Play interactive tour

Edit tour

Analysis Report http://download.easypdfcombine.com

Overview

General Information

Sample URL:	http://download.easypdfcombine.com
Analysis ID:	385477
Infos:
Most interesting Screenshot:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Form action URLs do not match main URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 5488 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5548 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus / Scanner detection for submitted sample

Show sources

Source: http://download.easypdfcombine.com

Avira URL Cloud: detection malicious, Label: PUA

Source: https://www.onetrust.com/products/cookie-consent/	HTTP Parser: Form action: https://s2025046056.t.eloqua.com/e/f2 onetrust eloqua
Source: https://www.onetrust.com/products/cookie-consent/	HTTP Parser: Form action: https://s2025046056.t.eloqua.com/e/f2 onetrust eloqua

Source: https://www.onetrust.com/products/cookie-consent/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.onetrust.com/products/cookie-consent/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\internet explorer\iexplore.exe

Window detected: Navigation BarAddress Barhttps://eula.mindspark.com/eula/Address Combo ControlPage ControlSearch BarAddress Combo ControlFavorites and Tools BarEnd User License Agreement and Privacy Policy - Internet Explorer

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: unknown	HTTPS traffic detected: 34.107.128.118:443 -> 192.168.2.3:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.230:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.230:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.2:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.2:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.1.153:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.1.153:443 -> 192.168.2.3:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.194.29:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.194.29:443 -> 192.168.2.3:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49808 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: download.easypdfcombine.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /tos/ HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: eula.mindspark.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /privacypolicy/ HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: eula.mindspark.comConnection: Keep-Alive

Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory:        The content of any of our undeleted cookies, including a unique identifier (see section D \"Cookies\" below), software installed upon and/or devices connected to your computer and/or device, and the referring website address.</p><p><br></p><p class=\"ql-align-justify\"><strong>3.    Other Technologies:</strong> we may use standard Internet technology, such as web beacons, cookies and other similar technologies, to track your use of the Ask Apps Services (see our <a href=\"https://eula.askapplications.com/cookies/\" rel=\"noopener noreferrer\" target=\"_blank\">cookies policy</a>). Web beacons are small pieces of data that are embedded in images on the pages of sites. The information we obtain in this manner enables us to customize the services we offer as part of the Ask Apps Services for our users.</p><p><br></p><p class=\"ql-align-justify\"><strong>4.    Third Parties and Behavioral Advertising: </strong></p><p class=\"ql-align-justify\"><br></p><p class=\"ql-align-justify\"><strong>Third Parties:</strong> we may allow third parties, including our authorized service providers, parent and subsidiary companies, affiliates, advertising companies, and ad networks, to display advertisements or place ad tags or beacons on or via our Services on the computer or device you use to access our Ask Apps Services and to track that device to over time and across different web sites for the purpose of serving advertising relevant to your interests. We do not control third parties' collection or use of information to serve interest-based advertising. Some but not all providers may allow you to opt-out of receiving their targeted ads, see <a href=\"http://www.networkadvertising.org/choices/\" rel=\"noopener noreferrer\" target=\"_blank\">http://www.networkadvertising.org/choices/</a>.</p><p class=\"ql-align-justify\"><br></p><p>This Privacy Policy does not apply to the privacy practices of third parties that we do not own or control, including but not limited to any third party websites, services, applications, resources to which our Services may link or that you may access through the Services. <strong>If you are using a version of the Service that includes third party services, such third party features, functionalities and content are subject to such third party's privacy policy</strong>.</p><p><br></p><p><span style=\"color: rgb(29, 28, 29);\">The use of information received from Google APIs will adhere to the </span><a href=\"https://developer.chrome.com/webstore/program_policies\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"color: rgba(var(--sk_highlight,18,100,163),1);\"><strong>Chrome Web Store User Data Policy</strong></a><span style=\"color: rgb(29, 28, 29);\">, including the </span><a href=\"https://developer.chrome.com/webstore/program_policies#limited_use\" rel=\"noopener noreferrer\" target=\"_blank\" style=\"color: rgba(var(--sk_highlight,18,100,
Source: 1410717919190065[1].js.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: </a><a href="https://www.facebook.com/onetrustprivacy/" target="blank" rel="noopener noreferrer"> equals www.facebook.com (Facebook)
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/onetrust" target="blank" rel="noopener noreferrer"> equals www.linkedin.com (Linkedin)
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/onetrustprivacy/" /> equals www.facebook.com (Facebook)
Source: gtm[1].js.2.dr	String found in binary or memory: function rp(a,b){}function sp(a,b,c){};var tp=!!n.MutationObserver,up=void 0,vp=function(a){if(!up){var b=function(){var c=K.body;if(c)if(tp)(new MutationObserver(function(){for(var e=0;e<up.length;e++)M(up[e])})).observe(c,{childList:!0,subtree:!0});else{var d=!1;fg(c,"DOMNodeInserted",function(){d\|\|(d=!0,M(function(){d=!1;for(var e=0;e<up.length;e++)M(up[e])}))})}};up=[];K.body?b():M(b)}up.push(a)};var xp=["www.youtube.com","www.youtube-nocookie.com"],yp,zp=!1,Ap=0; equals www.youtube.com (Youtube)
Source: splash[1].htm.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=1410717919190065&ev=PageView&noscript=1" equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: download.easypdfcombine.com

