com/assets/img/live-link/sidebar/sidebar-swiss-white.svg
Preview:	<svg width="22" height="22" viewBox="0 0 22 22" xmlns="http://www.w3.org/2000/svg"><path d="M22 0v22H0V0h22zm-9 5H9v4H5v4h4v4h4v-4h4V9l-4-.001V5z" fill="#fff" fill-rule="evenodd"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\spinner[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 48 x 48
Category:	downloaded
Size (bytes):	32242
Entropy (8bit):	6.371573726699754
Encrypted:	false
SSDEEP:	384:pRRiTegS9KMhgxTaZe38BGwK1iFB8a++qSfK1O:paegS9Vgxk97Ya1lff
MD5:	7892CF3692EFEF88A6842A8F48E47DEA
SHA1:	87579D48D22E576F63BC79DD5024D02C6D271E08
SHA-256:	158FEA239F66CCACC99240B9711F7D88D741CE9837911152F7E4423CD68E3A97
SHA-512:	B54A149FC988414E6C8B412E8EB92EAD4449B0FCA45069891270B61C9A84B32EC95546998A24AF21765F8BA9561673949075E8B35385DE705F22B6909C0BE8E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://dq4irj27fs462.cloudfront.net/images/spinner.gif
Preview:	GIF89a0.0..........JJJ.........\|\|\|HHH...FFF......jjj...................ZZZ...ppp.........lllzzznnn..............~~~.........LLL\\\vvv...ttt..............................RRRPPP......NNNfff...***......:::.....................,,,...<<<.........000...""".................. ^^^@@@.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!....._.!..NETSCAPE2.0.....,....0.0........H..@...(\......#~A.....+...`B...v....E..;F..........P.G.(/v9..G./.q..9.d...L...#I..L. .X.hB..L......NO.9.....C%f$.S.....6}.0J..xG..x......X..6...x.dL{.e..mO.....$.-...o..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\spritemap_emojis[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 155 x 155, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11275
Entropy (8bit):	7.9591167938724325
Encrypted:	false
SSDEEP:	192:7yYv/4YWz1Hz/IARSuYreRbJf10Cj/Sk4+RFjwTbqtLkXWYNyDbxv6TGUFih6pj9:OBz/UuYreR1qCj/SkHbjcqWXSWzl8O
MD5:	E96C7936F10952329CA620F1A151424D
SHA1:	F5D3888F5B3E33C61C9FD2BBF6078A3DF89913D0
SHA-256:	332D19B9A43448DA9CA8389D19D2DD1AA0A1E2F8C927301807BC29B24E96C6C3
SHA-512:	8F2AEE6E021C07A6075B9CF81EBABA41D2B783E02BC8F0D51F109716D65F29B0181143FA7A84B17D6F1F41F72C575FD8DB89E0020AA94AD1AE5624354A35EFAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://dq4irj27fs462.cloudfront.net/images/spritemap_emojis.png
Preview:	.PNG........IHDR.............ua...+.IDATx...tT...>szNf&.}.$sf.>s.$..o,..H...Z@....$......../1^b'^.tb...;..,...h..R-.....H.......-..(.....s.u.............bb.d$#..HF2...d$#..F.......r.E#.+..lHh..0..9.#......}A..\|....i6ms.K.]...W[..9.......}..../ ..Z....=.Y+...$g....lh"G...$.C...........~.;..leD..$..D....."GY.s;.....o7t.6.UC..\..F5.#.\..Lp.M..).K.....+...s.n..`;.ep....7.Q..'...;...Q...P7.j).u..n.?.\v.t;o.~.S O.....4....6$...l...I.w...%.....T...ZK2..d/Ggfu.....8 O].i.@FI...V.=....t.Q.\.....,....."...<.bh.....M...:..\.N..;..\.Uqv.v\.....qd+'Gc...t[..m..Xw7.x6..m......\|X.\-..V..?.t4O.....w..^.....\..F...Z..1......mi]...zAv.j.....n/sP.F..^.......{&[6.O.).}...z.G.../.....c..+.4Po..F......^.RHo..[?z.~..w....l..i.B.:..{.....[..7...9...(...g.....".....b..G;.....V./..Qw..7.i.p..T\..v.......>..w.M..4]....-8.%.......TZZ ..U....6._'=J..<A...0..c6.+..\|(_.1..C1qe.....r.O...o.._............'B.7<.."....jo3..o..!.........~\|.?P.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\style.e958f3f8[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	111558
Entropy (8bit):	5.298632678036726
Encrypted:	false
SSDEEP:	3072:IsmgfNYIRI7LUF3wBQoDY/eBeok2PYWpzhxbWShwXsFWB/6ydST5pzkE20wJObDs:IVTR/nVs
MD5:	E958F3F88E9BA009843708A981F42BCF
SHA1:	90918784060DA01C58BF77FA73E1280BFC42A29F
SHA-256:	682B2AB106F9342E8D5F649A5459EA716240695616E8F798944C5A0148CDA01A
SHA-512:	04536A460447D6D14D9B22538C630FD6BC4C4EDE2689985BA8B515848097008F8A9F963726AAD30D5039AE881AD8B0EDCB6F601414C0D1FF9D1E196E65CD413C
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.tresorit.com/webv9/css/style.e958f3f8.css
Preview:	@font-face{font-family:'Graphik';src:local("Graphik-Light"),url("https://az579219.vo.msecnd.net/201609071250ng/Graphik-Light-Web.woff2") format("woff2"),url("https://az579219.vo.msecnd.net/201506241250ng/Graphik-Light-Web.woff") format("woff");font-weight:300;font-style:normal;font-display:swap}@font-face{font-family:'Graphik';src:local("Graphik-Regular"),url("https://az579219.vo.msecnd.net/201609071250ng/Graphik-Regular-Web.woff2") format("woff2"),url("https://az579219.vo.msecnd.net/201609071250ng/Graphik-Regular-Web.woff") format("woff");font-weight:400;font-style:normal;font-display:swap}@font-face{font-family:'Graphik';src:local("Graphik-Medium"),url("https://az579219.vo.msecnd.net/201609071250ng/Graphik-Medium-Web.woff2") format("woff2"),url("https://az579219.vo.msecnd.net/201609071250ng/Graphik-Medium-Web.woff") format("woff");font-weight:500;font-style:normal;font-display:swap}@font-face{font-family:'Graphik';src:local("Graphik-Semibold"),url("https://az579219.vo.msecnd.net/2016

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\tresorit-logo-v3[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2468
Entropy (8bit):	4.440780402779502
