Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

https://hungryrunnergirl.com/category/hrgbaby/hrg-baby

Status: finished
Submission Time: 2020-07-04 03:30:53 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    243322
  • API (Web) ID:
    382346
  • Analysis Started:
    2020-07-04 03:30:54 +02:00
  • Analysis Finished:
    2020-07-04 03:39:46 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 1
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
13.225.78.56
 United States
88.214.193.9
 United Kingdom
185.94.180.125
 Netherlands
Click to see the 96 hidden entries
151.101.1.194
 United States
185.86.137.107
 France
72.21.206.140
 United States
172.217.16.194
 United States
13.224.198.34
 United States
159.253.128.183
 Netherlands
34.107.224.119
 United States
192.0.77.32
 United States
151.101.14.109
 United States
178.162.133.149
 Netherlands
52.31.210.104
 United States
18.195.155.181
 United States
72.5.64.18
 United States
34.232.20.209
 United States
18.184.216.10
 United States
63.215.202.137
 United States
66.211.183.107
 United States
85.114.159.118
 Germany
13.225.78.106
 United States
54.244.243.55
 United States
34.120.177.238
 United States
50.17.112.123
 United States
35.186.193.173
 United States
63.251.232.170
 United States
52.70.230.29
 United States
13.224.198.108
 United States
74.119.119.131
 United States
52.209.239.68
 United States
104.18.100.194
 United States
74.119.119.139
 United States
185.33.221.90
 Netherlands
216.58.205.230
 United States
136.243.77.131
 Germany
13.224.199.29
 United States
35.195.81.176
 United States
52.58.173.218
 United States
52.95.123.41
 United States
13.225.78.33
 United States
35.186.253.211
 United States
87.248.118.23
 United Kingdom
66.155.71.110
 Canada
87.248.118.22
 United Kingdom
34.96.105.8
 United States
172.217.16.162
 United States
18.184.0.136
 United States
18.203.96.5
 United States
52.0.90.180
 United States
185.33.220.240
 Netherlands
104.31.13.154
 United States
52.58.122.35
 United States
143.204.94.63
 United States
52.18.161.147
 United States
18.156.0.31
 United States
107.178.254.65
 United States
151.101.1.44
 United States
3.225.255.230
 United States
72.251.249.9
 United States
54.154.162.165
 United States
185.33.220.241
 Netherlands
35.156.204.91
 United States
34.251.154.165
 United States
38.67.14.234
 United States
100.20.21.65
 United States
5.39.66.15
 France
2.18.68.31
 European Union
216.58.205.226
 United States
64.58.232.176
 United States
13.225.78.27
 United States
35.210.239.72
 United States
13.248.151.244
 United States
52.49.73.64
 United States
151.101.0.84
 United States
185.29.135.42
 United Kingdom
93.184.220.187
 European Union
18.194.83.84
 United States
104.129.168.238
 United States
52.57.106.47
 United States
3.224.51.140
 United States
37.252.161.190
 European Union
147.75.102.200
 Switzerland
192.0.76.3
 United States
185.60.216.52
 Ireland
213.19.147.210
 United Kingdom
34.95.109.120
 United States
18.185.242.231
 United States
143.204.94.79
 United States
213.155.156.165
 European Union
52.6.49.150
 United States
143.204.94.125
 United States
143.204.94.123
 United States
3.123.196.175
 United States
104.16.190.66
 United States
167.172.1.14
 United States
52.212.164.196
 United States
18.195.77.6
 United States
143.204.94.67
 United States

Domains

Name IP Detection
logger.adthrive.com
 143.204.94.79
ssbsync-eqx.smartadserver.com
 185.86.137.107
q.adrta.com
 52.0.90.180