Source: eula[1].htm.2.dr	String found in binary or memory: http://ak.imgfarm.com/images/nocache/mindspark/product/includes/7zip/7z-dlls.zip
Source: eula[1].htm.2.dr	String found in binary or memory: http://ak.imgfarm.com/images/nocache/mindspark/product/includes/SevenZipSharp/SevenZipSharp.7z
Source: eula[1].htm.2.dr	String found in binary or memory: http://anmar.eu.org/projects/jssha2/
Source: application-79172500fb4dbec2484043d570946543[1].css.2.dr	String found in binary or memory: http://dbushell.com/
Source: allIntegrations[1].js.2.dr	String found in binary or memory: http://developers.hubspot.com/docs/methods/tracking_code_api/tracking_code_overview
Source: eula[1].htm.2.dr, 3389PKTG.htm.2.dr, index[1].htm0.2.dr	String found in binary or memory: http://eula.mindspark.com/privacypolicy/
Source: eula[1].htm.2.dr, 3389PKTG.htm.2.dr, index[1].htm0.2.dr	String found in binary or memory: http://eula.mindspark.com/tos/
Source: hc_enduser-1c3c7f65068eb2969f199220010b50e4[1].js.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: search-filter.min[1].css.2.dr	String found in binary or memory: http://getharvest.com
Source: splash[1].htm.2.dr	String found in binary or memory: http://google.com/ads/remarketingsetup
Source: answerBot[1].js.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: style[2].css.2.dr	String found in binary or memory: http://jqueryui.com
Source: style[2].css.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&
Source: eula[1].htm.2.dr	String found in binary or memory: http://opensoftwareupdater.com/privacy.html
Source: eula[1].htm.2.dr	String found in binary or memory: http://opensoftwareupdater.com/terms.html
Source: eula[1].htm.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: eula[1].htm.2.dr	String found in binary or memory: http://services.myscrapnook.com/support/privacy.html
Source: eula[1].htm.2.dr	String found in binary or memory: http://services.myscrapnook.com/support/tos.html
Source: eula[1].htm.2.dr	String found in binary or memory: http://sevenzipsharp.codeplex.com/
Source: eula[1].htm.2.dr	String found in binary or memory: http://sevenzipsharp.codeplex.com/license
Source: languageDetect[1].js.2.dr	String found in binary or memory: http://stackoverflow.com/questions/1043339/javascript-for-detecting-browser-language-preference
Source: index[1].htm0.2.dr	String found in binary or memory: http://support.apple.com/kb/HT1677
Source: index[1].htm0.2.dr	String found in binary or memory: http://support.apple.com/kb/PH5042
Source: index[1].htm0.2.dr	String found in binary or memory: http://support.mozilla.org/en-US/kb/cookies
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.7-zip.org/license.txt
Source: index[1].htm0.2.dr	String found in binary or memory: http://www.aboutads.info/choices
Source: index[1].htm0.2.dr	String found in binary or memory: http://www.allaboutcookies.org/
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.anchorfree.com/privacy.php
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.anchorfree.com/terms-of-service.php
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.apache.org/licenses/
Source: Open-Sans[1].eot.2.dr, opensans-extrabold[1].eot.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: Open-Sans[1].eot.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0Digitized
Source: opensans-bold[1].eot.2.dr, opensans-light[1].eot.2.dr, opensans-semibold[1].eot.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0Webfont
Source: opensans-extrabold[1].eot.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0http://www.apache.org/licenses/LICENSE-2.0
Source: Open-Sans[1].eot.2.dr	String found in binary or memory: http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlLicensed
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, index[1].htm0.2.dr	String found in binary or memory: http://www.comscore.com/About-comScore/Privacy-Policy
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.fish-byte.com/SereneScreen_EULA.doc
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.fish-byte.com/SereneScreen_PrivacyPolicy.doc
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: http://www.google.com/policies/privacy
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.graphicsmagick.org/Copyright.html
Source: bm~styles[1].css0.2.dr	String found in binary or memory: http://www.htmldog.com/articles/suckerfish/dropdowns/
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.iolo.com/company/legal/eula/
Source: eula[1].htm.2.dr	String found in binary or memory: http://www.iolo.com/company/legal/privacy/
Source: index[1].htm0.2.dr	String found in binary or memory: http://www.networkadvertising.org/
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: http://www.networkadvertising.org/choices/
Source: index[1].htm0.2.dr	String found in binary or memory: http://www.youronlinechoices.com
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://9560938.fls.doubleclick.net/activityi;src=9560938;type=invmedia;cat=mapsc00;ord=1;num=817858
Source: eula[1].htm.2.dr	String found in binary or memory: https://about.pinterest.com/en/privacy-policy
Source: splash[1].htm.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/activity/src=9560938;type=invmedia;cat=mapsc00;u5=Other;u7=BSB;dc_lat
Source: js[1].js.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/i/src=9560938;type=invmedia;cat=mapsc00;ord=1;num=8178589809863
Source: gtm[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: gtm[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://adservice.google.de/ddm/fls/i/src=9560938;type=invmedia;cat=mapsc00;ord=1;num=8178589809863;
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, index[1].htm0.2.dr	String found in binary or memory: https://adssettings.google.com/
Source: cookies[1].htm.2.dr	String found in binary or memory: https://adssettings.google.com/authenticated
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://ak.imgfarm.com/images/download/static/ping.js
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://ak.staticimgfarm.com/images/dlp2/ttdetect/index.html?cobrand=BSB&id=1618266024709
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://api.w.org/
Source: cookies[1].htm.2.dr	String found in binary or memory: https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/11a20a1
Source: eula[2].htm.2.dr	String found in binary or memory: https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/16448f5
Source: index[1].htm1.2.dr	String found in binary or memory: https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/8662cb6
Source: tos[1].htm0.2.dr	String found in binary or memory: https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/95061b6
Source: cookies[1].htm.2.dr	String found in binary or memory: https://appds8093.blob.core.windows.net/privacy-notice-scripts/otnotice-1.0.min.js
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://assets.zendesk.com/hc/assets/default_avatar.png
Source: f[1].txt.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: gtm[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: 3389PKTG.htm.2.dr, cookie-consent[1].htm.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: fff8df06-1dd2-491b-88f6-01cae248cd17[1].js.2.dr, 9f63be63-0490-4123-bb2c-9ab8201ff738[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: fff8df06-1dd2-491b-88f6-01cae248cd17[1].js.2.dr, 9f63be63-0490-4123-bb2c-9ab8201ff738[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: fff8df06-1dd2-491b-88f6-01cae248cd17[1].js.2.dr, 9f63be63-0490-4123-bb2c-9ab8201ff738[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://comply.cookiepro.com/?brand=ot&_ga=2.169727462.655205975.1587912553-206522905.158574631
Source: splash[1].htm.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://dataguidance.com/
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: https://developer.chrome.com/webstore/program_policies
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: https://developer.chrome.com/webstore/program_policies#limited_use
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://download.easypdfcombine.com/
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://download.easypdfcombine.com/Root
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://download.easypdfcombine.com/conversion.html?cobrand=BSB&campaign=yyyyyy&track=TTAB02&coId=96
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://download.easypdfcombine.com/j
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://download.easypdfcombine.com/splash.html?cobrand=BSB&campaign=yyyyyy&track=TTAB02&coId=9643b6
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.askaRoot
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.askaapplications.com/cookies/
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.askapplic
Source: ~DF62F45CAE27CDA369.TMP.1.dr, 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, index[1].htm0.2.dr	String found in binary or memory: https://eula.askapplications.com/cookies/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.askapplications.com/cookies/tml?cobrand=
Source: ~DF62F45CAE27CDA369.TMP.1.dr, 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr, 95061b6b-8c20-49bf-a186-861b98f5338f-en-us[1].json.2.dr	String found in binary or memory: https://eula.askapplications.com/eula/
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.askapplications.com/eula/ZEnd
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.askapplications.com/eula/n
Source: imagestore.dat.2.dr	String found in binary or memory: https://eula.askapplications.com/favicon.ico~
Source: ~DF62F45CAE27CDA369.TMP.1.dr, 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr, 95061b6b-8c20-49bf-a186-861b98f5338f-en-us[1].json.2.dr	String found in binary or memory: https://eula.askapplications.com/privacypolicy/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.askapplications.com/privacypolicy/F
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.askapplications.com/privacypolicy/Root
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.askapplications.com/privacypolicy/index.html?cobrand=%7b0%7d
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.askapplications.com/privacypolicy/index.html?cobrand=%7b0%7dand-New-Tab-Reset
Source: ~DF62F45CAE27CDA369.TMP.1.dr, tos[1].htm.2.dr, 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr, tos[1].htm0.2.dr	String found in binary or memory: https://eula.askapplications.com/tos/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.askapplications.com/tos/cypolicy/
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.mindspark
Source: ~DF62F45CAE27CDA369.TMP.1.dr, 3389PKTG.htm.2.dr	String found in binary or memory: https://eula.mindspark.com/cookies/index.html?cobrand=
Source: tos[1].htm.2.dr	String found in binary or memory: https://eula.mindspark.com/eula/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.mindspark.com/eula/m/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.mindspark.com/eula/m/combine.com/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.mindspark.com/favicon.ico
Source: imagestore.dat.2.dr	String found in binary or memory: https://eula.mindspark.com/favicon.ico~
Source: tos[1].htm.2.dr	String found in binary or memory: https://eula.mindspark.com/privacypolicy/
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://eula.mindspark.com/privacypolicy/index.html?cobrand=
Source: tos[1].htm.2.dr	String found in binary or memory: https://eula.mindspark.com/tos/
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://eula.mindspark.com/tos//privacypolicy/
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://eula.mindsparkdfcombine.com/.com/eula/m/Root
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://fast.wistia.com/assets/external/E-v1.js
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://fast.wistia.com/embed/medias/bwewksugpg.jsonp
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhv.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: fff8df06-1dd2-491b-88f6-01cae248cd17[1].js.2.dr, 9f63be63-0490-4123-bb2c-9ab8201ff738[1].js.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: vendors[1].js.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: api[1].js.2.dr	String found in binary or memory: https://github.com/antoinevastel/picasso-like-canvas-fingerprinting
Source: search-filter.min[1].css.2.dr	String found in binary or memory: https://github.com/harvesthq/chosen
Source: search-filter.min[1].css.2.dr, chosen.jquery.min[1].js.2.dr	String found in binary or memory: https://github.com/harvesthq/chosen/blob/master/LICENSE.md
Source: style[1].css.2.dr	String found in binary or memory: https://github.com/philipwalton/flexbugs#1-minimum-content-sizing-of-flex-items-not-honored)
Source: vendors[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: vendors[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: tos[1].htm0.2.dr	String found in binary or memory: https://help.ask.com/hc/en-us/categories/360000168374-Ask-com-Search-Apps
Source: tos[1].htm0.2.dr	String found in binary or memory: https://help.mysearch.com/hc/en-us
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://help.mysearch.com/system/brands/360000000274/myway-light_thumb.png
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://hp.myway.com/easypdfcombine/ttab02/index.html?n=780BD6C7&
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://hp.myway.com/easypdfcombine/ttab02/index.html?n=780BD6C7&
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://hp.myway.com/easypdfcombine/ttab02/index.html?n=780BD6C7&rd=alreadyInstalled&ruid=1CFE15DF-D
Source: onetrust-dev.web.onetrust[1].htm.2.dr	String found in binary or memory: https://login.microsoftonline.com/9d1d17d8-372b-4b23-a9fc-1e5d895c89a1/oauth2/authorize?client_id=23
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://my.onetrust.com/
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/admin/billing/subscription
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/api/v2/brands/360000011494.json
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/auth/v2/host.js
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/arrange?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/community_badges?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/community_settings?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/import_articles?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/search_settings?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/user_segments?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mysearch.zendesk.com/knowledge/verification?brand_id=360000011494
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mywaycs.zendesk.com
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://mywaycs.zendesk.com/hc/en-us/requests/new?ticket_form_id=360000017253
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://onetrust-dev.web.onetrust.dev/wp-content/uploads/2021/02/Group-2.svg
Source: gtm[1].js.2.dr, js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: js[1].js.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: index[1].htm0.2.dr	String found in binary or memory: https://policies.google.com/technologies/partner-sites
Source: vendors[1].js.2.dr	String found in binary or memory: https://popper.js.org/)
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://privacyconnect.com
Source: 11a20a14-77c2-4cfb-8bc9-a5ded972f22c[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/11a20a14
Source: 16448f54-0e40-44ff-a228-7ca99e1c9ab1[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/16448f54
Source: 8662cb62-712d-4929-88d6-c585ee14ea99[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/8662cb62
Source: 95061b6b-8c20-49bf-a186-861b98f5338f[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/95061b6b
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/dsarwebform/37bcc497-a196-48f1-a08b-e897b5a77859/08a01c64-41f
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/dsarwebform/982b0a23-3053-4df0-9089-7ce3acd59c8d/9afbb3ce-322
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/dsarwebform/982b0a23-3053-4df0-9089-7ce3acd59c8d/c9d527a9-41d
Source: 11a20a14-77c2-4cfb-8bc9-a5ded972f22c-en-us[1].json.2.dr, 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, 95061b6b-8c20-49bf-a186-861b98f5338f-en-us[1].json.2.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/privacy-notice-scripts/css/otnotice-core.css
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=2525290&fmt=gif
Source: insight.min[1].js.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: insight.min[1].js.2.dr	String found in binary or memory: https://px.ads.linkedin.com/insight_tag_errors.gif?
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://rollbar-us.zendesk.com/api/1/item/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://s2025046056.t.eloqua.com/e/f2
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://schema.org
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://schema.org/Corporation
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/d0abaa00850e63ba266c7541f25c8d1f?default=https%3A%2F%2Fassets.zen
Source: f[1].txt.2.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: triangle-bottom-right[1].svg.2.dr, GreenArrow[1].svg.2.dr	String found in binary or memory: https://sketch.com
Source: footer-info-computer[1].svg.2.dr	String found in binary or memory: https://sketchapp.com
Source: gtm[1].js.2.dr, cookie-consent[1].htm.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://static.zdassets.com/ekr/snippet.js
Source: tos[1].htm0.2.dr	String found in binary or memory: https://support.askapplications.com/hc/en-us
Source: cookies[1].htm.2.dr, 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, index[1].htm0.2.dr	String found in binary or memory: https://support.google.com/ads/answer/2662922?hl=en
Source: index[1].htm0.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/95647?hl=en
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectloc
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://support.myway.
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/activity
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/admin/arrange_contents?locale=en-us
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/admin/general_settings?locale=en-us
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/admin/language_settings?locale=en-us
Source: 3389PKTG.htm.2.dr	String found in binary or memory: https://support.myway.com/hc/articles/360006416613-Browser-Homepage-and-New-Tab-Reset
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/de/articles/360006416613-Startseite-Neue-Registerkartenseite-bzw-Neuer-
Source: tos[1].htm0.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360001875654--How-do-I-remove-my-extension-from-Google-C
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360005316394-How-do-I-remove-my-New-Tab-from-Safari-
Source: eula[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360005378353
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360005458334--Uninstall-and-Restore-IE-Home-page
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360005480693--How-do-I-remove-my-New-Tab-extension-from-
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360006416613-Browser-Homepage-and-New-Tab-Reset
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360006416613-Browser-Homepage-and-New-Tab-ResetdBrowser
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/articles/360040116614-How-do-I-remove-my-extension-from-Chromium-
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/en-us/requests/new?ticket_form_id=360000017253
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/es/articles/360006416613-Reinicio-de-la-nueva-pesta%C3%B1a-y-la-p%C3%A1
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/fr-fr/articles/360006416613-R%C3%A9initialisation-de-la-page-d-accueil-
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/it/articles/360006416613-Ripristino-della-home-page-e-della-pagina-Nuov
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/ja/articles/360006416613-%E3%83%96%E3%83%A9%E3%82%A6%E3%82%B6%E3%81%AE%
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://support.myway.com/hc/pt-br/articles/360006416613-Reconfigura%C3%A7%C3%A3o-da-p%C3%A1gina-ini
Source: f[1].txt.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: imagestore.dat.1.dr, 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://theme.zdassets.com/theme_assets/2136946/588f5a57688ed40e34d35bc234fcf994c6d1c82f.png
Source: cookies[1].htm.2.dr, 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, index[1].htm0.2.dr	String found in binary or memory: https://tools.google.com/dlpage/gaoptout/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://twitter.com/OneTrust
Source: tos[1].htm.2.dr	String found in binary or memory: https://uk.ask.com/privacy
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://www.askapplications.com/
Source: cookies[1].htm.2.dr	String found in binary or memory: https://www.comscore.com/About-comScore/Privacy-Policy
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.dataguidance.com/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.dataguidance.com/comparisons
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.dataguidance.com/retention-schedules
Source: js[1].js.2.dr	String found in binary or memory: https://www.google.com
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1054533708/?random
Source: f[1].txt0.2.dr	String found in binary or memory: https://www.google.de/pagead/1p-user-list/1054533708/?random
Source: gtm[1].js.2.dr, f[1].txt.2.dr, js[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: splash[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=DC-9560938
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-KPNN27K
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/onetrust
Source: {44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://www.onetrust.c
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/#website
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/?p=7060
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/?s=
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/apac-webinars/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/blog/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/blog/onetrusts-cmp-leads-the-consent-management-market/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/br/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/canada-privacy-laws/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/careers/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/ccpa-compliance/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/ccpa-compliance/masterclass/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/ccpa-opt-out/builder/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/cdpa/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/certifications/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/company/about-us/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/company/awards/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/company/contact/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/company/news/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/cookie-banner-gallery/
Source: en[1].js0.2.dr	String found in binary or memory: https://www.onetrust.com/cookie-policy/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/cookies-free-edition/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/covid-19/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/cpra-ccpa-2-0/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/customers/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/customers/akamai/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/customers/bertelsmann/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/customers/randstad/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/customers/resmed/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/data-privacy-week/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/enterprise-pricing/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/feed/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/free-tools/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/integrations/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/irish-dpc-cookies-fast-track/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/lgpd-compliance/masterclass/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/masterclass/mobile-ott/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/nl/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/onetrust-for-germany/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/onetrust-for-spain/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/partner-program/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/popia/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/privacy-free-edition/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/brazil-law-compliance/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/#breadcrumb
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/#webpage
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/HCookie
Source: ~DF62F45CAE27CDA369.TMP.1.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/ex.html?cobrand=%7b0%7d
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/data-catalog/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/data-discovery
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/data-discovery-for-privacy/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/gdpr-compliance/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/mobile-app-consent/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/ott-app-compliance
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/preference-management/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/products/universal-consent-management/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/resources/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/resources/cookie-handbook-for-privacy-pros/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/resources/rip-cookies/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/rfp-template/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/schrems/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/services/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/consent-and-preferences/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/consent-management-platform/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/data-governance/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/esg/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/ethics/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/grc/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/iso27701/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/nhs-dsp-toolkit/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/privacy-compliance/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/solutions/vendor-third-party-risk/
Source: vendors[1].js.2.dr	String found in binary or memory: https://www.onetrust.com/thank-you-newsletter/?ref=bot
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/trust/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-admin/admin-ajax.php
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.8.2
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/plugins/search-filter-pro/public/assets/css/search-filter.min.cs
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/plugins/search-filter-pro/public/assets/js/chosen.jquery.min.js?
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/plugins/search-filter-pro/public/assets/js/search-filter-build.m
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/plugins/wpo365-login/apps/dist/pintra-redirect.js?ver=12.11
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/js/utm.js?t=1617900761&ver=1.1
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/js/vendors.js
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/feature-v1.css?t=161790155
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/hero-v1.css
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/resources-v2.css?t=1617901
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/value-prop-v1.css?t=161790
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/pages/cookie-consent.css
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/bundles/style.css?t=1617901552
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/css/slick.css
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/css/solutions-menu.css
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/images/CookieIcon.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/images/GreenArrow.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/images/OneTrustLogo.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/images/footer-info-computer.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/images/footer-info-global.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/images/footer-info-mail.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/js/jquery-3.5.1.min.js?t=1617900761&ver=3.5
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/js/slick.js
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/themes/onetrust/screenshot.png
Source: imagestore.dat.2.dr, cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2017/01/cropped-onetrust-theme-logo-1-150x150.jpg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2017/01/cropped-onetrust-theme-logo-1-300x300.jpg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2018/05/executive-dashboards-1.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/06/facebook-gray.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/06/footerEye.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/06/footerRights-1-2.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/06/footerShield.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/06/linkedin-gray.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/06/twitter-gray.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2019/12/donotsell.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/03/UK-Modern-Slavery-Act-Statement.pdf
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/05/1280px-Flag_of_Brazil.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/de.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/en.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/es.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/fr.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/it.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/nl.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/08/sv.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/DataGovernance_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/DataGovernance_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/DigitalMarketing_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/DigitalMarketing_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/EthicsRiskCompliance_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/EthicsRiskCompliance_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/PrivacyLegal_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/PrivacyLegal_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/PublishersAd_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/PublishersAds_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/SecurityRiskAudit_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/SecurityRiskAudit_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/VendorSourcing_Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/10/VendorSourcing_not-Selected.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2020/12/trust-icon.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Akamai_green.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Akamai_white.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Auto-blocking-1.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Bertelsmann_default.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Categorize-1.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Consent-Receipts-1.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/CookieList.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Group.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/MobileAppCompliance_icon.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/PolicyAndNotice_icon.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/PreferenceManagement_icon-1.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/ResMed_green.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/ResMed_white.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/Templates-2.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/ab-testing-new-1.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/bertelsmann-green.png
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/ranstad_green.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-content/uploads/2021/02/ranstad_white.svg
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-includes/js/wp-embed.min.js?ver=5.6
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-includes/wlwmanifest.xml
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-json/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.onetrust.com%2Fproducts%2Fco
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.com/xmlrpc.php
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.de
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.es
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.fr
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.fr/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.it
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.it/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.se
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrust.se/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrustgrc.com/grc-free-tools/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrustprivacytech.com/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrustpro.com/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.onetrustpro.com/buy/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.privacyconnect.com/
Source: cookie-consent[1].htm.2.dr	String found in binary or memory: https://www.vendorpedia.com/free-tool/
Source: 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	String found in binary or memory: https://www.youtube.com/t/terms
Source: en-us.5d46c2fc6f753297e4b2[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/answer-bot/
Source: en-us.5d46c2fc6f753297e4b2[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/embeddables/
Source: en-us.5d46c2fc6f753297e4b2[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/guide/#gallery
Source: en-us.5d46c2fc6f753297e4b2[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/guide/features/knowledge-capture-app/
Source: 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	String found in binary or memory: https://www.zendesk.com/help-center/?utm_source=helpcenter&utm_medium=poweredbyzendesk&utm_campaign=
Source: en-us.5d46c2fc6f753297e4b2[1].js.2.dr	String found in binary or memory: https://www.zendesk.com/product/tech-specs/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 34.107.128.118:443 -> 192.168.2.3:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.3:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.3:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.230:443 -> 192.168.2.3:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.215.230:443 -> 192.168.2.3:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.2:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.183.133:443 -> 192.168.2.3:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.70.113:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.72.113:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.51.111:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.2:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.2:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.184.68:443 -> 192.168.2.3:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.1.153:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.1.153:443 -> 192.168.2.3:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.194.29:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.194.29:443 -> 192.168.2.3:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.69:443 -> 192.168.2.3:49808 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@3/229@30/16

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF9319DD761BEC0F9D.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\internet explorer\iexplore.exe

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://download.easypdfcombine.com	1%	Virustotal		Browse
http://download.easypdfcombine.com	100%	Avira URL Cloud	PUA