Encrypted:	false
SSDEEP:	48:IDlof8Lt+1LTxCTVuDVFoBtqR5lQjSVPpxCTVuOy/cU:qoM+1LTxCTVuDzoLy56G7xCTVuOwcU
MD5:	94B995516C768495F1F85405E91C3D86
SHA1:	260864727A6115A3A282DE3DF6A3D4CF27FAEA71
SHA-256:	7BB9F0E2411397F787356EA1B24A3A451E234F24BE291B00E972F7E79DDEB447
SHA-512:	D05DC59FE8DB1FA94FEC4B56EBF9C5F41E792CB01A43FC0D718E6D55519557311765979B19EE940B357834DA10A43174F2AF59F4EB9DEABA1870BE221A7087C9
Malicious:	false
Reputation:	low
IE Cache URL:	https://web.tresorit.com/assets/img/common/tresorit-logo-v3.svg
Preview:	<svg width="150" height="50" viewBox="0 0 150 50" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="100%" y1="74.328%" x2="0%" y2="26.342%" id="a"><stop stop-color="#2B6DF1" offset="0%"/><stop stop-color="#00C4D5" offset="100%"/></linearGradient></defs><g fill="none"><path d="M19.345 15.208L14.5 12.452 3 18.995v5.602l16.345-9.389zm3.026 1.722L3 28.057v3.948l11.5 6.543L26 32.005v-13.01l-3.63-2.065zM14.5 9L29 17.25v16.5L14.5 42 0 33.75v-16.5L14.5 9z" fill="url(#a)"/><path d="M39.63 30.276c0 1.126.472 1.546 1.598 1.546.574 0 1.104-.078 1.809-.298l.389-.122v2.4l-.215.064c-.885.263-1.663.376-2.373.376-2.58 0-3.914-1.299-3.914-3.862v-7.786H35v-2.238h1.924v-3.328h2.732v3.328h3.77v2.238H39.63v7.682zM52.424 20.07c.405 0 .774.035 1.087.113l.227.057v2.594l-.373-.093c-.246-.062-.654-.095-1.045-.095-2.124 0-3.678 1.74-3.678 4.64v6.748h-2.758V20.356h2.68v1.905c.832-1.383 2.233-2.191 3.86-2.191zm8.44 11.96c1.593 0 2.576-.73 3.096-2.242l.07-.202h2.613l-.078.363c-.596 2.776-2.841 4.397-5.701

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 25, 2021 22:09:21.675355911 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.676044941 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.716842890 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.716965914 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.717415094 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.717552900 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.722477913 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.722547054 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.766103029 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.766125917 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.766143084 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.766163111 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.766194105 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.766206026 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.766216040 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.766251087 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.766257048 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.767498970 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.767559052 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.767575979 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.767601967 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.767664909 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.767704964 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.767729044 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.767740965 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.767807007 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.767826080 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.768913031 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.769009113 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.801392078 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.801472902 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.807416916 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.845506907 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.845638037 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.845640898 CET	443	49716	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:21.845717907 CET	49716	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:21.886984110 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:22.042187929 CET	443	49717	18.194.14.15	192.168.2.5
Feb 25, 2021 22:09:22.042315960 CET	49717	443	192.168.2.5	18.194.14.15
Feb 25, 2021 22:09:56.421181917 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.422061920 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.484100103 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.484242916 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.484812021 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.488110065 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.488204002 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.488780975 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.550050020 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.550076008 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.550144911 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.550175905 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.550183058 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.550206900 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.550215960 