top title background image
flash

http://www.myquestcovidtest.com

Status: finished
Submission Time: 2020-06-19 20:23:59 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    240070
  • API (Web) ID:
    375935
  • Analysis Started:
    2020-06-19 20:24:54 +02:00
  • Analysis Finished:
    2020-06-19 20:32:48 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
clean
Score: 0
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
137.135.123.145
United States
151.101.12.157
United States
216.58.212.163
United States
Click to see the 21 hidden entries
147.75.32.125
Switzerland
185.60.216.19
Ireland
147.75.100.189
Switzerland
104.244.42.131
United States
104.244.42.133
United States
165.160.15.20
United States
147.75.33.229
Switzerland
3.232.192.25
United States
31.13.84.36
Ireland
13.224.95.123
United States
104.16.133.229
United States
13.224.95.126
United States
147.75.100.205
Switzerland
13.224.95.109
United States
142.0.160.50
United States
216.203.83.7
United States
142.0.160.53
United States
108.177.15.156
United States
23.111.9.35
United States
216.203.83.168
United States
216.203.82.5
United States

Domains

Name IP Detection
static.hotjar.com
0.0.0.0
static.ads-twitter.com
0.0.0.0
v1.addthisedge.com
0.0.0.0
Click to see the 39 hidden entries
s303348306.t.eloqua.com
0.0.0.0
chatbottok.questdiagnostics.com
0.0.0.0
z.moatads.com
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
s468913550.t.eloqua.com
0.0.0.0
use.fontawesome.com
0.0.0.0
vc.hotjar.io
0.0.0.0
script.hotjar.com
0.0.0.0
s.ytimg.com
172.217.16.174
www.youtube.com
0.0.0.0
s2108654627.t.eloqua.com
0.0.0.0
www.facebook.com
0.0.0.0
m.addthis.com
0.0.0.0
s7.addthis.com
0.0.0.0
connect.facebook.net
0.0.0.0
img04.en25.com
0.0.0.0
vars.hotjar.com
0.0.0.0
analytics.twitter.com
0.0.0.0
consent-pref.trustarc.com
13.224.95.109
appointment.questdiagnostics.com
216.203.82.5
stats.l.doubleclick.net
108.177.15.156
s.twitter.com
104.244.42.131
www.myquestcovidtest.com
165.160.15.20
fontawesome-cdn.fonticons.netdna-cdn.com
23.111.9.35
89ca855a075f1d47c0a490ec8aa47d0c-100.s.section.io
147.75.32.125
prefmgr-cookie.truste-svc.net
3.232.192.25
platform.twitter.map.fastly.net
151.101.12.157
consent.trustarc.com
13.224.95.126
p04.t.eloqua.com
142.0.160.53
star-mini.c10r.facebook.com
31.13.84.36
myquest.questdiagnostics.com
137.135.123.145
scontent.xx.fbcdn.net
185.60.216.19
t.co
104.244.42.133
consent-st.trustarc.com
13.224.95.123
cdnjs.cloudflare.com
104.16.133.229
www.google.co.uk
216.58.212.163
patient.questdiagnostics.com
142.0.160.50
billing.questdiagnostics.com
216.203.83.168
www.questdiagnostics.com
216.203.83.7