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
onetrust-dev.web.onetrust.dev	0%	Virustotal		Browse
eula.askapplications.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://eula.askapplications.com/cookies/tml?cobrand=	0%	Avira URL Cloud	safe
http://www.allaboutcookies.org/	0%	Avira URL Cloud	safe
https://www.privacyconnect.com/	0%	Avira URL Cloud	safe
https://privacyconnect.com	0%	Avira URL Cloud	safe
https://www.dataguidance.com/comparisons	0%	Avira URL Cloud	safe
https://www.onetrustpro.com/	0%	Avira URL Cloud	safe
https://dataguidance.com/	0%	Avira URL Cloud	safe
https://eula.askaRoot	0%	Avira URL Cloud	safe
https://www.dataguidance.com/retention-schedules	0%	Avira URL Cloud	safe
https://comply.cookiepro.com/?brand=ot&_ga=2.169727462.655205975.1587912553-206522905.158574631	0%	Avira URL Cloud	safe
https://eula.askapplications.com/eula/ZEnd	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.de	172.217.168.3	true	false		high
dart.l.doubleclick.net	216.58.215.230	true	false		high
pagead46.l.doubleclick.net	172.217.168.2	true	false		high
eula.mindspark.com	35.244.183.133	true	false		high
secure.gravatar.com	192.0.73.2	true	false		high
onetrust.cloudflareaccess.com	104.19.194.29	true	false		high
pop-eda6.mix.linkedin.com	108.174.11.69	true	false		high
mywaycs.zendesk.com	104.16.51.111	true	false		high
i1.wp.com	192.0.77.2	true	false		high
p23.zdassets.com	104.18.70.113	true	false		high
download.easypdfcombine.com	34.107.128.118	true	false		high
theme.zdassets.com	104.18.70.113	true	false		high
onetrust-dev.web.onetrust.dev	104.18.1.153	true	false	0%, Virustotal, Browse	unknown
mysearch.zendesk.com	104.16.51.111	true	false		high
www.onetrust.com	104.20.184.68	true	false		high
scontent.xx.fbcdn.net	31.13.92.14	true	false		high
static.zdassets.com	104.18.72.113	true	false		high
googleads.g.doubleclick.net	172.217.168.2	true	false		high
blob.dz5prdstr17a.store.core.windows.net	52.239.234.68	true	false		high
privacyportal-cdn.onetrust.com	104.20.184.68	true	false		high
onetrust.com	104.20.184.68	true	false		high
cdn.cookielaw.org	104.16.148.64	true	false		high
geolocation.onetrust.com	104.20.184.68	true	false		high
eula.askapplications.com	35.244.183.133	true	false	0%, Virustotal, Browse	unknown
fast.wistia.com	unknown	unknown	false		high
adservice.google.de	unknown	unknown	false		high
akz.imgfarm.com	unknown	unknown	false		high
appds8093.blob.core.windows.net	unknown	unknown	false		high
params.tb.ask.com	unknown	unknown	false		high
9560938.fls.doubleclick.net	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
support.myway.com	unknown	unknown	false		high
px.ads.linkedin.com	unknown	unknown	false		high
ak.imgfarm.com	unknown	unknown	false		high
ak.staticimgfarm.com	unknown	unknown	false		high
snap.licdn.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
https://eula.askapplications.com/cookies/	true	unknown
https://eula.askapplications.com/tos/	true	unknown
https://support.myway.com/hc/en-us/articles/360006416613-Browser-Homepage-and-New-Tab-Reset	false	high
https://www.onetrust.com/products/cookie-consent/	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://mysearch.zendesk.com/auth/v2/host.js	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/solutions/esg/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2018/05/executive-dashboards-1.png	cookie-consent[1].htm.2.dr	false		high
https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/11a20a1	cookies[1].htm.2.dr	false		high
https://twitter.com/OneTrust	cookie-consent[1].htm.2.dr	false		high
https://eula.askapplications.com/cookies/tml?cobrand=	~DF62F45CAE27CDA369.TMP.1.dr	false	Avira URL Cloud: safe	unknown
https://mywaycs.zendesk.com/hc/en-us/requests/new?ticket_form_id=360000017253	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://support.myway.com/hc/pt-br/articles/360006416613-Reconfigura%C3%A7%C3%A3o-da-p%C3%A1gina-ini	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/xmlrpc.php	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2019/06/facebook-gray.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/solutions/iso27701/	cookie-consent[1].htm.2.dr	false		high
http://www.allaboutcookies.org/	index[1].htm0.2.dr	false	Avira URL Cloud: safe	unknown
https://ak.imgfarm.com/images/download/static/ping.js	3389PKTG.htm.2.dr	false		high
https://www.onetrust.com/solutions/ethics/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-json/	cookie-consent[1].htm.2.dr	false		high
https://privacyportal-cdn.onetrust.com/dsarwebform/982b0a23-3053-4df0-9089-7ce3acd59c8d/c9d527a9-41d	8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	false		high
https://www.privacyconnect.com/	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://uk.ask.com/privacy	tos[1].htm.2.dr	false		high
https://www.youtube.com/t/terms	8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	false		high
http://dbushell.com/	application-79172500fb4dbec2484043d570946543[1].css.2.dr	false		high
https://privacyconnect.com	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	insight.min[1].js.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/10/PublishersAds_Selected.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/08/it.png	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/products/ott-app-compliance	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/03/UK-Modern-Slavery-Act-Statement.pdf	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/10/DataGovernance_not-Selected.svg	cookie-consent[1].htm.2.dr	false		high
https://eula.askapplications.com/privacypolicy/	~DF62F45CAE27CDA369.TMP.1.dr, 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr, 95061b6b-8c20-49bf-a186-861b98f5338f-en-us[1].json.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	vendors[1].js.2.dr	false		high
http://www.iolo.com/company/legal/eula/	eula[1].htm.2.dr	false		high
https://www.dataguidance.com/comparisons	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onetrust.com/solutions/consent-management-platform/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2017/01/cropped-onetrust-theme-logo-1-150x150.jpg	imagestore.dat.2.dr, cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/10/VendorSourcing_Selected.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/products/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrustpro.com/	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://support.myway.com/hc/en-us/articles/360001875654--How-do-I-remove-my-extension-from-Google-C	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/popia/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/themes/onetrust/css/slick.css	cookie-consent[1].htm.2.dr	false		high
https://hp.myway.com/easypdfcombine/ttab02/index.html?n=780BD6C7&rd=alreadyInstalled&ruid=1CFE15DF-D	3389PKTG.htm.2.dr	false		high
https://www.onetrust.com/certifications/	cookie-consent[1].htm.2.dr	false		high
https://my.onetrust.com/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/10/SecurityRiskAudit_Selected.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/?s=	cookie-consent[1].htm.2.dr	false		high
https://mysearch.zendesk.com/knowledge/verification?brand_id=360000011494	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
http://www.comscore.com/About-comScore/Privacy-Policy	8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, index[1].htm0.2.dr	false		high
https://theme.zdassets.com/theme_assets/2136946/588f5a57688ed40e34d35bc234fcf994c6d1c82f.png	imagestore.dat.1.dr, 360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2019/12/donotsell.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-includes/js/wp-embed.min.js?ver=5.6	cookie-consent[1].htm.2.dr	false		high
https://privacyportal-cdn.onetrust.com/privacy-notice-scripts/css/otnotice-core.css	11a20a14-77c2-4cfb-8bc9-a5ded972f22c-en-us[1].json.2.dr, 8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr, 95061b6b-8c20-49bf-a186-861b98f5338f-en-us[1].json.2.dr	false		high
https://support.myway.com/hc/fr-fr/articles/360006416613-R%C3%A9initialisation-de-la-page-d-accueil-	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/products/cookie-consent/HCookie	~DF62F45CAE27CDA369.TMP.1.dr	false		high
https://www.onetrust.com/wp-content/themes/onetrust/bundles/pages/cookie-consent.css	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2021/02/PolicyAndNotice_icon.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2019/06/linkedin-gray.svg	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/onetrust-for-germany/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2021/02/Bertelsmann_default.png	cookie-consent[1].htm.2.dr	false		high
http://stackoverflow.com/questions/1043339/javascript-for-detecting-browser-language-preference	languageDetect[1].js.2.dr	false		high
https://dataguidance.com/	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onetrust.com/customers/akamai/	cookie-consent[1].htm.2.dr	false		high
http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&	style[2].css.2.dr	false		high
https://eula.mindspark.com/favicon.ico	~DF62F45CAE27CDA369.TMP.1.dr	false		high
https://schema.org	cookie-consent[1].htm.2.dr	false		high
http://ak.imgfarm.com/images/nocache/mindspark/product/includes/SevenZipSharp/SevenZipSharp.7z	eula[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/08/de.png	cookie-consent[1].htm.2.dr	false		high
https://www.google.de/pagead/1p-user-list/1054533708/?random	f[1].txt0.2.dr	false		high
https://www.onetrust.com/products/universal-consent-management/	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/resources-v2.css?t=1617901	cookie-consent[1].htm.2.dr	false		high
https://developer.chrome.com/webstore/program_policies	8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json.2.dr	false		high
https://eula.askaRoot	{44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://www.onetrust.com/wp-content/uploads/2021/02/Categorize-1.png	cookie-consent[1].htm.2.dr	false		high
https://mysearch.zendesk.com/knowledge/community_settings?brand_id=360000011494	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
http://www.networkadvertising.org/	index[1].htm0.2.dr	false		high
https://help.ask.com/hc/en-us/categories/360000168374-Ask-com-Search-Apps	tos[1].htm0.2.dr	false		high
https://mysearch.zendesk.com/knowledge/user_segments?brand_id=360000011494	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/partner-program/	cookie-consent[1].htm.2.dr	false		high
https://mysearch.zendesk.com/knowledge/arrange?brand_id=360000011494	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	vendors[1].js.2.dr	false		high
https://www.dataguidance.com/retention-schedules	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/8662cb62	8662cb62-712d-4929-88d6-c585ee14ea99[1].json.2.dr	false		high
https://comply.cookiepro.com/?brand=ot&_ga=2.169727462.655205975.1587912553-206522905.158574631	cookie-consent[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onetrust.com/wp-content/uploads/2021/02/ab-testing-new-1.png	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2021/02/ranstad_white.svg	cookie-consent[1].htm.2.dr	false		high
https://mysearch.zendesk.com/knowledge/community_badges?brand_id=360000011494	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/08/fr.png	cookie-consent[1].htm.2.dr	false		high
https://rollbar-us.zendesk.com/api/1/item/	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://support.myway.com/hc/en-us/requests/new?ticket_form_id=360000017253	360006416613-Browser-Homepage-and-New-Tab-Reset[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/10/VendorSourcing_not-Selected.svg	cookie-consent[1].htm.2.dr	false		high
https://eula.askapplications.com/eula/ZEnd	{44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat.1.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	3389PKTG.htm.2.dr, cookie-consent[1].htm.2.dr	false		high
https://eula.askapplications.com/privacypolicy/index.html?cobrand=%7b0%7d	~DF62F45CAE27CDA369.TMP.1.dr	false		unknown
http://www.iolo.com/company/legal/privacy/	eula[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/plugins/search-filter-pro/public/assets/js/chosen.jquery.min.js?	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/themes/onetrust/js/jquery-3.5.1.min.js?t=1617900761&ver=3.5	cookie-consent[1].htm.2.dr	false		high
https://www.onetrust.com/wp-content/uploads/2020/10/EthicsRiskCompliance_Selected.svg	cookie-consent[1].htm.2.dr	false		high
https://www.zendesk.com/guide/features/knowledge-capture-app/	en-us.5d46c2fc6f753297e4b2[1].js.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
31.13.92.14	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
104.19.194.29	onetrust.cloudflareaccess.com	United States	13335	CLOUDFLARENETUS	false
216.58.215.230	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.148.64	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
104.20.184.68	www.onetrust.com	United States	13335	CLOUDFLARENETUS	false
104.16.51.111	mywaycs.zendesk.com	United States	13335	CLOUDFLARENETUS	false
104.18.72.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
52.239.234.68	blob.dz5prdstr17a.store.core.windows.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
108.174.11.69	pop-eda6.mix.linkedin.com	United States	14413	LINKEDINUS	false
34.107.128.118	download.easypdfcombine.com	United States	15169	GOOGLEUS	false
192.0.77.2	i1.wp.com	United States	2635	AUTOMATTICUS	false
172.217.168.2	pagead46.l.doubleclick.net	United States	15169	GOOGLEUS	false
192.0.73.2	secure.gravatar.com	United States	2635	AUTOMATTICUS	false
104.18.1.153	onetrust-dev.web.onetrust.dev	United States	13335	CLOUDFLARENETUS	false
104.18.70.113	p23.zdassets.com	United States	13335	CLOUDFLARENETUS	false
35.244.183.133	eula.mindspark.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	385477
Start date:	12.04.2021
Start time:	15:19:33
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 11s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	http://download.easypdfcombine.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@3/229@30/16
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://eula.mindspark.com/eula/ Browsing link: https://eula.mindspark.com/privacypolicy/ Browsing link: http://eula.mindspark.com/tos/ Browsing link: http://eula.mindspark.com/privacypolicy/ Browsing link: https://support.myway.com/hc/articles/360006416613-Browser-Homepage-and-New-Tab-Reset Browsing link: https://eula.mindspark.com/cookies/index.html?cobrand={0} Browsing link: https://eula.mindspark.com/privacypolicy/index.html?cobrand={0} Browsing link: https://onetrust.com/poweredbyonetrust
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, audiodg.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 92.122.145.220, 88.221.62.148, 104.83.108.144, 216.58.215.234, 2.17.188.73, 95.101.22.154, 172.217.168.3, 172.217.168.8, 172.217.168.66, 172.217.168.68, 172.217.23.34, 13.88.21.125, 104.43.139.144, 152.199.19.161, 92.122.144.200, 13.64.90.137, 151.101.2.110, 151.101.66.110, 151.101.130.110, 151.101.194.110, 20.82.210.154, 92.122.144.104, 2.20.142.210, 2.20.142.209, 52.147.198.201 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, au.download.windowsupdate.com.edgesuite.net, www.googleadservices.com, arc.msn.com.nsatc.net, e3432.g.akamaiedge.net, store-images.s-microsoft.com-c.edgekey.net, adservice.google.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, arc.msn.com, ak.imgfarm.com.edgekey.net, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, e9706.dscg.akamaiedge.net, e12564.dspb.akamaiedge.net, go.microsoft.com, e28504.a.akamaiedge.net, www.googletagmanager.com, slot-28504-ion.edgekey.net, audownload.windowsupdate.nsatc.net, www.google.com, dualstack.f4.shared.global.fastly.net, arc.trafficmanager.net, ak.staticimgfarm.com.edgekey.net, watson.telemetry.microsoft.com, prod.fs.microsoft.com.akadns.net, au-bg-shim.trafficmanager.net, fonts.googleapis.com, skypedataprdcolwus17.cloudapp.net, fs.microsoft.com, fonts.gstatic.com, ie9comview.vo.msecnd.net, www-googletagmanager.l.google.com, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, skypedataprdcolcus16.cloudapp.net, a767.dscg3.akamai.net, skypedataprdcoleus16.cloudapp.net, store-images.s-microsoft.com, wildcard.licdn.com.edgekey.net, go.microsoft.com.edgekey.net, blobcollector.events.data.trafficmanager.net, e3432.b.akamaiedge.net, skypedataprdcolwus15.cloudapp.net, akz.imgfarm.com.edgekey.net, cs9.wpc.v0cdn.net Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\5RT1GG11\support.myway[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1153
Entropy (8bit):	5.262906775127136
Encrypted:	false
SSDEEP:	24:WUVQuGIcoAjvyrV95YQbUVQuGIcoAjvyrV95YQbUVQuGIcoAjvyrV95YQZ:LVQ4coAjarVDYQgVQ4coAjarVDYQgVQg
MD5:	4E6F658B0DFCC9F4C8C60029616E85E7
SHA1:	43E67240BEB16E89F6111487AD10ABC04E4751F0
SHA-256:	E10275DEB2149C5E77DF68E1A42A4E409965730D370BD023A049431AAB47251E
SHA-512:	7A4C4CE8655F44D218D190ACB4C8A3AECD5F1F8B8CC18E6D82220920876634DEDC2874C2F55F79C37EF8FD630A76A58391EECF52AE0151FA7FCF385139FD7780
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="hc:da39a3ee5e6b4b0d3255bfef95601890afd80709:recently_visited_articles" value="[{"id":"360006416613","url":"/hc/en-us/articles/360006416613-Browser-Homepage-and-New-Tab-Reset","title":"Browser Homepage and New Tab Reset","viewedAt":1618266056891}]" ltime="469418288" htime="30879722" /></root><root><item name="hc:da39a3ee5e6b4b0d3255bfef95601890afd80709:recently_visited_articles" value="[{"id":"360006416613","url":"/hc/en-us/articles/360006416613-Browser-Homepage-and-New-Tab-Reset","title":"Browser Homepage and New Tab Reset","viewedAt":1618266056891}]" ltime="469418288" htime="30879722" /></root><root><item name="hc:da39a3ee5e6b4b0d3255bfef95601890afd80709:recently_visited_articles" value="[{"id":"360006416613","url":"/hc/en-us/articles/360006416613-Browser-Homepage-and-New-Tab-Reset&