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.550237894 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.550271034 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.551151037 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.551179886 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.551234961 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.551259041 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.554938078 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.555687904 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.555731058 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.555772066 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.555797100 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.555804968 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.555860043 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.555870056 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.555874109 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.555937052 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.555964947 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.556016922 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.556035042 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.564177990 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.565006018 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.565458059 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.577584028 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.577723026 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.589437962 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.589510918 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.629959106 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.629987001 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.630003929 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.630094051 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.631711006 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.631735086 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.631755114 CET	443	49755	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.631819010 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.631844997 CET	49755	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.655807018 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.655844927 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.655859947 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.655874968 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.655889988 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.655904055 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.655915976 CET	443	49754	52.218.84.11	192.168.2.5
Feb 25, 2021 22:09:56.656023026 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.656131029 CET	49754	443	192.168.2.5	52.218.84.11
Feb 25, 2021 22:09:56.759097099 CET	49756	443	192.168.2.5	13.224.94.39
Feb 25, 2021 22:09:56.759156942 CET	49757	443	192.168.2.5	13.224.94.39

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 25, 2021 22:09:13.220113039 CET	54795	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:13.269047976 CET	53	54795	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:13.406191111 CET	49557	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:13.456973076 CET	53	49557	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:14.437452078 CET	61733	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:14.488014936 CET	53	61733	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:15.423312902 CET	65447	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:15.472316027 CET	53	65447	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:17.132101059 CET	52441	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:17.183772087 CET	53	52441	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:18.439377069 CET	62176	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:18.488066912 CET	53	62176	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:19.819454908 CET	59596	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:19.870347023 CET	53	59596	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:20.457390070 CET	65296	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:20.518416882 CET	53	65296	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:20.790137053 CET	63183	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:20.851521015 CET	53	63183	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:21.604311943 CET	60151	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:21.664561987 CET	53	60151	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:21.740423918 CET	56969	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:21.790643930 CET	53	56969	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:22.053447008 CET	55161	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:22.170829058 CET	53	55161	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:22.504497051 