Click to see the 97 hidden entries
sync.srv.stackadapt.com
 34.231.198.230
tags.mathtag.com
 185.29.135.42
tag.1rx.io
 213.19.147.210
s7.gp1.wac.epsiloncdn.net
 93.184.220.187
load-ams1.exelator.com
 147.75.102.200
a3194.casalemedia.com
 185.80.38.163
api.rlcdn.com
 35.244.174.68
rtb-csync-eqx.smartadserver.com
 185.86.137.110
gcm.ctnsnet.com
 35.186.193.173
fresnel.vimeocdn.com
 34.120.202.204
d5p.de17a.com
 213.155.156.165
p.adsymptotic.com
 104.18.100.194
nep.advangelists.com
 34.232.20.209
idsync.rlcdn.com
 34.107.224.119
contextual.media.net
 2.18.68.31
ams.creativecdn.com
 185.184.8.30
a08c2f32b075343b8b73edf3ccd59d48-1802939440.us-east-1.elb.amazonaws.com
 3.224.51.140
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com
 52.209.239.68
cdn.digicertcdn.com
 104.18.10.39
hbx.media.net
 2.18.68.31
pix.adrta.com
 13.224.198.128
cdn.adrta.com
 52.0.90.180
global.ib-ibi.com
 64.58.232.176
vimeo-video.map.fastly.net
 151.101.114.109
instagram.c10r.facebook.com
 185.60.216.52
aorta.clickagy.com
 52.6.49.150
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud
 18.156.0.31
ib.anycast.adnxs.com
 185.33.221.90
s0.wp.com
 192.0.77.32
centro.vo.llnwd.net
 178.79.242.16
match.adsby.bidtheatre.com
 174.138.12.104
ams02-usadmm-ds.dotomi.com
 64.158.223.137
hungryrunnergirl.com
 104.31.12.154
1605158521.rsc.cdn77.org
 89.187.165.7
um3.eqads.com
 52.1.222.142
mid.rkdms.com
 143.204.94.123
elb-aws-fr-zagreb-1702672115.eu-central-1.elb.amazonaws.com
 18.195.77.6
dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com
 18.194.10.7
prebid.appnexusgslb.net
 37.252.161.190
aax-eu.amazon-adsystem.com
 52.95.123.41
d18t8smu5ooexd.cloudfront.net
 13.225.78.106
s.amazon-adsystem.com
 72.21.206.140
cookiesyncing-1395500543.us-east-1.elb.amazonaws.com
 52.70.230.29
sync.ipredictive.com
 52.20.127.209
pippio.com
 107.178.254.65
pagead46.l.doubleclick.net
 216.58.207.66
pixel.tapad.com
 35.227.248.159
rp.gwallet.com
 72.5.64.18
idaas6.cph.liveintent.com
 34.227.255.210
id.rlcdn.com
 34.107.224.119
sinkhole.netmng.com
 127.0.0.1
ams01-usadmm-ds.dotomi.com
 63.215.202.137
match-1943069928.eu-west-1.elb.amazonaws.com
 52.49.73.64
confiant-integrations.global.ssl.fastly.net
 151.101.1.194
mwzeom.zeotap.com
 172.67.13.182
e77d760a-default-ih-dd4d-1693796260.eu-central-1.elb.amazonaws.com
 52.58.122.35
bttrack.com
 192.132.33.46
rtb.openx.net
 35.186.253.211
ams02-login2-ds.dotomi.com
 64.158.223.143
pixel-a.sitescout.com
 66.155.71.149
bcp.crwdcntrl.net
 52.210.253.186
www.newfocas.co.uk
 217.194.221.26
dmx.districtm.io
 104.16.190.66
minkatu.com
 18.203.96.5
global.px.quantserve.com
 91.228.74.134
clarium.global.ssl.fastly.net
 151.101.1.194
ecs-ads-alb-n5ykev6bey6z-1770302065.eu-central-1.elb.amazonaws.com
 35.157.71.237
acuityplatform.com
 154.59.122.74
tls13.taboola.map.fastly.net
 151.101.1.44
lga-bh-bgp.contextweb.com
 198.148.27.140
sync.alphonso.tv
 104.129.168.238
um.simpli.fi
 159.253.128.183
d2ctznuk6ro1vp.cloudfront.net
 13.224.198.78
lb3-cap-ash1.technoratimedia.com
 193.122.128.135
prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com
 52.210.186.4
backend-sync.widespace.com
 34.251.102.73
rtb.adgrx.com
 63.251.232.170
pool.turktelekom.iponweb.net
 35.210.215.44
ams-1-sync.go.sonobi.com
 178.162.133.149
imp.tradedoubler.com
 34.95.109.120
node-uk-oj7ieg.sitescout.com
 66.155.71.110
vimeo.map.fastly.net
 151.101.0.217
d1ykf07e75w7ss.cloudfront.net
 13.224.199.29
d162h6x3rxav67.cloudfront.net
 143.204.94.125