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\5SLCY370\ak.staticimgfarm[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Reputation:	low
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\7H1OX03C\download.easypdfcombine[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aK1r0aKb:JFK1rFKb
MD5:	132294CA22370B52822C17DCB5BE3AF6
SHA1:	DD26B82638AD38AD471F7621A9EB79FED448A71C
SHA-256:	451ABBE0AEFC000F49967DABF8D42344D146429F03C8C8D4AE5E33FF9963CF77
SHA-512:	6D5808CAD199A785C82763C68F0AE1F4938C304B46B70529EA26B3D300EF9430AD496C688D95D01588576B3A577001D62245D98137FD5CD825AD62E17D36F15C
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\Q6LXOW9V\www.onetrust[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	1413
Entropy (8bit):	5.197156706580566
Encrypted:	false
SSDEEP:	24:WUFIz5ot4QbUFIz5ot4Qc5fQbUFIz5ot4QFoQbUFIz5ot4Q09g4QbUFIz5ot4Q0B:LFOU4QgFOU4Q0fQgFOU4QCQgFOU4Q0/2
MD5:	F8584A13BB968605C7223E0E0C91F570
SHA1:	C6271DDC0214B6A4DE8E83AA52B42FF5DB12BA0E
SHA-256:	56A94F014F7306E329547BB32BB0EB41489649F5C46E5B8D68191CFED359C11E
SHA-512:	9A752E8F2BA0BDACE2B78E05F2FFF43D8D6B08873DD81B6343843A6A5609C2D9DC696CC322B00178C8B69D7729737324767564E3D60A3C9557F749FF4DC2B100
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="undefined" value="null" ltime="531758288" htime="30879722" /></root><root><item name="undefined" value="null" ltime="531758288" htime="30879722" /><item name="wistia" value="{}" ltime="544158288" htime="30879722" /></root><root><item name="undefined" value="null" ltime="531758288" htime="30879722" /><item name="wistia" value="{"accounts_loaded":{"wistia-production_478590":1618266064751},"medias_loaded":{"bwewksugpg":1618266064752}}" ltime="547958288" htime="30879722" /></root><root><item name="undefined" value="null" ltime="531758288" htime="30879722" /><item name="wistia" value="{"accounts_loaded":{"wistia-production_478590":1618266064751},"medias_loaded":{"bwewksugpg":1618266064752},"visitor_version":0}" ltime="555718288" htime="30879722" /></root><root><item name="undefined" value="null" ltime="531758288" htime="30879722" /><item name="wistia" value="{"accoun

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{44B24C87-9BDD-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.858036545576628
Encrypted:	false
SSDEEP:	48:IwEGcprJGwpLCG/ap8GGIpcYVGvnZpvYIGoEqp9YJGo4BpmYiGW6q9Y1GWEqvYvG:rYZjZo2mWYStYAfYKBMY8YXYlfYssX
MD5:	AABC5858C7D329A6DC74057B9725BF54
SHA1:	9C20B7EFD05573059F8CEE576FFD976BF1971CF1
SHA-256:	C8D1A551B3C146F8433CFC108B69B9D3C82AB586BEAA8089AF9ADE95DD07C5F3
SHA-512:	BD72CEB789B1945B0874BE4855DB79BBE037EAB8118136CC2DBE9AAB9F10C710D396F7BF4255562106F864924B37EFBA8BBC34F7FF6D9955F8E04E0073C69131
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{44B24C89-9BDD-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	164426
Entropy (8bit):	2.8666778540143687
Encrypted:	false
SSDEEP:	768:iipESZxAlv1vxfRPAauilFtIZTidpESZKAlv1vxfRPAauilFtIZTiDz+viLLHif7:Ql9Nl9T87
MD5:	EAB2BFBFDC7DA5F941C8BB0477EC325B
SHA1:	C0248A9B1A2F54BCD28ACE567AD4E026A2F79B95
SHA-256:	D928212D1D35C286597FCF3B2DDE05F38D1784FCD7A2625A6E4B0FB05311043B
SHA-512:	95C00CE55F5ADD04F397F08836C4C328B87518C1BFCF33A95C7427E935D0D095FA9373A8DF8AEB95EBDBADFD74D6B2AAE7BA46EA525E56D8DA2384DAF931A106
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{4C02BA71-9BDD-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5648813404343604
Encrypted:	false
SSDEEP:	48:Iw3GcprLGwpap0G4pQwGrapbSPGQpKbG7HpRcTGIpG:r9ZFQpE6OBSZAaTIA
MD5:	5E8E3BF4F3E61D49671B58BAB6BCBB7C
SHA1:	92944E1C60D3C325273EAA3F95AE77C7CE16EDA1
SHA-256:	EDB2C2CE7BD9AF48D41D51FDCC438776857569E2830B58673F03644DB3E5FFC5
SHA-512:	3619903C7510CDCEDDBE3FF6B18AF5ED7ED75121303DC3CBB681F357F1D4562477B6B7F9AC47DC60AD669F1963D9E6EBF205AD7D4F10C1FE926303A46CAAD685
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5242
Entropy (8bit):	6.607712085713229
Encrypted:	false
SSDEEP:	96:dKyuKiWMpZo+5K9YKyuKiWMpZo+5KgBvey/YJYmBVuO9ODN+b1L+zPC:dKyuKHMpuqXKyuKHMpuqhP/8BVuO9OQN
MD5:	112EC9A897004AEE48EC1CC941700506
SHA1:	FF2F8166A7F75585508C85DC43A159E4055B7791
SHA-256:	67655EDA7620A18618B8916389F2130EEB5FC0C1C86B4089DC18B069C0516AB4
SHA-512:	DFE5C5C841FBFE24099F6175B443D614F655B9C969AC2337278DAE0C86E1712A51821ACD3948C76030B8BE3F5C327A457974AB8F4FF8EA64DBA06C5AB0C68153
Malicious:	false
Reputation:	low
Preview:	&.h.t.t.p.s.:././.e.u.l.a...m.i.n.d.s.p.a.r.k...c.o.m./.f.a.v.i.c.o.n...i.c.o.~............... .h.......(....... ..... .............................................................................................."..."..."..."...".(.".*."..."..."..."......................."..."...!.N.".."..."..."..."...".."..".;."..."...!..........."..."..&..."..."...!... ...!...!..."..."..."..".1.!...".......".q.!..dp..\|....#..&8..3D...0...-...!... ...!.......!.Y.$..."..."... ..ET......_l..................bo..gt..%7..8H...&...!.Z.%..."..."...%................../@.......................+...!...".5."..."......IX..............KY......my............... ..."..."..".."..."...'..........y...y.......:K...............(..."..."...".#."..."......M[......nz..);......jv..............M[... ..."..."...".E."...!...)......cp......."... ..]j.......@.."4..."..."..."...!...".F."......IY..BR......."......;L....../@......."...!......"...#...".$."..$...%..."..."...!...1......6F... ...%.u}..............."...#...!.0

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\8TUWLZEM\video1[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	393216
Entropy (8bit):	5.493603285996109
Encrypted:	false
SSDEEP:	3072:0JDFsuR6rexalwrIJdVp4hxUhzsGlk+C4bIdtuJLkh6eHkyXUnLSgbbu:0JDFgrLwEJH2Qn6uJLk8eEyXUnlC
MD5:	C17967D84DD6220665215CC5DF53CB2C
SHA1:	F52BE1C6C65C2C64C78267CB57652CB372675CC1
SHA-256:	A20108877331C485E7B3B2B6D9E531F4417F3C5D73C1F210807A8BA21DE0457C
SHA-512:	CBDC401FE41BAF3EED48D870EDCEF5CBA779F7BDB58540861F72F1408934322C70357E7BC79448D5762A35B81B74BC870C8CE1098E293B3DA4945802F2869C1C
Malicious:	false
Reputation:	low
Preview:	....N.Y...9...4..0hM../..[.~.Y..9...kj..y..v......."a...I.....SF....3.......f..v..........`N.cu.$.NT...I2..(3...........^..3s...R=...S...8..Y..^.f..m..\|......o.>}.......8=.v{.(\l^.?..#...#.iL]i9B....L^.WS..b.+...q..r.O<.V4-..].....n........?.q/...Q21.F...?...!t...]...k..?[.{..C...VK.2........).X...Z.V..O....>..t.a.:Y!u.-.<.$......!.E..d.&.c>...cVTg.(-..\|a%g...h..T....C.}.....6j..Lh.DV..h..`.w.6.3./.G.........u..rQ.Y.kl.?.m..,.....c...p...K...j..Q...e}t!$ ..yf.$..>R...hJO..Z..9'#...}.R..<;.P.\|...l...{...keD...Xz=.7...)m..1......,~.2...3.K....&P....9.....8J7.. .{"..sv.x...ERo.#oF.....\......R_...f.......}....."...)..t.^..E.@C.&j.UqT.X7.D{2..N....dZ...Y1.@.b#:.......%o>..%.4..m=~..8...Di..O._.......Ir'..5X..X...x....g......yb&....J....r....y.>....Y...gu...... b....v..l.x...Xf....\[..i..wj.E....X .9.sH.=..-wb..._.W.).4./.!3..AX.{5....}..F...x...M.F.e.(.;t.;A.kT=..N....@>!...@.%.T..j...9..Vv.%.u1..#..1..k<.....0..eT...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\11a20a14-77c2-4cfb-8bc9-a5ded972f22c[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	339
Entropy (8bit):	5.124582970295724
Encrypted:	false
SSDEEP:	6:YWGZqt+B3QVgrb2gIhYciTeAWmUFiJOdF8fBgww/jUsUkrbBJK3X/54HY1:YWGZzB3qgWdiLCFqyMwwsUabBHY1
MD5:	77235A05A26D4640FC162A986E3026AE
SHA1:	DA183BBF886BEE32DFD821677A8D5D9ED893F23A
SHA-256:	0B430E812C1BBAA3F7BAD1309CEF736326A9E991393B86E2389FB050B35042D3
SHA-512:	A055F25F3C71D83B4C275D0519BD95EC0A09F2996DB275BE313A2AE1C068F4E4C877C52A69376DD068C34D5A78D1AD09DC6A43C9115BA7ED05EB2B4546C39711
Malicious:	false
Reputation:	low
IE Cache URL:	https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/11a20a14-77c2-4cfb-8bc9-a5ded972f22c.json
Preview:	{"schemaType":"notice","schemaVersion":2,"languages":{"en-us":{"languageId":"45387e8c-504c-4b58-b4ae-f879f3242eba","language":"en-us","isDefault":true,"policyUrl":"https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/11a20a14-77c2-4cfb-8bc9-a5ded972f22c-en-us.json","languageName":"English (U.S.)"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1412616540489[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 211 x 65, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	5617
Entropy (8bit):	7.884637058144033
Encrypted:	false
SSDEEP:	96:zB8UY3DACFmdBsSi4rei0dZWLGSMmizQn3Q6+SCOklmXqqL6Z+lPZsk2zZ:zpni4qndmJMmL3ZCplmai6Gsx
MD5:	62558BDCA107497154EECE173D517692
SHA1:	75F5881DB7BB2C588E2CF92D21C438B15FE7CE2F
SHA-256:	30027C46657A24C9B79DC17821709C78A10597D7237AC76F16D85852708FF864
SHA-512:	5DF0DF58A371545DD2BD68B2868030BABAC397ECF21C68F3503F5A08AB62EB3233E3F9CC9FEEEE18D5E590F8D4518E69A0606BCE17A32BD258577A6FD51D88BC
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/jason.pepping/asset5/1412616540489.png
Preview:	.PNG........IHDR.......A.............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C6225CFE3F3F11E48C4C937DB526D60B" xmpMM:InstanceID="xmp.iid:C6225CFD3F3F11E48C4C937DB526D60B" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0B0CBD3D5C0911E28BC1C608A35F706E" stRef:documentID="xmp.did:0B0CBD3E5C0911E28BC1C608A35F706E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...q...eIDATx..].XSW..$$@...R..E...AA.V.....bq..YWk.Uk.w.uC.8*".....d....!.or..B.Z...9.'....=...~..~..Lcc.G...;d....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1511887685259[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 81 x 91, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1624
Entropy (8bit):	7.835552011908509
Encrypted:	false
SSDEEP:	48:w3LVT9q2otXKCChAa42cTFkYgVDp8eXcrrhg:IHqf55UAt2cT7g5p8gcrrhg
MD5:	9B6101B48B5AAB082BFB9AF5D28E1F11
SHA1:	701B8B214D7F56D99AE293BE54F6AD0E293FB748
SHA-256:	AF1A900499330AE589A38508D0A1AF6E3A1E0770C9AE0B4B1522AAE1F81A2FCF
SHA-512:	51B893BA3B6A7CB15B2A7ADD59786D0C7C4042AD97A2E4A250AD04C42E3AF0332573A9B792383356F492C18EE195D35790F63C55BC5B0C6F7A6049A1A85DD68E
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/jeremy.jacinto/asset1_6/1511887685259.png
Preview:	.PNG........IHDR...Q...[.....<.b....PLTE......r..r..q...+7.5.)5q...&1.6.'2.(3.,8.&0.%/"2@.(4]...$..#-p..h...",.,9l...$/-CV]..k..$6E-BUd... )T\|.g...!"3Ae.. 0=#4C[..!0>p..^..m....'':J..(Dd.[..S{.X..Y..9Ul..;?P!1?k..o...DV%6E;Wp/FZ,AS. )=N.DWX..V..]..."+b..e..j..g..De.,BT>P(<L_..Ou.Lq.=[ti..Nt.a..+@R3LaW..l..)<Mn..f..&8G0G[e....&d..9TlUUUU....:U~.n..Rz.a..m..Ns.b..T}.Qx.1H\c..4Nc..%Z..Fg.V..?]w+@Q2J_Ry.i..7Rh`..W..Cc~Z..Jm.0H[#4B7Qgn..Ko.2J^Y..Y..Fh.;Wo%7F.-::Vnc....$j..De.Cc.&8H>OBa}Jn.^..\..f..8Tk(;Kj..D.......tRNS...7....+IDATx^..e..H...lw.......ff.cffff...c9:....H..:.......G..)y.C......Z..q..~..bSl.....".!....@@.....,_..{..:q....(......&.I.<3.T...e...t... !<.u......"1.....H.nr...v.r~.1M..k4....y/...U.z..4RT.M..........}w.5.P...M.Zc.qDx......e.i....n.M.MD.pi...:.e.Q..XN..J[X..n.E.2.0tlJHa.OH.G..HO.n.O.E..... \|.]g..m...M.......\.R....SJ.-3;..qE.r..qL,s..........jxecGw-.G..>......I...5...O...R.._;;..G.xl.A..-.\|.ch.B...._.....+n....$^)2..._.1...-!......"..y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1513349883585[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1281 x 660, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	41112
Entropy (8bit):	7.691409536807639
Encrypted:	false
SSDEEP:	768:eNHcf7KYm/Zzxe0p02orFQmfLmkayktTZ1z4mmI:eBcDw/ZsRxBDLfaykh/z4mmI
MD5:	1C9EB8886619C1D9298115DAD8BD3E36
SHA1:	1203B7C11FF34B7E42D6586DA9FA5755ADB3A700
SHA-256:	7CC9340B91BD5B1AED0681F18E9C3070A4068CE8DD38E777C4EA543E93B6AC90
SHA-512:	57E6C4A94EE7A16D4B8E2FEF6DF91F5064AE1336BF5BCF80130E59D67C383FE82F453AD8A7368E484BBFCFAB21804B410EFC1608CB457F61734939B2D469F14F
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/nicole.guinta/asset1_2/1513349883585.png
Preview:	.PNG........IHDR..............v.... .IDATx.....I....{.....h........hgF....../xvv.....{..PU(].e.w..JT.....F..c-P...#P....s.!..B.!..B.!.....z...B.!..B.!...[...!..B.!..B..3'!..B.!..B.!..?s../L..4...V........s....B+....9Ga.r..!..B.!...V.^...;!.Fq...r..5..q..6..>.k.x.J)..).e...W..Q.\|..1.;..r.$,..\..}....\.Z...U.W.+..B.!...{'.4...b..6..:2x..%.....=;.;.8.j.../.s...'.......m.?7..&...t.'..[?..Z_..{...............UJ.\......o..-...B.p..6.n.....1SJ.... P+X..A.V.(8..iP..........z..?.........\|..!..B...wB@..J.n..F..!.I...._].c..\|.K.~B.\|...f.......okml-d..E..a....w...e.8,r........$T.........gZ)..-4....u0._0xoM.p...Z...r[..uy_..T.\.:.W...RXkY,......c..Z..5. .S.G......t..v..U..Oi..!.=P?.........\|y...8.AL..>...@.*.E..Y.g..C).(B5%.9K.Q...)o>NQ..?..$.T.~hJ)......Sn...#.U.-..B.!.;.....E.X......(h6.(-c.._......C.#..oUIt.pf..:".0..e...Ux..tY.....G.NC...[..V.d8..Sv+5&Y..r.....)....M.."...!..A.....~IP.E..U.S0)r..H.t....b9.9G.}..O.=..2....<..T).....i.....v.........jw.WJ....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\588f5a57688ed40e34d35bc234fcf994c6d1c82f[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 135 x 123, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13330
Entropy (8bit):	7.950823549215336
Encrypted:	false
SSDEEP:	384:GfjTjgkacQIUax8vmONOD/3aLdJiUvFrV4L0:YngHcZUax8ZNODCQaZVD
MD5:	28EFDC178E090EA105B2DA69F334C5F9
SHA1:	588F5A57688ED40E34D35BC234FCF994C6D1C82F
SHA-256:	E1F2292D364FB0EABF1C41B4A3354D4CF6C8639645283B2D136F49C615975B47
SHA-512:	A2A31C7685F411EF570E9FC2156B4CEC0E629576894A5553C30A32E79C978BD56C852D2A40B9630DC1AA6A8B109E9C4FA842051B0FC8A7079362858D4076733B
Malicious:	false
Reputation:	low
IE Cache URL:	https://theme.zdassets.com/theme_assets/2136946/588f5a57688ed40e34d35bc234fcf994c6d1c82f.png
Preview:	.PNG........IHDR.......{.....^..h....pHYs..........+......tIME...../...4.....tEXtAuthor....H....tEXtDescription...!#....tEXtCopyright....:....tEXtCreation time.5.......tEXtSoftware.]p.:....tEXtDisclaimer.........tEXtWarning........tEXtSource.........tEXtComment........tEXtTitle....'.. .IDATx..}y..Wu.w...^f.h.F.-....y.....m.0...A...x.,/......BB.~qx`06[...1..0...."K.dk...F...43=..Uu.y.T..g...-...~.....K....s.9.\RU..A7..iw7..M....;[..Xt....b2H'.j.@>...."..=...B.Q.f......{.....<r.....[..5o.+.q.BD-"...cf..Z..0./.H\|...TU.}....mjj..0...\|q...vN.m............v.4.<&g....!...W..er#.+..U.!2.P..bv..0(I.I.0.!..QH.......r...,:..%;X...lNw6l.x...\|.%.D.x....$...\|.D....i.&A..L.jRD2.zF&...l.x..V./"..j....9^..x.X\...tI.f.K4!.i.Ci...u.@H!.()............... ..U(.."....@D..t............/..g.w...a...1...........9...T'S.=.c.'K..3g..D..X..8q.......FMM..&U...v.YM..s.j../W.....CM..L..w..."........;EL.(...[V..`"...Q..5..l6\|.@.J....;.-....&..7.m}i....Q(.X.&..8}...4.Z....*......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\95061b6b-8c20-49bf-a186-861b98f5338f-en-us[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	41115
Entropy (8bit):	5.1061698187686275
Encrypted:	false
SSDEEP:	768:qxwTHXLvdDh2x90m2zy0dPBkgQi7GogEu3Ggrjvvp:qa/usu0KgQ8Gou3GgrjZ
MD5:	A1E302E643E73DE0BF4F27EE032F9CAC
SHA1:	C7BCBA59C32E27C72266D582F9E1D95301CE17F4
SHA-256:	E188882C734EB991BE0C63C5D6C891D09FC3AEF8F8193AB6F8921E57D3C63CBD
SHA-512:	BC3CEAE6D60D35FE8706C06B3A7207E20FE4D00741F025C637A34CFAEB4153E6A247188847F55183FA47DBC086A8833092BF50D75BDD8041D681D871B30FDC1B
Malicious:	false
Reputation:	low
IE Cache URL:	https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/95061b6b-8c20-49bf-a186-861b98f5338f-en-us.json
Preview:	{"schemaType":"content","schemaVersion":2,"notices":{"6fe77eb0-7481-4ab5-bfd5-3d221490f4b8":{"content":"<div class=\"otnotice-content\"><div class=\"otnotice-sections\"><section class=\"otnotice-section\" id=\"otnotice-section-10abc1eb-99c8-4aba-a246-6356edeb2044\"><h2 class=\"otnotice-section-header\">TERMS OF SERVICE</h2><div class=\"otnotice-section-content\"><p><strong>Last Updated: December 21, 2020</strong></p><p><br></p><p>Ask Applications, Inc. (f/k/a Mindspark Interactive Network, Inc. and APN, LLC) (<strong>.Ask Apps\", \"we\",</strong> or <strong>\"us\"</strong>) is pleased to provide you its websites, and the related websites, applications, e.g. toolbars, browser action buttons, content, products, forums and services made available, or available for download on the page on which these Terms of Service are posted (collectively, along with the Search Applications described in Section 1, the <strong>\"Ask Apps Service(s)\"</strong>).</p><p><br></p><p><strong>I