CET	54757	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:22.657905102 CET	53	54757	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:23.263190985 CET	49992	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:23.316051006 CET	53	49992	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:24.929562092 CET	60075	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:24.961468935 CET	55016	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:25.016906023 CET	53	60075	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:25.043447018 CET	53	55016	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:25.184120893 CET	64345	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:25.253434896 CET	53	64345	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:41.013508081 CET	57128	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:41.078257084 CET	53	57128	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:42.836175919 CET	54791	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:42.891491890 CET	53	54791	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:45.989001989 CET	50463	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:46.981370926 CET	50463	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:47.260777950 CET	53	50463	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:47.477627993 CET	50394	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:47.508295059 CET	58530	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:47.568145037 CET	53	50394	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:47.586735010 CET	53	58530	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:49.299228907 CET	53813	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:49.303390026 CET	63732	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:49.363085985 CET	53	63732	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:49.377155066 CET	53	53813	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:50.452826977 CET	57344	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:50.506695032 CET	53	57344	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:50.766830921 CET	54450	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:50.928088903 CET	53	54450	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:51.174911976 CET	59261	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:51.226320982 CET	53	59261	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:51.711818933 CET	57151	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:51.760224104 CET	53	57151	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:51.907330990 CET	57344	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:51.956140995 CET	53	57344	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:52.437983036 CET	59261	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:52.487035036 CET	53	59261	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:53.690227985 CET	59261	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:53.748038054 CET	53	59261	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:53.984359026 CET	57344	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:54.033165932 CET	53	57344	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:55.691884995 CET	59261	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:55.741179943 CET	53	59261	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:56.024291992 CET	57344	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:56.086040020 CET	53	57344	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:56.356698990 CET	59413	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:56.419187069 CET	53	59413	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:56.693139076 CET	60516	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:56.755965948 CET	53	60516	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:57.180721998 CET	51649	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:57.229971886 CET	53	51649	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:58.215277910 CET	65086	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:58.267468929 CET	53	65086	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:58.412862062 CET	56432	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:58.487478018 CET	53	56432	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:58.904103994 CET	52929	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:58.908130884 CET	64317	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:58.910883904 CET	61004	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:58.952492952 CET	53	52929	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:58.960186005 CET	53	64317	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:58.970873117 CET	53	61004	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:59.094425917 CET	56895	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:59.156577110 CET	53	56895	8.8.8.8	192.168.2.5