URLs

Name Detection
http://malsup.com/jquery/block/
https://www.hotjarconsent.com/fi.html
https://www.hotjar.com
Click to see the 97 hidden entries
https://www.questdiagnostics.com/.imaging/stk/default/dgxCrossConditionalPromo/dms/Images/BodyCopy/S
https://www.addthis.com/bookmark.php?v=250&u508=true
https://www.hotjarconsent.com/zh.html
https://consent-st.trustarc.com/
http://momentjs.com/guides/#/warnings/min-max/
http://ir.questdiagnostics.com
https://www.questdiagnostics.com/home/physicians/testing-services/specialists/rheumatologists
https://www.questdiagnostics.com/home/companies/hit-vendors.html
https://secure.questdiagnostics.com/ViewsFlash/servlet/viewsflash?cmd=page&pollid=cbill
https://cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
https://billing.questdiagnostics.com/PatientBilling/eBill.action
https://ogp.me/ns/fb#
https://www.questdiagnostics.com/home/contact.html#getstarted
http://pixelmatrixdesign.com/uniform/
https://www.hotjarconsent.com/
https://stats.g.doubleclick.net/j/collect?
http://fancyapps.com/fancybox/
https://www.questdiagnostics.com/home/physicians/healthcareit.html
https://www.questdiagnostics.com/home/physicians/innovations
http://www.questdiagnostics.com/home/physicians/general-health.html
http://www.questdiagnostics.com/home/nondiscrimination
http://mathiasbynens.be/
http://www.twitter.com/
http://ph-truste-stage.truste-svc.net/js/cookie_iframe.html
http://www.questdiagnostics.com/home/about/innovations-thumbnail.html
https://www.questdiagnostics.com/home/privacy-policy/cookies
http://www.questdiagnostics.com/home/physicians/testing-services/condition/prescription-drug-monitor
http://www.questdiagnostics.com/home/physicians/ccm.html
https://www.google.%/ads/ga-audiences?
https://www.questdiagnostics.com/dms/Images/BodyCopy/People/HCP/Three-docs-white_background_225x187/
https://chatbottok.questdiagnostics.com/cdn/js/promise.auto.min.js
http://www.webdeveloper.com/forum/showthread.php?t=107909
http://www.questdiagnostics.com/home/physicians/drug-takeback-day.html
http://www.google.cn
http://patient.questdiagnostics.com/LP=33ovid19-drive-thruenu.actiont
https://www.questdiagnostics.com/home/physicians/testing-services/condition/infectious-diseases.html
http://www.questdiagnostics.com/home/physicians/testing-services/condition/skin-disease.html
http://www.questdiagnostics.com/home/physicians/etrailer.html
http://patient.questdiagnostics.com/LP=33
http://tablesorter.com
http://maps.google.cn
http://www.questdiagnostics.com/home/privacy-policy/cookies
http://www.questdiagnostics.com/home/patients/health-test-info.html
https://www.questdiagnostics.com/home/patients/cost-coverage/insurance-providers
http://www.questdiagnosticsfeedback.com
http://patient.questdiagnostics.com/LP=33ovid19-drive-thruenu.actionIf-Modified-SinceThu
http://www.questdiagnostics.com/home/physicians/z-codes.html
https://www.questdiagnostics.com/home/physicians/testing-services/specialists/urologists-gu.html
https://www.questdiagnostics.com/home/physicians/testing-services/condition/cancer.html
https://www.questdiagnostics.com/home/privacy/cookies/BQuest
https://www.questdiagnostics.com/home/patients/cost-coverage.html
http://www.questdiagnostics.com/home/physicians/z-codes
http://www.opensource.org/licenses/mit-license.php
https://www.questdiagnostics.com/home/physicians/testing-services.html
http://www.aboutads.info/consumers
https://lh6.ggpht.com/
http://10.181.46.147/wp-json/wp/v2/users/1
https://www.questdiagnostics.com/home/physicians/health-trends
http://www.questdiagnostics.com/home/physicians/coverageandcoding.html
http://consent.trustarc.com/bannermsg?
http://www.questdiagnostics.com/home/companies/life-insurers.html
https://www.questdiagnostics.com/.imaging/stk/default/dgxFeature170x130/dms/Images/Cross_Promos/Pati
https://billing.questdiagnostics.com/PatientBilling/PatientBillingDef.action?fromLink=doCheckInvoice
http://www.questdiagnostics.com/home/contact.html
https://www.questdiagnostics.com/home/patients/getting-results.html
http://www.questdiagnostics.com/home/physicians/testing-services/condition/genetics.html
http://www.questdiagnostics.com/home/companies/pain-clinics.html
http://g.co/dev/maps-no-account
http://www.questdiagnostics.com/home/social-media.html
https://www.questdiagnostics.com/home/privacy/cookies/
https://www.questdiagnostics.com/home/physicians/z-codes
http://www.questdiagnostics.com/home/physicians/testing-services/specialists/hospitals-lab-staff.htm
http://momentjs.com/guides/#/warnings/zone/
http://www.questdiagnostics.com/home/physicians/pcp-tools.html
https://myquest.questdiagnostics.com/assets/favicon/quartz-favicon.ico~
https://www.questdiagnostics.com/home/physicians
https://www.questdiagnostics.com/home/about/facts.html
http://pixelmatrixdesign.com/uniform/themer.html
http://10.181.46.147/wp-json/wp/v2/pages/10/revisions/660
https://www.questdiagnostics.com/home/physicians/testing-services/condition/allergy.html
https://www.questdiagnostics.com/home/physicians/etrailer
http://10.181.46.147/wp-json/wp/v2/pages
https://chatbottok.questdiagnostics.com/cdn/js/polyfill.js
https://www.hotjarconsent.com/pl.html
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
https://www.hotjarconsent.com/sv.html
https://www.questdiagnostics.com/home/physicians/testing-services/condition/prediabetes/
http://opensource.audith.org/uniform
http://jqueryui.com/themeroller/?ffDefault=Akkurat-Pro-Regular%2C%20arial%2C%20sans-serif&fsDefault=
http://www.questdiagnostics.com/home/patients/drug-takeback-day.html
http://watchdog.truste.com/pvr.php?page=complaint
http://www.reddit.com/
http://www.questdiagnostics.com/home/patients/scheduling-test.html
https://appointmeostics.com/home/contact.htmly-.html
https://prefmgr-cookie.truste-svc.net/cookie_js/cookie_iframe.html?parent=https://consent-pref.trust
https://chatbottok.questdiagnostics.com/cdn/js/botchat.min.js
http://www.questdiagnostics.com/home/contact#getstarted