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Akamai_green[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6159
Entropy (8bit):	4.268690467259366
Encrypted:	false
SSDEEP:	192:RKf8symNU7kyqX9J9m57U1J9GDwqpl1uurhki:RKYmN8kyqX9J9m5I1JcLxuu
MD5:	584D24E5AAAE31FEDFCE380A3A70729B
SHA1:	616F19B5095DE197C43946531E014103639BDE39
SHA-256:	6AE7EAFAA95B1329E2C719A3060ADC9EFB0FA805D8CD4560C37550DB28DA210B
SHA-512:	1B6B1B8332ADC4B58A1B79A118BCB2860E8B01353EB61B6018BD6C5F5B7E5049A8A303EC86AB52C205F9BBE954D45B364F48D99C29FAF9F0DBE20CD4DCE45877
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/Akamai_green.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="82px" height="34px" viewBox="0 0 82 34" version="1.1"><title>oracle_hover</title><defs><linearGradient x1="100%" y1="58.297345%" x2="-7.83676304%" y2="41.702655%" id="linearGradient-1"><stop stop-color="#71C94D" offset="0%"></stop><stop stop-color="#0FA843" offset="100%"></stop></linearGradient></defs><g id="oracle_hover" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><path d="M16.8,9.1219782e-05 C17.672,9.1219782e-05 17.8566667,0.449516328 17.1426667,0.661516328 C10.011625,2.7238191 5.096252,9.24361335 5.076,16.6668497 C5.09211308,24.0075315 9.90725258,30.4740941 16.9353333,32.5935163 L16.9353333,32.5935163 C17.7246667,32.8315163 17.672,33.3336081 16.8,33.3336081 C7.56112155,33.3637794 0.0433533137,25.905676 -4.97379915e-14,16.6668497 C0.0433533137,7.42802337 7.56112155,-0.0300800455 16.8,9.1219782e-05 Z M72.1866667,20.1848411 C75.3553333,20.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Akamai_white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5926
Entropy (8bit):	4.141558059174474
Encrypted:	false
SSDEEP:	96:95CFMFSBsym6WBU8KlayqX9J9t/zaiA5786K9G2MCvJ9GkmRluqpBzwyivnuryDL:nf8symNU7kyqX9J9m57U1J9GDwqpl1ut
MD5:	A89B5A6647B7A699F15425F7B5E7F71C
SHA1:	1429C44FBA81082E2D3291CDAD1A29BA583D9707
SHA-256:	4690943DE20FD88C77DDA328571190FAC34B3E3418EA95CF4CB7534D3D16D869
SHA-512:	0E1D00CA7697B6F4588B449187A09947CCE2CCB5CB931BACA7D77E89C75846BE80AE11EBAE238BF1DC2ADDD5398189426C8756ED57A92206AAAB8EB615402045
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/Akamai_white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="82px" height="34px" viewBox="0 0 82 34" version="1.1"><title>oracle_default</title><g id="oracle_default" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><path d="M16.8,9.1219782e-05 C17.672,9.1219782e-05 17.8566667,0.449516328 17.1426667,0.661516328 C10.011625,2.7238191 5.096252,9.24361335 5.076,16.6668497 C5.09211308,24.0075315 9.90725258,30.4740941 16.9353333,32.5935163 L16.9353333,32.5935163 C17.7246667,32.8315163 17.672,33.3336081 16.8,33.3336081 C7.56112155,33.3637794 0.0433533137,25.905676 -4.97379915e-14,16.6668497 C0.0433533137,7.42802337 7.56112155,-0.0300800455 16.8,9.1219782e-05 Z M72.1866667,20.1848411 C75.3553333,20.1848411 76.5973333,20.580183 75.91,23.8288497 L75.91,23.8288497 L74.6433333,29.7188497 L71.5533333,29.7188497 L72.002,28.3475163 L71.8953333,28.3475163 C71.3913333,29.6408497 69.942,29.8528497 68.858,29.8528497 C66.691

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Auto-blocking-1[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 2880 x 1646, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	554848
Entropy (8bit):	7.983056508154252
Encrypted:	false
SSDEEP:	12288:Y922soyRpqsLvVldlHkzXInE9X5P0ee9re2sz:YeoyRtLrdy4nEQL9S
MD5:	28A4EE520DA9CF2B2311583CF0F5BB0F
SHA1:	78FEF4724C4A6BA72AAAA8D1FF32EF71A77655D5
SHA-256:	33D0E39B594B018A15B56A005BF3D3B8A7C94F9E20A99C9303DB6E0DB0DE6FBE
SHA-512:	981F007E95C02A8C2C4EDFAEAD12EB1F5B3080CBC5F6F3E613251F68E3F397D6295B879B76A47E226E2D84886B7E9A4E31AAF1932CFE9FB5A8E013F10FF5A1E2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/Auto-blocking-1.png
Preview:	.PNG........IHDR...@...n.......W.....PLTEGpL.........................................................t.VAk,b.D.O.V.@l.J-6Befg...cdebcdw..def......dc^......acd`abeb^..._`aegh......ghi......]^_...XYZ...dgg...cdf...ddd...............ggh............[\]ijkZ[\............hgc......ge_VWX...b`\TUV............efe...lnn....AX...`^Y......cee...BBB...QRRFFE788<=>............afhIJJMOO.........dgk...233.....................haW...SOF............efc-./XUP...6t..........bcf\ZU.......=Reb[......mje..._g[?=8......sss......()*......afb......Zbp............6v.sx}........djo{yv.....................\|.a..jox.........9q...........aXJ...10)......?J:dq......weL...\|..VbR...........xnc..............s.....#$$..........xt.....z...............Cm..pZw..j\|.Yt...}_x..W.....a...........s.S.........r....w...e....tRNS..............$'-..6.;.M.]Ln... .IDATx....r.H.....#l..T.j...g;.;...@....>..Lk..[-.....................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Bertelsmann_default[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 390 x 44, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5678
Entropy (8bit):	7.4262358576960565
Encrypted:	false
SSDEEP:	96:4YetD5v8zUz7DS4ZCcVE70X4aqLZaUfX/pNzakMsUWomKRbNhfjbBO4JNrZms3:4YeJJ8zyPCcY0XidaUfPDakMyU/fxO4f
MD5:	4218BE08C3069F72140DAE0A60A57AF5
SHA1:	D5C3E7CB22D68AF4FCC6C0E6C93AE2A5EEF48FF1
SHA-256:	99F010A10AD2CDFC2410A07A699341D37BC4B64A0E41EBDA907112167BB51FF2
SHA-512:	031E6952C90CC19EC0DDBCF2D84609CF3F83ADB083B93FE09918252B7A82BBEBC0EF08238D3A4DAC26BACEEF3556BBC27D8AF5C96307938EDD3D463BCD23D225
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/Bertelsmann_default.png
Preview:	.PNG........IHDR.......,.....V.......PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................e..<....tRNS..>8.......;"......_.P.....p.W.Y.I............h...u...o...H....?9.......$.........{=.......-..#+.4'..(i,!.G.C.......ZF..<.O%./... .5:7a.*...6.nx.&...0.2c3KTb}....mD`w....r.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\CookieIcon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4460
Entropy (8bit):	4.597801313226035
Encrypted:	false
SSDEEP:	96:mz0vDlJVGwWRfVyxrYH/9o/1NH/S00vustLzFe/:pLGwEVc1H+HLzo/
MD5:	F0130AA198141A2A163888AF9E758F65
SHA1:	28A8D195F208A651125D05F980868CB71F067546
SHA-256:	5D503D12D771A50BAABFC9286B567AFF76EC8F49B176E9990FCD6160B4DC35F8
SHA-512:	C4ED44D4B848E0A01FA0ADF28CC3E88AD03A6BC3744A56B3031E8F123B8C3EF7C66C18A895359277871F79891D040613097BDC921BD4BA9B9851BFE38C37D98A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/CookieIcon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="45px" height="44px" viewBox="0 0 45 44" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Cookie-SVG-GreenBlack</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Cookie-Consent-1" transform="translate(-90.000000, -648.000000)">. <g id="Side-Nav" transform="translate(0.000000, 635.000000)">. <g id="Cookie-SVG-GreenBlack" transform="translate(90.000000, 13.000000)">. <path d="M22.4627161,41.6194019 C11.0811003,41.6194019 1.28822263,32.8478331 1.28822263,21.1090275 C1.28822263,11.8429192 8.97146441,3.17546406 18.2955341,1.09319254 C18.087175,6.012559 23.8170502,10.6456131 30.1459579,8.12085891 C31.6044715,10.8017835 34.2350052,12.2593735 37.5427059,12.2593735 C38.6886809,12.2593735 39.8086111,12.0511464 40.9545861,11.5566069 C42.4130998,14.3416451 43.8455686,18.037677 43.8455686,21.1090