Feb 25, 2021 22:09:59.797950029 CET	59261	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:09:59.847161055 CET	53	59261	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:00.087742090 CET	57344	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:00.136766911 CET	53	57344	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:00.840429068 CET	62372	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:00.897753000 CET	53	62372	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:01.252032042 CET	61515	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:01.258909941 CET	56675	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:01.300813913 CET	53	61515	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:01.310625076 CET	53	56675	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:02.014003038 CET	57172	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:02.073442936 CET	53	57172	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:03.634404898 CET	55267	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:03.732745886 CET	53	55267	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:08.604794979 CET	50969	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:08.664242029 CET	53	50969	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:08.745714903 CET	64362	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:08.796775103 CET	53	64362	8.8.8.8	192.168.2.5
Feb 25, 2021 22:10:24.288572073 CET	54766	53	192.168.2.5	8.8.8.8
Feb 25, 2021 22:10:24.341516018 CET	53	54766	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 25, 2021 22:09:21.604311943 CET	192.168.2.5	8.8.8.8	0xbb5d	Standard query (0)	linkprotect.cudasvc.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:22.053447008 CET	192.168.2.5	8.8.8.8	0x883a	Standard query (0)	web.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:22.504497051 CET	192.168.2.5	8.8.8.8	0x9671	Standard query (0)	webclient-cdn.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:24.929562092 CET	192.168.2.5	8.8.8.8	0xdd78	Standard query (0)	webapi.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:25.184120893 CET	192.168.2.5	8.8.8.8	0x5d2b	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:41.013508081 CET	192.168.2.5	8.8.8.8	0x49c9	Standard query (0)	web.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:45.989001989 CET	192.168.2.5	8.8.8.8	0x1267	Standard query (0)	tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:46.981370926 CET	192.168.2.5	8.8.8.8	0x1267	Standard query (0)	tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:47.477627993 CET	192.168.2.5	8.8.8.8	0x5541	Standard query (0)	cdn.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:50.766830921 CET	192.168.2.5	8.8.8.8	0x6a78	Standard query (0)	subscribeapi.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:56.356698990 CET	192.168.2.5	8.8.8.8	0x8d87	Standard query (0)	userlike-cdn-widgets.s3-eu-west-1.amazonaws.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:56.693139076 CET	192.168.2.5	8.8.8.8	0x928f	Standard query (0)	dq4irj27fs462.cloudfront.net	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:57.180721998 CET	192.168.2.5	8.8.8.8	0x46a5	Standard query (0)	api.userlike.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.412862062 CET	192.168.2.5	8.8.8.8	0x7fb1	Standard query (0)	support.tresorit.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.904103994 CET	192.168.2.5	8.8.8.8	0x1a0e	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.908130884 CET	192.168.2.5	8.8.8.8	0xb37b	Standard query (0)	p18.zdassets.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.910883904 CET	192.168.2.5	8.8.8.8	0xeb7	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:59.094425917 CET	192.168.2.5	8.8.8.8	0x348	Standard query (0)	tresorit.zendesk.com	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:00.840429068 CET	192.168.2.5	8.8.8.8	0x729d	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:01.258909941 CET	192.168.2.5	8.8.8.8	0x2ca1	Standard query (0)	www.google.co.uk	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:03.634404898 CET	192.168.2.5	8.8.8.8	0xaeb2	Standard query (0)	www.tresorit.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 25, 2021 22:09:21.664561987 CET	8.8.8.8	192.168.2.5	0xbb5d	No error (0)	linkprotect.cudasvc.com		18.194.14.15	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:21.664561987 CET	8.8.8.8	192.168.2.5	0xbb5d	No error (0)	linkprotect.cudasvc.com		18.192.243.94	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:22.170829058 CET	8.8.8.8	192.168.2.5	0x883a	No error (0)	web.tresorit.com	prodwebclient.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:22.170829058 CET	8.8.8.8	192.168.2.5	0x883a	No error (0)	prodwebclient.azurewebsites.net	waws-prod-db3-005a.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:22.170829058 CET	8.8.8.8	192.168.2.5	0x883a	No error (0)	waws-prod-db3-005a.sip.azurewebsites.windows.net	waws-prod-db3-005a.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:22.657905102 CET	8.8.8.8	192.168.2.5	0x9671	No error (0)	webclient-cdn.tresorit.com	webclient-ms-cdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.016906023 CET	8.8.8.8	192.168.2.5	0xdd78	No error (0)	webapi.tresorit.com	tsgwprodtm-wa.