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\gtm[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.action.plus[2].png
PNG image data, 23 x 12, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.action.plus[1].png
PNG image data, 23 x 12, 8-bit/color RGBA, non-interlaced
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.action.plus.hvr[1].png
PNG image data, 23 x 12, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.action.arrow[1].png
PNG image data, 16 x 7, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.action.arrow.hvr[2].png
PNG image data, 16 x 7, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.action.arrow.hvr[1].png
PNG image data, 16 x 7, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon-driveup[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\home[2].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\home[1].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\hero@4x-1[1].jpg
[TIFF image data, big-endian, direntries=11, PhotometricIntepretation=RGB, description=QDRL15CDLA0389. Original filename:483532329, orientation=upper-left, xresolution=190, yresolution=198, resolutionunit=2, software=Adobe Photoshop CC 2017 (Macintosh (…)
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\healthbot.min[1].js
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.bullet.disc.l[1].png
PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\gtm-quest[1].js
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\geocoder[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\ga-audiences[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\footernav[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\footer.links.2015[1].png
PNG image data, 128 x 48, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\fonts[1].css
UTF-8 Unicode text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\favicon[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\f[1].txt
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\dnserror[2]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.uniform.1.5.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\logo.qd[1].gif
GIF image data, version 89a, 175 x 65
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\loading[1].gif
GIF image data, version 89a, 31 x 31
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\lineto-akkurat-pro-regular[2].eot
Embedded OpenType (EOT), Akkurat ProTT family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\lineto-akkurat-pro-regular[1].eot
Embedded OpenType (EOT), Akkurat ProTT family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\lineto-akkurat-pro-bold[2].eot
Embedded OpenType (EOT), Akkurat ProTT family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\lineto-akkurat-pro-bold[1].eot
Embedded OpenType (EOT), Akkurat ProTT family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jwplayer[2].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jwplayer[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jwbox[2].css
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jwbox[1].css
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\js[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.uniform.1.5.min[2].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\custompopup_style[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.uniform-4.2.3[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.tablesorter[1].js
Non-ISO extended-ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.maskedinput-1.4.1[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.jwbox[2].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.jwbox[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.fancybox-2.1.5[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.cookie[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.1.5.1.min[2].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.1.5.1.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\iframe_api[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon.tools.2015[1].png
PNG image data, 195 x 45, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\AuthenticationService[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\6.cache[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\2.cache[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\1[2].txt
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\1[1].txt
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\124607668127440[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\6aw4uvh\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\EuPreferenceManager[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D93F1D97-B2A5-11EA-AADE-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D03BDEF9-B2A5-11EA-AADE-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D03BDEF7-B2A5-11EA-AADE-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\D1YBPPLZ\myquest.questdiagnostics[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\D1YBPPLZ\billing.questdiagnostics[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\C16CYV4I\vars.hotjar[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9K719AIK\www.questdiagnostics[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9K719AIK\consent-pref.trustarc[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\botchat.min[1].js
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\custompopup[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\custom_canonical_redirect[1].js
exported SGML document, ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\covid-dr[1].jpg
[TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 1108x750, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\cookie_inneriframe[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\controls[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\contact-us-collage[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 366x316, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\common[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\collect[2].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\collect[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\btn.go.2015[2].png
PNG image data, 38 x 52, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\btn.go.2015[1].png
PNG image data, 38 x 52, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\botchatMobile[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\1FBVMPHM\appointment.questdiagnostics[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\app[1].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\analytics[2].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\analytics[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\all[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\all[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\addthis_widget[2].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\addthis_widget[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\QuotaService[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\JavaScriptServlet[1].js
C source, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\HOME_COVID-19-Antibody-Testing-975x350[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 975x350, frames 3
#