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\DataGovernance_Selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	734
Entropy (8bit):	5.224515137520631
Encrypted:	false
SSDEEP:	12:TMHdiO4/KYpgompYsUWVFeaxMuhnGXqOgkUGuXRUGnT5z5hfGY7k7MnBYHSK5/wj:2diO4LpgompjHeaxMiG6OgiuXpnT5z37
MD5:	87187D7955263801A4E6C0C9378281E2
SHA1:	89317B716CD054BCD374910BF01CEDFBBAB84559
SHA-256:	112FAC7BBB2E52D32AE5B0FCE8C025683ADAC85D9249E460BE928C1E95CE90A6
SHA-512:	7BE31BD3DDB0F7AC5EDAE890946DD6E83C0B784172649E3E56E073A6EE2185DB3E47F038CC0A9BC79123DF299BEC656092E54AE66F744AF5A176FC6729E25679
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/10/DataGovernance_Selected.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="20px" height="20px" viewBox="0 0 20 20" version="1.1"><title>DataGovernance_Selected@1x</title><g id="DataGovernance_Selected" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Group-6" transform="translate(3.000000, 2.000000)" stroke="#6CC04A" stroke-width="1.4"><line x1="0.650000036" y1="16.1533257" x2="0.650000036" y2="-1.96288872e-13" id="Path-7"></line><rect id="Rectangle-Copy" fill="#FFFFFF" x="4.48683119" y="3.0887697" width="9.1000005" height="7"></rect><rect id="Rectangle" fill="#FFFFFF" x="0.586830972" y="0.488769558" width="9.1000005" height="7"></rect></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\DigitalMarketing_Selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	830
Entropy (8bit):	5.265585639872964
Encrypted:	false
SSDEEP:	24:2diO4LpgompsYvYoeaxM16GquomuaWnqu4CqloMI0K68YLNmyy:c34pgNOqmXWnqK6I9
MD5:	5420E39DCD4EF4A58032EC0B67BC5A63
SHA1:	F603094E80FEEDF390E94CF158CD8BA64339BBD2
SHA-256:	7AD5E41FACF1578580DD6E78ABD6467CE2413A3AA384CB25A673A213DCEEB176
SHA-512:	D9BE714B9E969B9BF1AB80181F3BEA742C4EE47CEAC8D6E7B6D1CD198A42202E8DA7660C7301EA95CEE6C752A44B186A5E1A30EF1414C4AEF1EED89287DBDB89
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/10/DigitalMarketing_Selected.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="20px" height="20px" viewBox="0 0 20 20" version="1.1"><title>DigitalMarketing_Selected@1x</title><g id="DigitalMarketing_Selected" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Group-5" transform="translate(1.000000, 1.000000)" stroke="#6CC04A"><path d="M4.125,10.2399997 C4.125,9.07999988 5.25,8.5 7.5,8.5 C9.75,8.5 10.875,9.07999988 10.875,10.2399997 L10.875,10.5 L4.125,10.5 L4.125,10.2399997 Z" id="Rectangle" stroke-linejoin="round"></path><circle id="Oval" cx="7.5" cy="5" r="1.5"></circle><circle id="Oval" stroke-width="1.6" cx="7.5" cy="7.5" r="7.5"></circle><line x1="12.6796875" y1="13.0799993" x2="17" y2="17.5" id="Path-6" stroke-width="1.6"></line></g></g></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\GreenArrow[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1032
Entropy (8bit):	5.111298678728255
Encrypted:	false
SSDEEP:	24:2dAU9Lt2WRWlnEdeaxM24Wlk68n62HQ94WrY02qgA950ko:cjtt2RlnSlkHukd7AW
MD5:	2FBD428C5039C277B0FB86955CACA669
SHA1:	B89DD88DC65902D25B041BFB3BD2E3D81BBC6B58
SHA-256:	4186A543C0C7AF420B3C0EC473B053D8E7ACC4949CEC3E4178BEAD62ACAB7280
SHA-512:	9E76279245F4560E9A0AE259F59C5001E20622FCA65179A21E8EBB5A78D01D9C60995DE478D568498624DF27F5072E5028A9EA80860A24949B7322AE78433907
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/GreenArrow.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="8px" height="13px" viewBox="0 0 8 13" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 63 (92445) - https://sketch.com -->. <title>Nav / Elements / Dropdown Arrow / Green</title>. <desc>Created with Sketch.</desc>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Nav-/-Elements-/-Main-Nav-/-Text-Link" transform="translate(-66.000000, -9.000000)" stroke="#43782E" stroke-width="2">. <g id="Group-2" transform="translate(-4.000000, 5.000000)">. <g id="Nav-/-Elements-/-Dropdown-Arrow-/-Green" transform="translate(65.000000, 1.000000)">. <polyline id="Path_5159" transform="translate(8.867368, 9.550000) rotate(-90.000000) translate(-8.867368, -9.550000) " points="3.50736842 7.13421053 8.80136842 11.9657895 14.2273684 7.13421053"></polyline>. </g>. <

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Group[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1250 x 688, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	94926
Entropy (8bit):	7.976927453663382
Encrypted:	false
SSDEEP:	1536:T0Ib+V+CBfwY9gZmnpI+s0OsuT1fkXehWN7y6ss+DcPDaTv1uNu5Png:lb+AUg8npPBoK+Qd+DKSv0A5Pg
MD5:	42F8D88997269CD86F27819ECFCB2EE2
SHA1:	EE6C46727B06EAABF7A77CFD56F711FFD7102D38
SHA-256:	7406789E4F9EBC4F355226EC853D0BFB0B82052D6D168B59CAF4039E8740ED2B
SHA-512:	E5F3E3F8E00817C2B449F6E7C1164CF6CAE6CA0A779DCDAF64AD7FFEA70ACCF644BDF635389F6E995256BF26B8B46A27ED1236486927FD4377E2DC2F18885693
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/Group.png
Preview:	.PNG........IHDR............... .....PLTE.....................GpL............fpzqy..'+......)1<mnn.@W+4@%.8...j.I...y}za.D.........^_`.......4F&.9w..)2=qw.-6Bl.J..............Zw..?..P.........................................................gkghi........................................j.H.....Y>.....x.....t.T...l.IV...........>..(1>...x{.n.X.._.....j...........TP..+4@?...=T}.X.dj......8q....O..=............AY<HI...\cnFLU2;G...W..............z...ii{.V@...Z..........}.V..~..wO...`ab....l.........@.....@...........R[is\|....dmzVWX.......d\er............=.....X....\|m.L\|.]......u.Srss.......O........o.Le.AQ..xyy..lv.~.....x...........2J...m..9z....W..f.I..Q...Y.....r..Q......~..9p....is...c.......nr...a..<4;<<C..U...........{~....N...<u.l.......}.p........._[...,-..... !m..9...&tRNS............2.*................b......'.. .IDATx..n.J..Ol%...A..,..,..q.....B.P.i...-..0...P......@...............pD..H......h...m)..._~.................o..`..........x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ResMed_green[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	15844
Entropy (8bit):	4.818054169177222
Encrypted:	false
SSDEEP:	384:x5d9RsmBkcHs0UxT9UWgymrcjfGi1jQ3CZxCKb:x5dLsmBkcHMV9UWXmrcjfGi1jQIxCKb
MD5:	28B1D42E8ECBC5A4B4F60BD710D9BBD3
SHA1:	19DDFFA0221F5B0B57324BFE2FAF60D0F2556881
SHA-256:	6AAD7A8E22CBB552664564CF24C7D780D3550E1C9DF368D9E24F408DBEB2BF9B
SHA-512:	67590F519A040623AE68793DE26A30FD7EA7C1D7A0612F729B9DDD8552749297EEA5555A9F8DE9908D3E455DEF559DB7DFFE187616B5D28D3ACCE23ADAF7E496
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/ResMed_green.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="47px" height="34px" viewBox="0 0 47 34" version="1.1"><title>ResMed_HOver</title><defs><linearGradient x1="100%" y1="99.9260629%" x2="-7.83676304%" y2="0.0739371433%" id="linearGradient-1"><stop stop-color="#71C94D" offset="0%"></stop><stop stop-color="#0FA843" offset="100%"></stop></linearGradient><linearGradient x1="100%" y1="88.6290724%" x2="-7.83676304%" y2="11.3709276%" id="linearGradient-2"><stop stop-color="#71C94D" offset="0%"></stop><stop stop-color="#0FA843" offset="100%"></stop></linearGradient><linearGradient x1="99.9492515%" y1="100%" x2="-7.77806042%" y2="0%" id="linearGradient-3"><stop stop-color="#71C94D" offset="0%"></stop><stop stop-color="#0FA843" offset="100%"></stop></linearGradient><linearGradient x1="100%" y1="67.9899883%" x2="-7.83676304%" y2="32.0100117%" id="linearGradient-4"><stop stop-color="#71C94D" offset="0%"></stop><stop stop-c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ResMed_white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12390
Entropy (8bit):	4.40244942268564
Encrypted:	false
SSDEEP:	384:S9Rf20kcHs0UxT9UWgymrcjfGi1jQ3CZxCKL:SLf20kcHMV9UWXmrcjfGi1jQIxCKL
MD5:	336C6A7AAD4F30E3C742D3FC9B01CDBB
SHA1:	F2AEDB11DE0C4C76BE8A029512CF23F1D97E369E
SHA-256:	130C0DE9E9D5CD236155286FA26C99321EDA46D597BBB9BFEAE1D4A62AE3B274
SHA-512:	4C847C68FE1AD64031BE55636848816835113AEBBE660F67ADF30447057A495B3D3C8E0E3D9428A67621D5B45A1A0267B1B4E7741B1EFE1C46CBE90EBF496810
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/ResMed_white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="47px" height="34px" viewBox="0 0 47 34" version="1.1"><title>ResMed_default</title><g id="ResMed_default" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="logo-resmed-white" fill="#FFFFFF" fill-rule="nonzero"><ellipse id="Oval" transform="translate(44.792733, 13.730333) rotate(-2.740000) translate(-44.792733, -13.730333) " cx="44.7927333" cy="13.7303333" rx="1.53226667" ry="1.53113333"></ellipse><path d="M43.6939667,16.4599667 C43.6849259,15.9574393 43.4031345,15.4996479 42.9585458,15.2652202 C42.5139571,15.0307924 41.9770224,15.0568765 41.5572504,15.3332946 C41.1374784,15.6097128 40.9013879,16.0926627 40.9411,16.5937 C40.9999668,17.3364072 41.6382288,17.8979932 42.3823876,17.8618422 C43.1265464,17.8256913 43.7073681,17.2048825 43.6939667,16.4599667 Z M40.8045333,18.5254667 C40.783276,18.0829099 40.5275323,17.6853111 40.1336382,17.4824421