firewall-external-2134955858.eu-west-1.elb.amazonaws.com
 54.154.162.165
stats.wp.com
 192.0.76.3
pixel.onaudience.com
 51.210.112.66
sharedid-2070269664.us-east-1.elb.amazonaws.com
 50.17.112.123
choices.truste.com
 13.225.78.71
adrta.com
 35.171.152.166
nado-ecs-lb-eu-west-2-768621275.eu-west-2.elb.amazonaws.com
 35.178.2.28
us.cssrvsync.com
 88.214.193.9
creativecdn.com
 185.184.8.30
chidc2.outbrain.org
 64.74.236.127
match.prod.bidr.io
 52.215.1.63
dualstack.awseb-e-j-awsebloa-yfxnb5rgajcj-2076400972.us-west-2.elb.amazonaws.com
 54.244.243.55
csync.loopme.me
 136.243.144.60

URLs

Name Detection
https://hungryrunnergirl.com/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=5.4.2
https://github.com/blueimp/JavaScript-MD5
https://hungryrunnergirl.com/wp-content/uploads/2020/07/IMG_6283.jpeg
Click to see the 97 hidden entries
http://twitter.com/search?q=%23freemockups
http://pixel.mathtag.com/click/img?mt_aid=4259507797227643187&mt_id=8214578&mt_adid=172950&mt_sid=63
https://www.hungryrunnergirl.com/wp-content/uploads/2015/07/MediaKix-logo.png
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjss4vv6Ia8266wPuJ5qQrbMSEVAAFoMOO_fZy_JilDFU
https://www.newfocas.co.uk/assets/js/fakeLoader.min.js
https://clarium.global.ssl.fastly.net
https://t.co/Wg43qgqv1d
https://sync.alphonso.tv/sync?srcid=1200&puid=
https://wordpress.com/i/noticons/Noticons.woff)
https://hungryrunnergirl.com/feed
https://hungryrunnergirl.com/wp-content/uploads/2016/11/IMG_2341-293x293.jpg
http://schema.org/CreativeWork
https://pixel.mathtag.com/event/img?mt_id=1368875&mt_adid=216764&v1=9&v2=2088878334246297838&v3=8075
https://id5-sync.com/g/v1/
https://files.adform.net/Banners/
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
https://hungryrunnergirl.com/wp-content/uploads/2016/11/IMG_2341-330x330.jpg
https://hungryrunnergirl.com/2019/08/hobble-creek-1-2-marathon-recap.html#comments
https://clk.tradedoubler.com/click?p=245744&a=3122049&g=24657870
https://hungryrunnergirl.com/wp-content/uploads/2019/06/IMG_5065-600x600.jpeg
https://hungryrunnergirl.com/category/hrgbaby/hrg-baby/page/2
https://www.newfocas.co.uk/assets/css/styles.css
https://pixel.mathtag.com/event/img?mt_id=1368875&mt_adid=216764&v1=9&v2=4259507797227643187&v3=8075
https://loadm.exelator.com/load/?p=204&g=101&buid=e588d2de-197f-22ac-0000-000000000000&j=0
https://s0.2mdn.net/8947662/1585833928222/index.html
https://hungryrunnergirl.com/wp-content/uploads/2016/10/IMG_9037-330x330.jpg
https://hungryrunnergirl.com/wp-content/uploads/2019/06/IMG_4950-293x293.jpeg
https://hungryrunnergirl.com/2020/06/17-weeks-body-image-talk.html#comments
https://hungryrunnergirl.com/2015/01
https://hungryrunnergirl.com/2015/02
https://eb2.3lift.com/sync?max=10&cb=66611
http://pixel.mathtag.com/click/img?mt_aid=2088878334246297838&mt_id=8214578&mt_adid=172950&mt_sid=63
https://idsync.rlcdn.com/420416.gif?partner_uid=5711427950808389135&gdpr=1&gdpr_consent=&ct=
https://hungryrunnergirl.com/2015/05
https://hungryrunnergirl.com/2015/06
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc
https://hungryrunnergirl.com/2015/03
https://hungryrunnergirl.com/2015/04
http://infinite-scroll.com/
https://hungryrunnergirl.com/wp-content/uploads/2020/07/IMG_6305.jpeg
http://jsperf.com/getall-vs-sizzle/2
http://www.twitter.com/
http://www.aboutads.info/
http://tinkov.infohttp://tinkov.infohttp://tinkov.infohttp://tinkov.infoRidley
https://sync.1rx.io/usersync2/floor6&gdpr=&gdpr_consent=
http://choices.trustarc.com/caic?