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.016906023 CET	8.8.8.8	192.168.2.5	0xdd78	No error (0)	tsgwprodapim.azure-api.net	apimgmttmpbthyxnqjyhqq26dero2h98ruw4mek2kcjh9ks6aw.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.016906023 CET	8.8.8.8	192.168.2.5	0xdd78	No error (0)	tsgwprodapim-northeurope-01.regional.azure-api.net	apimgmthsttmyl7xwn0xacd1phjowumknvse66qa9gaawpvhhp.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.253434896 CET	8.8.8.8	192.168.2.5	0x5d2b	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.253434896 CET	8.8.8.8	192.168.2.5	0x5d2b	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.253434896 CET	8.8.8.8	192.168.2.5	0x5d2b	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:25.253434896 CET	8.8.8.8	192.168.2.5	0x5d2b	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:41.078257084 CET	8.8.8.8	192.168.2.5	0x49c9	No error (0)	web.tresorit.com	prodwebclient.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:41.078257084 CET	8.8.8.8	192.168.2.5	0x49c9	No error (0)	prodwebclient.azurewebsites.net	waws-prod-db3-005a.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:41.078257084 CET	8.8.8.8	192.168.2.5	0x49c9	No error (0)	waws-prod-db3-005a.sip.azurewebsites.windows.net	waws-prod-db3-005a.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:47.260777950 CET	8.8.8.8	192.168.2.5	0x1267	No error (0)	tresorit.com		13.107.213.19	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:47.260777950 CET	8.8.8.8	192.168.2.5	0x1267	No error (0)	tresorit.com		13.107.246.19	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:47.568145037 CET	8.8.8.8	192.168.2.5	0x5541	No error (0)	cdn.tresorit.com		13.107.246.19	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:47.568145037 CET	8.8.8.8	192.168.2.5	0x5541	No error (0)	cdn.tresorit.com		13.107.213.19	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:50.928088903 CET	8.8.8.8	192.168.2.5	0x6a78	No error (0)	subscribeapi.tresorit.com	tsgwprodtm-sa.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:50.928088903 CET	8.8.8.8	192.168.2.5	0x6a78	No error (0)	tsgwprodapim.azure-api.net	apimgmttmpbthyxnqjyhqq26dero2h98ruw4mek2kcjh9ks6aw.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:50.928088903 CET	8.8.8.8	192.168.2.5	0x6a78	No error (0)	tsgwprodapim-northeurope-01.regional.azure-api.net	apimgmthsttmyl7xwn0xacd1phjowumknvse66qa9gaawpvhhp.cloudapp.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:56.419187069 CET	8.8.8.8	192.168.2.5	0x8d87	No error (0)	userlike-cdn-widgets.s3-eu-west-1.amazonaws.com	s3-r-w.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:56.419187069 CET	8.8.8.8	192.168.2.5	0x8d87	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.84.11	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:56.755965948 CET	8.8.8.8	192.168.2.5	0x928f	No error (0)	dq4irj27fs462.cloudfront.net		13.224.94.39	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:56.755965948 CET	8.8.8.8	192.168.2.5	0x928f	No error (0)	dq4irj27fs462.cloudfront.net		13.224.94.41	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:56.755965948 CET	8.8.8.8	192.168.2.5	0x928f	No error (0)	dq4irj27fs462.cloudfront.net		13.224.94.94	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:56.755965948 CET	8.8.8.8	192.168.2.5	0x928f	No error (0)	dq4irj27fs462.cloudfront.net		13.224.94.109	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:57.229971886 CET	8.8.8.8	192.168.2.5	0x46a5	No error (0)	api.userlike.com		138.201.9.137	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.487478018 CET	8.8.8.8	192.168.2.5	0x7fb1	No error (0)	support.tresorit.com	tresorit.zendesk.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:58.487478018 CET	8.8.8.8	192.168.2.5	0x7fb1	No error (0)	tresorit.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.487478018 CET	8.8.8.8	192.168.2.5	0x7fb1	No error (0)	tresorit.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.952492952 CET	8.8.8.8	192.168.2.5	0x1a0e	No error (0)	static.zdassets.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:58.952492952 CET	8.8.8.8	192.168.2.5	0x1a0e	No error (0)	cf.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.952492952 CET	8.8.8.8	192.168.2.5	0x1a0e	No error (0)	cf.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.960186005 CET	8.8.8.8	192.168.2.5	0xb37b	No error (0)	p18.zdassets.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:58.960186005 CET	8.8.8.8	192.168.2.5	0xb37b	No error (0)	cf.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.960186005 CET	8.8.8.8	192.168.2.5	0xb37b	No error (0)	cf.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.970873117 CET	8.8.8.8	192.168.2.5	0xeb7	No error (0)	theme.zdassets.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:09:58.970873117 CET	8.8.8.8	192.168.2.5	0xeb7	No error (0)	cf.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:58.970873117 CET	8.8.8.8	192.168.2.5	0xeb7	No error (0)	cf.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:59.156577110 CET	8.8.8.8	192.168.2.5	0x348	No error (0)	tresorit.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)