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Templates-2[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 2880 x 1646, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	325047
Entropy (8bit):	7.948426875723042
Encrypted:	false
SSDEEP:	6144:fIkNFL+XExpVZIPyTgDgQBtxoOA9QzmyJoAlbFM83p4FIy7db/l6S47:fvL7pVaPyTgDg+t+OAGzmyJo6FZ4FIy0
MD5:	427BF54865C7DF8F8DC2C1E2CCDD223A
SHA1:	DF491DBDC713431A5EE2A343097E04FF7AE2BC97
SHA-256:	300E57E2DD3DC75C38A4094D5DEC771C13CA462C39F17F51F403F989F87BFDAD
SHA-512:	F0021F3C3EE0BA7464DDC016753E0D584F4353EA36EF144ECDCA9F8EE4DE076E44A1BE33FBCF23FCDCD98D7E0F31D96FBA2617D322D2390E7E846257404AC56E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/Templates-2.png
Preview:	.PNG........IHDR...@...n.......W.....PLTEGpL...................................................k.Iu.U.....Y.<Q.7j.IAq0...l.J-6B......w.............Z.............................................,5A............................................................+3?..........................................].................................*2=.........,4@...................................~.Y.......U..[........W...'/:....................Z)1<(0;.......`...x.X...\|.[...&.8...............%9.i.Hk.I6u.i.G....c6s.......f................i....s...........(1<[cn...........................[By....KNM..s.S.......y..u..noqo.........}.~.......................:S<..........h....nu~..........@..M.....:q............q......N.....+H...Z.........~...........h.Se........V.....tWr....w...y.....tRNS............ ..&#/..>.~b..]..... .IDATx...An.8.....2` ....E...\...qj..,..ERy/'....................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\allIntegrations[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	42251
Entropy (8bit):	5.4067947439658575
Encrypted:	false
SSDEEP:	384:/Z7sI0Sdl8/Sbq3ASHPa//kH0uffcLRzy4cT0KbjVM+VNlWDd8I6iAJGe+oFLUoX:x7sSdlE4QC/vV3kjVM+VNlqL6iAJvXpR
MD5:	63DBDBDAEDF29D15DEB36783D19018D1
SHA1:	10452C8BDBF24B03E54F6A64190413C649F8F619
SHA-256:	E58881F60AB1F6969C4E4FA3D6FA5AF80C5647B39EA747E6ED1F7168EB272B22
SHA-512:	E10EA5229EC15E94B69A40F96C0ACB182B6ABC228585E2A6229D873CF8DDA0FB218BE2F9A2BDFEBCE48F11402C189A9B2081F0561A2E6057959F2F24A843F288
Malicious:	false
Reputation:	low
IE Cache URL:	https://fast.wistia.com/assets/external/allIntegrations.js
Preview:	/****/ (function() { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 119:./*/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {.."use strict";.__webpack_require__.r(__webpack_exports__);./ harmony export / __webpack_require__.d(__webpack_exports__, {./ harmony export / "getPlugin": function() { return / binding / getPlugin; },./ harmony export / "defaultGetHubspotUtk": function() { return / binding / defaultGetHubspotUtk; },./ harmony export / "registerPlugin": function() { return / binding / registerPlugin; }./ harmony export / });./ harmony import / var wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(5);./ harmony import / var utilities_stopgo__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(17);./ harmony import / var utilities_stopgo__WEBPACK_IMPORTED_MODULE_1___default = /#__PURE__/__webpack_require__.n(utilities_stopgo__WEBPACK_IMPORTED_MODULE_1__);./ harmony import */ var u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\background_Update[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 2882 x 992, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	328990
Entropy (8bit):	7.917571343873414
Encrypted:	false
SSDEEP:	6144:VTwJ6KRgxqZDBMcUO1FuCYeEiv6veHPgfI7kaDt1aauByw8RPVn/2:V0AYJUy9REiv62vgA7kaziqPVn+
MD5:	D619250A3DA4A7561EE8CB84D6C6CF28
SHA1:	976F06D3A476E7436EF2A495EEAD7769BFE441E9
SHA-256:	EB5AD985D7FC11DD485DF7AE59A59F9A8B17C244B70924B43A996BDF7E990966
SHA-512:	12C2AF1D8E5F27D9D5489F33A1D16455915D5C7B5F69EFC766E3EEBD9068C66FDB8B2BD4D5D6C0F451899F1DE5B80AC6CA4224050FD9D6D7FF8B02AE262CAADC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/background_Update.png
Preview:	.PNG........IHDR...B..........I-....aiCCPkCGColorSpaceDisplayP3..(.c``RI,(.aa``..+).rwR...R`.......b.........>@%.0..\|...../..:%5.I.^..b....D.0......d ...S...J...S.l........).:...b.C..@.$...XMH.3.}..VH.H.......IB.OGbC...n....J..c..%...V..h........G`(.x.%..(....30.....s 8,... ..30......n...~...@.\;.b........'v.$.%.....)-....r...H....@=..i.F`yF.'...{...Vc``....w........w1P.....y..!e.5......8eXIfMM........i...........................B..................n...@.IDATx....v.J....+......\).z..M..MP.......B.Z...m.R......<.. @....;..N..n.w.........;..x{}......Q:..E*c0?.GF....s....._.....H.. @....... @.......\|D...3i.y.G{l..\!.....ws._#x...=qZ.u.^#O..P.... @.......8.....~./u.. @....... @....... @....... @....... @....... ...B..GP.... @......d.jL..$@....... @....... @....... @.....j...9y.. @....... @....... @....... P...p9..i...v...z.@..X......,......f~$.....c...y:..].].X.... @.......(....Q........L L....].>.z.v.9Z..I...hA..h\|.c\|7$v.....}'...._o...\.. @....... @....k.....n{.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bertelsmann-green[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 195 x 22, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3346
Entropy (8bit):	7.8399090151596456
Encrypted:	false
SSDEEP:	48:eQJHkXMbBTYTF6i/GB0OkuCYhWENq3MGpytYlrsYTKwBQY7fMdDLe+kX:xpdmsioJCYAwq3MGAulzmDY708+4
MD5:	E957FA8EC927820DAD48FFCFD75B7138
SHA1:	3E72D12BCEA8B07CC152E94B5F6A89F1557F27E5
SHA-256:	7D7644EA45332B2895C7C182A3F86A7AF81E336E574926B5748B1C9923150F7D
SHA-512:	5685E2E5437FA2FC80CB2A85FE1554249A09254D39FF4CBD73F7B7BE6190BBFAF9A12266229501C47C725B51066E9678D4CF3AB2FFBFC7ACCFABD639945818CC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/bertelsmann-green.png
Preview:	.PNG........IHDR.............JR......PLTEGpLS.C(.30.?7.-$.;-.;K.E.-....[.?f.L$.D^.Je.L5.F .D!.D..C/.F7.F..D'.=Y.K=.F5.G1.F=.H`.K..DS.Hd.K8.G1.E`.KI.ES.A!.E/.B..C..DR.G/.FV.G#.C!.@..Ch.Mj.Lj.L8.Fp.MJ.G7.GL.HR.J'.D\.Kn.LH.F..A<.F&.E$.DM.FL.IB.G1.F[.K..D$.@=.G.E!.B .E..DI.GZ.Hc.L\.KD.HC.H..D..CP.I1.FD.H8.Fg.JN.IX.J8.GY.JY.JJ.HX.Jk.LJ.G<.G.EG.I\.Jm.L..Dn.M..C .E:.G..CL.IR.HU.JK.IQ.Id.J!.EZ.I9.G%.DX.J .B.E..DA.G..C..B..CG.H9.FP.IL.IX.Ji.J9.Di.K..FX.J,.EI.H+.EF.HQ.Ii.L'.EG.HD.G".EI.HL.HS.HA.Gh.K`.K&.ET.Jb.K_.L+.Ea.LL.IM.In.L.Ek.L.FY.J!.BJ.I..CD.H@.HB.Gr.M\.JH.HN.IP.IL.I@.G .D..Cj.LK.I;.G7.GU.J<.HF.G.FZ.J'.E!.D[.JB.H'.D&.Dm.L..B..D4.Eh.K1.Ge.LV.IS.Jh.KQ.I+.E.Eb.Kj.L].K>.Gg.LH.H;.Hl.L..BQ.Ih.Kh.K/.D..E:.Gk.L!.C.D_.J..E_.KK.Ie.L .E`.L'.E..Do.M..DP.J7.G.Fp.M>.H0.Fi.LX.JG.ID.HR.Jj.MM.IS.J1.F[.K^.K9.G.\|.%....tRNS............Rx[.\|u.....X.I...+........../u./.Gq..u.I.V...5V6...........5..>.......uT.Hq..Fn....#...K...`.\|..`...>.8.B.&.k........4;...q~h.....o.f.O'u......S.....ZC.....w.l...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bkgd_gradient[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 3 x 769
Category:	downloaded
Size (bytes):	2117
Entropy (8bit):	7.58586447960226
Encrypted:	false
SSDEEP:	48:I3AeZmlSCtsvgXOxH/WtW/BP75Kwx1hJFwXDEZ:IweZmVkVB/WtW/BA+ZKXa
MD5:	25881008B61FF3226B25C366D159BE75
SHA1:	10990EAB1F5C4E427EFBC418F2390C4C74E5D328
SHA-256:	8AF5312C4C1785A08289EE7062420531DDB76E9D54CDABBB7376494010C29F20
SHA-512:	F4EB1B3CD34485B80C9E82CBC00C0BCE704777EF6BFF311A13B41D829A187C75B6832ADBAF9C144720ACC2A7855D26D8BD732F08642899A821023A5787534714
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.staticimgfarm.com/temp/mndspk/bkgd_gradient.gif
Preview:	GIF89a.......28A29A38Abkx39Ackxblx39Bajv@GQ5;D7=F4:C\eqMU`QYdbkw;BK`iu<BLAHRW_k9@IBISV^j6<E[coKR]RZeS[f]frJQ\YbnELVaivX`lT\hOWbFMW29BNVaHOZ8>GDKTXam[dp:AJ`huajw>ENJR\<CM=DNCJT:@I>EO]fs8?HIP[_ht7>GU]i3:CPWcbjwLS^_gtFMXGOY5<E6=E]eqKS]Zcp`iv?FO8>H^gs4:BPXcT[g^fs=DMGNXW`kV_j\dp:@JBJSDKVclxMV`QXcHPZLT_?FPU]hZboZcoRYe;AJ6=FS[gCJUMT_KS^EMW4;C_hu3:BU\h5;EELW]gsakwXal\er`ht4;DW_j_gsU^i7=GBJTCKUIPZ?EO;BLYamZbn;AK7>FR[f>DN@GP@HQYbmGNY^gt`itaiuZcn\dqQZeW`l<CL=CLJQ[Zam?GPIQ[38B6<DHOY5:C5;C5<DV^i<BKGOZT\gbjxYan9?H6;E:AK\epRZfSZfIQ\@FP8?IEMX9?INUaHP[9@HFNXaiwLT^MT^QXd^htOVa<DMNWbDLUEMV?GQBHS8=GT]i@HR?EPOVbV]jX`mU^jYal3:A^erakxT]hU\iOWa[eq;@JOWcJR]KR\5<F=CM<BMPXb9AI`jv4:D9@J5:D6<FGOXOXb7<F^hsbkv>DOBIRZbmAIRAGR\fr]gr[boCIT_itCKTU]j39C28B[doDLV[epQYc7?HBHR49B`hvV_k^frMU_LU_PXdAHSNV`>FPLR]!.......,...............(......"<X....Z."..P.....R.X....h1h.b..3ndH...Cr..."..5!$....O .....a(...` ..d.R..dA].@..%.Dh....%J..P.H.#...J`#....$..:6u..!d...}m..H.7!xl)R..O.(.#..9..882....dG<...N.:.4X.@...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\blank[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	1214
Entropy (8bit):	6.925737607348584
Encrypted:	false
SSDEEP:	24:xal1hiyWwjx82lY2T3oVkK53yJ3VmA2LOsj8GY8a9AH:CuNn2kwJ3AAeOsYL8aAH
MD5:	FBDC4ED9A1E2EE4917A265306927BCF1
SHA1:	6D177725D8230DF0457E72004080F712E26FE624
SHA-256:	A78759EA185FD0FA42CA9BE1FC5BCA4D3167A2836DC6C85E479A19DBF57FE2C2
SHA-512:	E529A409048C78837F0D6A6EB77450070EEECC7915D81C45970915F3BBE92BFDAF9056580BB84C14B21C499D04A73945EECD0AD33C61942C5D28DAF06CC7C40D
Malicious:	false
Reputation:	low
IE Cache URL:	https://fast.wistia.com/assets/images/blank.gif
Preview:	GIF89ad.d..........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:B06C130C478A11E6B3E8D67655718D4D" xmpMM:DocumentID="xmp.did:B06C130D478A11E6B3E8D67655718D4D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:492A1D7F478811E6B3E8D67655718D4D" stRef:documentID="xmp.did:492A1D80478811E6B3E8D67655718D4D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONML

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bmw_0717[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 255 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3143
Entropy (8bit):	7.917808626430778
Encrypted:	false
SSDEEP:	48:zBj6dI4WLn1RcU1pgav/be2+MYIuoOqLQIi2JN8AHTljxDe51MnJBmzq:zJ6m1aP2+MtdJMwHHRjw5KJBOq
MD5:	FDF77D502E205C4252CFF4559DB171C2
SHA1:	89B81BC1D965E375F7252FF931257CD41B904DE5
SHA-256:	1CE91E421E798C58E58A6EA5BB57D46FE76DAAE2E75968F5D5D068179C85D900
SHA-512:	76DAB482797D4D5576BC0DAA53A981C49733F30CD43EE50E92CF570892F42029B44CE17B28271E985EA3C414E447F7C0625C822A357D498E9858C1AB1550DB72
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/download/myway/bmw_0717.png
Preview:	.PNG........IHDR.......(.....13,]....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..{TUU.......~(i).%"...@...&:1e+q.YN..L5.8.V..5kRgl.)..i.&sR..z($N."D..(........}.p9<D.....Z?.9{....w.......utt.a...{..0.-._....E..)....RX.......BXs.......>?C..].........3.,..$..v...... .la.>.].....a.._.[&,.N:.F4\|...........0].Tzd...y...2...B.z_.\.L.._.l.C.^..tG.w......@r2.&%a...X.q#..x..?..f...~..D..m...Zt.U[>@...hol...V..+.D...(.>...0<...'..........xJX....y......@..z=.1....j.....7.s. 7.+.>..\|.j..=..Ov...0UV..[p>.!Tn...6J....h..^-[%..MH@....:l..\.c~.....;L.qr./?."Z/^.Y..a.....#..S..K.x.".\].....ZY60(Hu.3X..ss....I..NA..Q.f..o...........tzBX..Y=../,.{~...8.;l..g..A<.l.G.BMa...p.....0........u.r........Tq...^~....'`.......y........\| .h..x....{.....qB...K..x.........ZY...._.....r..=.1N.....t........e.3...Z.'..N..,..4..A.px=.....}...F.j.f\..hP.-.Wb.............S..v..a..+._...P$...t........./...{t...n.s...._..vvp.w2.C.A... ....E.+..J.....p..T.f.vr..0}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\chosen.jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	29121
Entropy (8bit):	4.91438965646394
Encrypted:	false
SSDEEP:	768:+Otj9+umwo0XCITm9HNfhvwITdNWb0DvHrqgtV:+ORjgF9HNfh1TdNWb0DPugtV
MD5:	3E9F1DCB9CC75169765265133FB815A7
SHA1:	7678293E0A0DF6F57AEA34E07B7E0392EBBA2234
SHA-256:	73881513A7E7F8944A311BEA8E80E9FAD946E256AE74D62B5C8D469DC6DF0186
SHA-512:	ACC186178C20D51EF77A1B67C5706DE666D47CDF49509C1B936D4A3259CB643261EC190F99EA2F06E75D64210D25D7476183240A1F613C59CF992F6CB29922F2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/plugins/search-filter-pro/public/assets/js/chosen.jquery.min.js?ver=2.5.0
Preview:	/* Chosen v1.8.7 \| (c) 2011-2018 by Harvest \| MIT License, https://github.com/harvesthq/chosen/blob/master/LICENSE.md */..(function(){var t,e,s,i,n=function(t,e){return function(){return t.apply(e,arguments)}},r=function(t,e){function s(){this.constructor=t}for(var i in e)o.call(e,i)&&(t[i]=e[i]);return s.prototype=e.prototype,t.prototype=new s,t.__super__=e.prototype,t},o={}.hasOwnProperty;(i=function(){function t(){this.options_index=0,this.parsed=[]}return t.prototype.add_node=function(t){return"OPTGROUP"===t.nodeName.toUpperCase()?this.add_group(t):this.add_option(t)},t.prototype.add_group=function(t){var e,s,i,n,r,o;for(e=this.parsed.length,this.parsed.push({array_index:e,group:!0,label:t.label,title:t.title?t.title:void 0,children:0,disabled:t.disabled,classes:t.className}),o=[],s=0,i=(r=t.childNodes).length;s<i;s++)n=r[s],o.push(this.add_option(n,e,t.disabled));return o},t.prototype.add_option=function(t,e,s){if("OPTION"===t.nodeName.toUpperCase())return""!==t.text?(null!=e&&(th

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cookie-consent[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	106364
Entropy (8bit):	5.125132103942814
Encrypted:	false
SSDEEP:	768:uu8EK6P+EyaA6VpTxtBPvwFJr38CslGFc8rtgnWFg8Ae1HBIHZr19wAhtHr:N8kP+FaA6VpTXlYbUGWmFAes5rwAhtHr
MD5:	E7B8918A7D428BBF9C629356131981E8
SHA1:	6CBBA1645EA4872C61C80563EA850DFAF78D6711
SHA-256:	81B5BD434C0E99FC2F7BAA11DA610FA063AA8885D3C9535A076E6FCD6A6B638B
SHA-512:	811E5D824183AECFA1FC00B6575026A2FC15D92BD59D6929C378AAFD6DAE5E7895463F8ACD09BE723EAC6D07BD884257F721C7DEB5E974FCE18F78977FC08401
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/products/cookie-consent/
Preview:	<!DOCTYPE HTML>.<html lang="en-US">.<head>..<meta http-equiv="X-UA-Compatible" content="IE=edge">.<meta charset="utf-8" CONTENT="text/html; charset=UTF-8" />.<meta name="description" content="OneTrust">.<meta name="author" content="OneTrust">.<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1">.<meta name="theme-color" content="#6cc04a">.<meta property="og:image" content="https://www.onetrust.com/wp-content/themes/onetrust/screenshot.png" /> <link rel="pingback" href="https://www.onetrust.com/xmlrpc.php">.<link rel="alternate" type="application/rss+xml" title="OneTrust RSS2 Feed" href="https://www.onetrust.com/feed/" />..<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" type="text/javascript" charset="UTF-8" data-domain-script="fff8df06-1dd2-491b-88f6-01cae248cd17"></script>.<script type="text/javascript">..function OptanonWrapper() { ....} ..</script> .<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].pus