https://hungryrunnergirl.com/wp-content/uploads/2011/05/andrewjanaewedding-0056-2-600x900.jpg
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=
https://www.newfocas.co.uk/become-a-carer/
https://p.adsymptotic.com/d/px/?_pid=16259&_psign=b376958ac9baec8bbf182ce1504b7fee&_puuid=5711427950
https://hungryrunnergirl.com/wp-content/uploads/2016/04/featured-3-150x69.jpg
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
http://pixel.mathtag.com/click/img?mt_aid=1485129733787263322&mt_id=8214579&mt_adid=172950&mt_sid=63
https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjsufoc__2rcHAwrVcj0PJ1PNTTVmcz7SqfXNP9PVMMAi
https://hungryrunnergirl.com/workoutse
http://bugs.jquery.com/ticket/12282#comment:15
https://hungryrunnergirl.com/2019/08/19
https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=rbd_oath
https://s1.adform.net/Banners/37857652/37857652.jpg?bv=2
https://hungryrunnergirl.com/wp-content/uploads/2019/08/IMG_3180-80x80.jpeg
https://books.google.co.uk/bkshp?hl
https://hungryrunnergirl.com/wp-content/uploads/2020/06/IMG_6006.jpeg
https://hungryrunnergirl.com/wp-content/uploads/2020/07/IMG_6314.jpeg
https://tags.mathtag.com/notify/js%3fexch=ruc&id=5aW95q2jLzIyLyAvTVRjek9ETTRaV0l0WlRJd05TMDBPR1ZrTFR
https://aax-eu.amazon-adsystem.com/e/dtb/admi?b=IjwmKFKXkRbcY_cGS30_icAAAAFzF3U09wMAAAJYAevKpRc&rnd=
https://tags.mathtag.com/event/img?type=mmImpTrack&exch=ruc&bid=6384439909838659896&st=6318290&time=
http://s0.2mdn.net/ads/studio/close.png
https://www.google.co.uk/intl/en/about/products?tab
https://a3194.casalemedia.com/ifnotify?gdprconsent=1&c=1555BD5&r=4C47D06B&t=5EFFDC59&u=WHYtYjdybFFKc
http://www.amazon.co.uk/wishlist/HNTU0468LQON
https://www.google.co.uk/intl/en/about/products?tab=wh
https://hungryrunnergirl.com/wp-content/uploads/2020/06/IMG_5959-113x150.jpeg
https://hungryrunnergirl.com/2015/10
https://hungryrunnergirl.com/2015/09
https://hungryrunnergirl.com/2015/07
https://hungryrunnergirl.com/2015/08
https://amzn.to/2ZeAThr
https://hungryrunnergirl.com/wp-content/uploads/2019/08/IMG_3180-293x293.jpeg
https://hungryrunnergirl.com/wp-content/uploads/2016/04/featured-3.jpg
https://cdn.doubleverify.com/dvtp_src.js?ctx=499507&cmp=DV119194&sid=17306&plc=sampletag&num=&adid=&
https://hungryrunnergirl.com/2020/06/silentish-saturday-133.html#comments
https://eus.rubiconproject.com/usync.html?&us_privacy=1---&geo=eu&co=ch
https://eus.rubiconproject.com/usync.html?&gdpr=1&gdpr_consent=BO1_powO1_pow__AAA__DR-AAAAvlIPafYrCw
https://hungryrunnergirl.com/2015/12
https://hungryrunnergirl.com/wp-content/plugins/instagram-feed/js/sb-instagram.min.js?ver=1.10.1
https://confiant-integrations.freetls.fastly.net/cdt/
https://hungryrunnergirl.com/2015/11
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MDEmdGw9NDMyMDA=&piggybackCo
https://hungryrunnergirl.com/2019/06/utah-valley-10k-recap.html#comments
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
https://hungryrunnergirl.com/wp-content/uploads/2020/05/IMG_8441.jpegIMG_0067-600x600.jpeg
https://cookie.brealtime.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZj
https://beacon-eu-ams3.rubiconproject.com/beacon/d/c15a5e93-1261-4697-b877-28f5ae571623?oo=0&account
https://www.newfocas.co.uk/?ACT=11&csrf_token=fa9a06367e1c0e7b7221b17d9bb07f2b49c8641a
https://tags.bluekai.com/site/27021?&id=5711427950808389135
https://secure.gravatar.com/images/grav-share-sprite.png);background-repeat:no-repeat;width:16px;hei
https://hungryrunnergirl.com/wp-content/uploads/2020/07/IMG_6290-768x1024.jpeg

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Pug[1].htm
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\activeview[2].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\activeview[1].gif
 GIF image data, version 89a, 1 x 1
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Y6722M7H.htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RidleyGrotesk-SemiBold[1].woff
 Web Open Font Format, TrueType, length 33848, version 1.0
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RidleyGrotesk-SemiBold[1].eot
 Embedded OpenType (EOT), Ridley Grotesk SemiBold family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RidleyGrotesk-Regular[1].eot
 Embedded OpenType (EOT), Ridley Grotesk family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RidleyGrotesk-Light[1].eot
 Embedded OpenType (EOT), Ridley Grotesk Light family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RidleyGrotesk-Black[1].eot
 Embedded OpenType (EOT), Ridley Grotesk Black family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RX-e88825f4-5e24-4df2-a90f-cbed63edb2dd-003[2]
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\RX-e88825f4-5e24-4df2-a90f-cbed63edb2dd-003[1]
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Pug[2].htm
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Pug[2].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\adc[1].png
 PNG image data, 48 x 51, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Pug[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\PugMaster[1].htm
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\OJO_Banner_728x90[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\LMS_EMEA_UK_Brand2020_ManWithBaby_MOFU_Static_Banners_728x90_RTB3[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\LMS_EMEA_UK_Brand2020_ManOnBike_TOFU_Static_Banners_728x90[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\KFOmCnqEu92Fr1Mu4mxM[1].woff
 Web Open Font Format, TrueType, length 20268, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