Feb 25, 2021 22:09:59.156577110 CET	8.8.8.8	192.168.2.5	0x348	No error (0)	tresorit.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:00.897753000 CET	8.8.8.8	192.168.2.5	0x729d	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Feb 25, 2021 22:10:00.897753000 CET	8.8.8.8	192.168.2.5	0x729d	No error (0)	stats.l.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:00.897753000 CET	8.8.8.8	192.168.2.5	0x729d	No error (0)	stats.l.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:00.897753000 CET	8.8.8.8	192.168.2.5	0x729d	No error (0)	stats.l.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:00.897753000 CET	8.8.8.8	192.168.2.5	0x729d	No error (0)	stats.l.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:01.310625076 CET	8.8.8.8	192.168.2.5	0x2ca1	No error (0)	www.google.co.uk		142.250.184.67	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:03.732745886 CET	8.8.8.8	192.168.2.5	0xaeb2	No error (0)	www.tresorit.com		13.107.246.19	A (IP address)	IN (0x0001)
Feb 25, 2021 22:10:03.732745886 CET	8.8.8.8	192.168.2.5	0xaeb2	No error (0)	www.tresorit.com		13.107.213.19	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Feb 25, 2021 22:09:21.767498970 CET	18.194.14.15	443	192.168.2.5	49716	CN=*.linkprotect.cudasvc.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Jun 17 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Jul 19 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Feb 25, 2021 22:09:21.768913031 CET	18.194.14.15	443	192.168.2.5	49717	CN=*.linkprotect.cudasvc.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Jun 17 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Jul 19 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Feb 25, 2021 22:09:56.550215960 CET	52.218.84.11	443	192.168.2.5	49754	CN=*.s3-eu-west-1.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:56.550215960 CET	52.218.84.11	443	192.168.2.5	49754	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:56.555804968 CET	52.218.84.11	443	192.168.2.5	49755	CN=*.s3-eu-west-1.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:56.555804968 CET	52.218.84.11	443	192.168.2.5	49755	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:56.856452942 CET	13.224.94.39	443	192.168.2.5	49756	CN=*.cloudfront.net, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Global CA G2, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global CA G2, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US	Tue May 26 02:00:00 CEST 2020 Thu Aug 01 14:00:00 CEST 2013 Mon Nov 06 01:00:00 CET 2017	Wed Apr 21 14:00:00 CEST 2021 Tue Aug 01 14:00:00 CEST 2028 Sun Nov 06 00:59:59 CET 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert Global CA G2, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Tue Aug 01 14:00:00 CEST 2028
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US	Mon Nov 06 01:00:00 CET 2017	Sun Nov 06 00:59:59 CET 2022
Feb 25, 2021 22:09:56.859317064 CET	13.224.94.39	443	192.168.2.5	49757	CN=*.cloudfront.net, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Global CA G2, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global CA G2, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US	Tue May 26 02:00:00 CEST 2020 Thu Aug 01 14:00:00 CEST 2013 Mon Nov 06 01:00:00 CET 2017	Wed Apr 21 14:00:00 CEST 2021 Tue Aug 01 14:00:00 CEST 2028 Sun Nov 06 00:59:59 CET 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert Global CA G2, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Tue Aug 01 14:00:00 CEST 2028
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US	Mon Nov 06 01:00:00 CET 2017	Sun Nov 06 00:59:59 CET 2022
Feb 25, 2021 22:09:57.375046015 CET	138.201.9.137	443	192.168.2.5	49760	CN=*.userlike.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Apr 28 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018	Wed May 25 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:57.375046015 CET	138.201.9.137	443	192.168.2.5	49760	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:57.377566099 CET	138.201.9.137	443	192.168.2.5	49759	CN=*.userlike.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Apr 28 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018	Wed May 25 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:57.377566099 CET	138.201.9.137	443	192.168.2.5	49759	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:58.592544079 CET	104.16.53.111	443	192.168.2.5	49763	CN=support.tresorit.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Jan 19 00:40:50 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Apr 19 01:40:50 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:58.592544079 CET	104.16.53.111	443	192.168.2.5	49763	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:58.593601942 CET	104.16.53.111	443	192.168.2.5	49764	CN=support.tresorit.