 Web Open Font Format, TrueType, length 20356, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_9465.JPGIMG_5289-600x600[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_9465.JPGAnderson-5-400x600[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 400x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_9037-600x600[1].jpg
 JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_8441.jpegIMG_5860-600x600[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[7].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\config[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\cksync[1].gif
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\casale[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\cap[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\ca[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\ca[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bumper-ohne[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bootstrap[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bootstrap.min[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bootstrap.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bootstrap.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[8].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_8441.jpegIMG_0067-600x600[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[6].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[5].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[4].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[3].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[2].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\bid[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\async_usersync[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\animate[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\andrewjanaewedding-0056-2[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1365x2048, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\adthrive.min[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\adfscript[1].js
 HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{894FAC8B-BDE1-11EA-AADE-C25F135D3C65}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EA28F8E6-BDE1-11EA-AADE-C25F135D3C65}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EA28F8E5-BDE1-11EA-AADE-C25F135D3C65}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{960BFA11-BDE1-11EA-AADE-C25F135D3C65}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\6aw4uvh\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7F65DBD6-BDE1-11EA-AADE-C25F135D3C65}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7F65DBD4-BDE1-11EA-AADE-C25F135D3C65}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\D1YBPPLZ\hungryrunnergirl[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\D1YBPPLZ\c.betrad[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\C16CYV4I\55fbdb709593fbf639405834d1bb89bf.safeframe.googlesyndication[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9K719AIK\www.google[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9K719AIK\ads.pubmatic[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\1FBVMPHM\aax-eu.amazon-adsystem[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A4B782275DC1682E4DC39E697A49B151
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\04A8EFD7566E919CDF02CF38ED1E5D38
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A4B782275DC1682E4DC39E697A49B151
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\BADGE[1].png
 PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_7959[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 599x528, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_6277[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x651, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_6248[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_6239[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x749, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_6047[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_6036[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x736, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_6006[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x800, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_5938[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_5065-600x600[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IMG_2266[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 599x547, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\IBLTEGII.htm
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Enabler_01_242[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\04A8EFD7566E919CDF02CF38ED1E5D38
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\9a2d69ca-dda5-4c83-9749-1b50d939e954[1].png
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\8iS4t_U6IaKemPWr82PlmZXzRS0AbHqoxNAc16Mbkt4[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\8613[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7j[1].woff
 Web Open Font Format, TrueType, length 20180, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\4[1].gif
 GIF image data, version 87a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\362358[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\2964[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\228055[1].png
 PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\15597[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\15556756436024620161[1].gif
 GIF image data, version 89a, 728 x 90
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\13313636418865338370[1].png
 PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced
 #