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue Jan 19 00:40:50 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Mon Apr 19 01:40:50 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:58.593601942 CET	104.16.53.111	443	192.168.2.5	49764	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:59.159596920 CET	104.18.72.113	443	192.168.2.5	49765	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.159787893 CET	104.18.72.113	443	192.168.2.5	49767	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.160495043 CET	104.18.70.113	443	192.168.2.5	49768	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.160556078 CET	104.18.70.113	443	192.168.2.5	49766	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.165741920 CET	104.18.72.113	443	192.168.2.5	49771	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.166511059 CET	104.18.72.113	443	192.168.2.5	49772	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.166549921 CET	104.18.72.113	443	192.168.2.5	49773	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.167231083 CET	104.18.72.113	443	192.168.2.5	49770	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.169871092 CET	104.18.72.113	443	192.168.2.5	49769	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.172147036 CET	104.18.72.113	443	192.168.2.5	49774	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.175755978 CET	104.18.72.113	443	192.168.2.5	49775	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.176810026 CET	104.18.72.113	443	192.168.2.5	49776	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Oct 28 01:00:00 CET 2020 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri May 07 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Feb 25, 2021 22:09:59.273168087 CET	104.16.51.111	443	192.168.2.5	49777	CN=tresorit.zendesk.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Thu Jul 16 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Fri Jul 16 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:59.273168087 CET	104.16.51.111	443	192.168.2.5	49777	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:59.274815083 CET	104.16.51.111	443	192.168.2.5	49778	CN=tresorit.zendesk.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Thu Jul 16 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Fri Jul 16 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:09:59.274815083 CET	104.16.51.111	443	192.168.2.5	49778	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.172704935 CET	74.125.71.154	443	192.168.2.5	49780	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Jan 26 10:00:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Apr 20 11:00:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.172704935 CET	74.125.71.154	443	192.168.2.5	49780	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.172919989 CET	74.125.71.154	443	192.168.2.5	49779	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Jan 26 10:00:56 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Apr 20 11:00:55 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.172919989 CET	74.125.71.154	443	192.168.2.5	49779	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.451081991 CET	142.250.184.67	443	192.168.2.5	49784	CN=www.google.co.uk, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Jan 26 10:05:37 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Apr 20 11:05:36 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.451081991 CET	142.250.184.67	443	192.168.2.5	49784	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.454128027 CET	142.250.184.67	443	192.168.2.5	49782	CN=www.google.co.uk, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Jan 26 10:05:37 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Apr 20 11:05:36 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:01.454128027 CET	142.250.184.67	443	192.168.2.5	49782	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:08.543864965 CET	52.218.84.11	443	192.168.2.5	49787	CN=*.s3-eu-west-1.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:08.543864965 CET	52.218.84.11	443	192.168.2.5	49787	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:08.554497957 CET	52.218.84.11	443	192.168.2.5	49788	CN=*.s3-eu-west-1.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 25, 2021 22:10:08.554497957 CET	52.218.84.11	443	192.168.2.5	49788	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 3276 Parent PID: 792

General

Start time:	22:09:19
Start date:	25/02/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff759400000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 5864 Parent PID: 3276

General

Start time:	22:09:20
Start date:	25/02/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3276 CREDAT:17410 /prefetch:2
Imagebase:	0xda0000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fweb.tresorit.com%2fl%2fUhlFL%23OuqBEbBjao-gYEzs6URB1A&c=E,1,p8aOI0gtf_67G1vcM64jKh_OnFdriK7Cxo4-LMyGe3T8a4Qk0Fq7_lPAEPvcvJdsHNA1XOyIOnIkONvBptj0b-0GuieoBfJh5-mLXJJS5rv04CI,&typo=1

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 3276 Parent PID: 792

General

Analysis Process: iexplore.exe PID: 5864 Parent PID: 3276

General

Disassembly