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\cropped-onetrust-theme-logo-1-150x150[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, frames 3
Category:	downloaded
Size (bytes):	2478
Entropy (8bit):	7.586212007752079
Encrypted:	false
SSDEEP:	48:e4kkNAa+32zk5SsFmBVGnO55l1AY8TN+h74ih1LWwemIzI4DdF:1y/YJYmBVuO9ODN+b1L+zPF
MD5:	C1B4E6DF75D3A25A668C077428F85258
SHA1:	58DD27E9AEE6AA7F4173E32CB8A4524F7DCD2C78
SHA-256:	B95A52355ED400894642757BD60B8202A402DDD48C74A2B4F59343B009BEA7BD
SHA-512:	C6B598EFE4DD714FD841EC26516A37A8D8DFE524BDF31A4FC92526876619E20772299B4DD9FE6A23FBC22EF179AA6FEFCD700941AB1BE93EC54EFA5080904C1B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2017/01/cropped-onetrust-theme-logo-1-150x150.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"........................................N.............................."2BR..!5brs.....#6ASVau......Tcq...$1DQUd.....................................2........................."12..!#$3Ra...ABQq................?..@....................................................f...V.T...D..r\...SM'2.}.*Z.I...{)53...5`.....i....m.7M...ri.Tv,j.a.6.u.8..jBi.SS..k...>.E...mhVL.1d..kq....c..z..W).c..b\|&.Xi.x..U...O\|.W.....c..H..>\..i9U$k.f2...c0.Iz2..I....0R..cv.w.x.VnW\|v..3>Q5_.....6..!+B6k.:..!..t.&a....&\|.k...b..M}....'.?4>..W..3....3.._d..;.f\|.k...2O.~h9.W..Lf;.(...H......e..T..yr...9.2....N...q.2....`d.M`...`.K..v.-g.!y)O....>..F.j..E?T.1..R.........b'..u....\|....T..7...[`..p.V...&.m.5>usz%.....9..\|=y...D8.\|G..b..!...qU5..s...H.V.1....#...v.J}.>.....<~.!......&Z...v.(..1po..0..2..ti..V<r.$..6.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\en[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	42687
Entropy (8bit):	4.891600041943341
Encrypted:	false
SSDEEP:	768:mqRil6D+6gc1g1YdGzjuuVnli7U0eO3dxUUq:Fi6CI57Rd8
MD5:	4A9988A3E6A2B2F139DEBAA2D7962F94
SHA1:	3BF8E1FCAE0F25A596D7B03DC67037490F65B8FA
SHA-256:	CC18D006528B87D949BFD807E94A5E8547DC5F905B7F386D45A13D23148B3E46
SHA-512:	622F77E52ECA4A1DA5659A065F83E948FA151EDBB4A1AF7A40C5611649E9BA9925F6182DBC846D9B4C284911AB6B3BE8AE6FF7C2785DACF4D7B9B7C23180D104
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cookielaw.org/consent/9f63be63-0490-4123-bb2c-9ab8201ff738/380dc3c0-b178-401e-bd9c-7343159d1687/en.json
Preview:	{"DomainData":{"cctId":"9f63be63-0490-4123-bb2c-9ab8201ff738","MainText":"Privacy Preference Centre","MainInfoText":"We process user's data to deliver content or advertisements and measure the delivery of such content or advertisements, extract insights and generate reports to understand service usage; and/or accessing or storing information on devices for that purpose. Below you may read further about the purposes for which we process data, exercise your preferences for processing, and/or see our partners.","AboutText":"Privacy Policy","AboutCookiesText":"Manage Privacy","ConfirmText":"Allow All","AllowAllText":"Save Settings","CookiesUsedText":"Cookies used","AboutLink":"https://eula.mindspark.com/privacypolicy/","HideToolbarCookieList":true,"ActiveText":"Active","AlwaysActiveText":"Active","AlertNoticeText":"We use cookies for the best experience on our website including to personalise content, ads and to analyse traffic. We share information about your use of our website with our a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\entypo-3abe7740fe6a52bc50b230991f869092[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), entypo family
Category:	downloaded
Size (bytes):	71396
Entropy (8bit):	6.5055808970398665
Encrypted:	false
SSDEEP:	1536:0GuhyaCWFIO+yEKcI2B+jEnxWE3kZYrra0z4ZS:YyeIlI2BMEnd4Q
MD5:	3ABE7740FE6A52BC50B230991F869092
SHA1:	ABADED6BFAF5029EA5E58FADFE7B9DE6E61555D5
SHA-256:	A3EE0212AAFB6233AA43E56B3A9D96B23C024ECAC9626639CDC55A88FA5C0EB2
SHA-512:	19D57028800D4EEB79D42D5D48C8B223706C02AFB61E0C933243BB03E39821ED15F1BE445F9FCBA5C09F263ECD63387B5A2CABF197E5E6FD0DE10D026C0B1F71
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/entypo-3abe7740fe6a52bc50b230991f869092.eot?
Preview:	....<.............................LP........................@;......................e.n.t.y.p.o.....M.e.d.i.u.m... .V.e.r.s.i.o.n. .0.0.1...0.0.0. .....e.n.t.y.p.o................pFFTMb.r.........OS/27.t........Vcmap......p....cvt .......0....fpgm0......L....gasp.......(....glyfc .....(...head...W.......6hhea...........$hmtx...........\|loca.."f.......@maxp...e....... name...O.......@post!E.....0....prep..........X.................R`......R`....^.......................1..............................PfEd.@.+...R.j.Z.R.......................,.......................,...........x.........Z.+.-!9!.!.!.!.".".#.#(#+#.#.#.#.%.%.%.%.%.%.%.&.&.&.&0&=&a&e&k&.&.&.&.&.&.'.'.'.'.'N'S'^'.'.'.'.+................. .$.).1.8.:.>.B.D.F.O.k.q.x...........................".%.(..-.0.3.6.:.<.?.B.E.H.K.N.Q.T.W.........+.-!9!.!.!.!.".".#.#(#+#.#.#.#.%.%.%.%.%.%.%.&.&.&.&0&=&a&e&j&.&.&.&.&.&.'.'.'.'.'N'S'^'.'.'.'.+................. .".'.0.6.:.<.@.D.F.L.Q.q.v...........................!.$.'..-.0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.061875156365562
Encrypted:	false
SSDEEP:	24:XjJs2qRqxDCKVkLkJfMB7QqwlCXoFvGmxxy5GBHMQp6:XjJs2qMxuKVkcfMB7QqpoF+mxxiKx6
MD5:	DBD75DB816BFB4CBF50FC64458A64E77
SHA1:	9E00F2EDD97DDE4E1D6BB71BCAE27D7B413E3536
SHA-256:	3459512FA123E1C50CCED32094F672C2A5024CDD904A57843EDA8DCB1B9F6C59
SHA-512:	9B8FD785C3B28846C2CBE68FCF574EE8F6AF0443995BDAD1BC8208E8327B16A5187A9BAFEAE7ACFDF14C9CAD23C7C5F7F4FD9D92ED817520D6C14BFB7B4AD478
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.askapplications.com/favicon.ico
Preview:	............ .h.......(....... ..... .............................................................................................."..."..."..."...".(.".*."..."..."..."......................."..."...!.N.".."..."..."..."...".."..".;."..."...!..........."..."..&..."..."...!... ...!...!..."..."..."..".1.!...".......".q.!..dp..\|....#..&8..3D...0...-...!... ...!.......!.Y.$..."..."... ..ET......_l..................bo..gt..%7..8H...&...!.Z.%..."..."...%................../@.......................+...!...".5."..."......IX..............KY......my............... ..."..."..".."..."...'..........y...y.......:K...............(..."..."...".#."..."......M[......nz..);......jv..............M[... ..."..."...".E."...!...)......cp......."... ..]j.......@.."4..."..."..."...!...".F."......IY..BR......."......;L....../@......."...!......"...#...".$."..$...%..."..."...!...1......6F... ...%.u}..............."...#...!.0.!.y.".."..."..."...&...%..!.UGU....0....................."...#..."..."...".%."

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	93453
Entropy (8bit):	5.391728049595183
Encrypted:	false
SSDEEP:	1536:5M+OWt6w6aic9MeoJ2my8LuThe7KFv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUi8:5OQRj1SVBYDGl
MD5:	E336B67DA30F271AF31BCEBC5C6CAA78
SHA1:	102C33871302A44D2850D1CA3F311BCAACBABA72
SHA-256:	86CC35989BE655E6CBE68540CF835DEC34388862A948FBD05850100797C32319
SHA-512:	52ED8FC88D82672111D3B25ECA4B5B970638F10A8187293D246F42F8616342033417A6D6614A609CE256A29D6C611C761C772AE2B66497D08E37CF2A71F1692A
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fr[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	6.326913063658604
Encrypted:	false
SSDEEP:	6:6v/lhPFMkO54UcfULQ1LslDHFqw3BpeXo12qgCE1ldKVp:6v/7tG828SHFR3BwXNCB
MD5:	A6B419F8502FA8FACA4C693B46989E2D
SHA1:	FB3862465A32FACD5B5E158B0544B567A01D343E
SHA-256:	9C86C0C02CCB446B1A50D0282F4D9715E45670BE443C4C3F666C263601E36274
SHA-512:	EAF4F334519BABDDDCC868DBE9F813595863A8467072EB0D4FC7B9B26E2A201BEC6CCA72CDD63630544158466B8628781A5A72D4B8578E36D2F9EF22BA2389B1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/08/fr.png
Preview:	.PNG........IHDR..............pz....+tEXtCreation Time.wo 28 dec 2005 19:15:55 +0100j.......tIME......#.)T.....pHYs...........~.....gAMA......a....dIDATx..1.. .E?...Uz....]Pil..e..a.^.>..p.E{Gd...4.z..~.OD....t..\|..m~..g-.=..@...g..k'.oE..c\km]..=)...iG....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\hc_enduser-1c3c7f65068eb2969f199220010b50e4[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	1323474
Entropy (8bit):	5.700926898547906
Encrypted:	false
SSDEEP:	24576:7dN5soHiaQlTE3bgqK3Gp3XqITwgNl/8IgtB1vzFLVddSfWWiIDmtvOaUiNv/XU+:7dN5TUTE3bgqK3Gp3XqITwgNl/8IgtBF
MD5:	50FA288C51882A2C2DE6FF271050C154
SHA1:	D31B411A576E81A8FB204DF4F2B96804AC666F93
SHA-256:	E6038B96D36B6D54EA2E655F07893CA26C0F5A151D42559D804F9625E15F611E
SHA-512:	298F82D42CCD5B9086B8675BFA269B6D2E12DD902D09373FAEF301411CF6F4B07C86781C2070213C1193BE2CB2EFA7B8D5A45F3F06CA86E1C801D0C0471B8C41
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/hc_enduser-1c3c7f65068eb2969f199220010b50e4.js
Preview:	!function(e){function t(t){for(var n,a,i=t[0],o=t[1],s=0,c=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(r,a)&&r[a]&&c.push(r[a][0]),r[a]=0;for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(e[n]=o[n]);for(u&&u(t);c.length;)c.shift()()}var n={},r={37:0};function a(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,a),r.l=!0,r.exports}a.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var i=new Promise((function(t,a){n=r[e]=[t,a]}));t.push(n[2]=i);var o,s=document.createElement("script");s.charset="utf-8",s.timeout=120,a.nc&&s.setAttribute("nonce",a.nc),s.src=function(e){return a.p+""+({0:"AnswerBotModal~ApproveCommentModal~ApprovePostModal~ChangePasswordModal~CommentActions~EditCommentMo~4c842df1",2:"vendors~CommentActions~PostActions~actions~subscribe",3:"BadgeAssignmentsModal~ChangePasswordModal~EditProfileModal",4:"EditPostModal~EscalationModal~MovePostModal",5:"vendors~EditCommentModal~EditPostModa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	5859
Entropy (8bit):	5.313493409083936
Encrypted:	false
SSDEEP:	96:4zOoL+5rPfk6/QE341bEXeZ4r32KyEWALOtwFzCP8Ht3WyL3bdkMALOtwXD4wCUb:WU3kMCZ4rG0WALdFz48UyzeMALd0wB3r
MD5:	182E416DA6B7B917469F876BCDBFEF77
SHA1:	5AB73852FF74A07B9924E0475A2DEE95899FC21E
SHA-256:	EFB5EF4EE45D50891D41DE47C9963A8B3529DD141088E4FC574495F33E475375
SHA-512:	3ACE4388AC34E15D110278DD5AC86C3B6ABBF3FBB8FCE4D05DC1F6D9DEE99E3C39EE56CCD7F50505E0E9FDC9255682CBECB076C86C08A790A2C28D4C1B7FAC51
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html>....<head>.. <meta name="robots" content="noindex, nofollow" />.. <script type="text/javascript">.. !function(t){var n={};function e(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\index_tos[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	4.889155433043944
Encrypted:	false
SSDEEP:	48:U1ZtFGX5Xsd87sqsfsCOZkGaA5tHS5aEv5252QzkDBLuumu61oMY9kOsvksRmcPT:UlFcn1NtAaERc24fv1dKg7AgrFW7gt
MD5:	8FBDE4E8849A280EC3E60A6570800F76
SHA1:	F8A228C324412BD6E48DCBEC712B6EABFEF6E362
SHA-256:	690EBA773ECDB9064284DBBFA4AC8C7B6D4672E7894FC0907F1606A945D3C3D1
SHA-512:	8141D437523B7001B894B68B9BA6AEB5DFC2D99A4205E9CB311611230D3D1FF3967FB3EA886A99D1755CC07C61C9A12AC6DFDC7FEDDA5B14D720332F5F4C88D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.askapplications.com/tos/index_tos.css
Preview:	body {. margin: 24px 0px;. padding: 0px;. text-align: left;. background-color: #323943;. color: #000;. background-image: url(//ak.staticimgfarm.com/temp/mndspk/bkgd_gradient.gif);. background-position: top;. background-repeat: repeat-x;.}..section#otnotice-section-26ebf1e1-7a42-4bf4-8c97-04378fe973d1 h2.otnotice-section-header:nth-of-type(1), section#otnotice-section-10abc1eb-99c8-4aba-a246-6356edeb2044 h2.otnotice-section-header:nth-of-type(1) {. font-size: 17px !important;. text-transform: none !important;. margin-top: -13px;. margin-bottom: 40px;.}...otnotice-content * {. font-family: Arial, Helvetica, sans-serif !important;. font-size: 11px !important;.}...Content, .Content_FF {. width: 852px;. margin: 0px auto;. background-image: url(//ak.staticimgfarm.com/temp/mndspk/rounded_box_bg.gif);. background-repeat: repeat-y;..}...Content2, .Content2_FF {. width: 852px;. margin: 0px auto;. background-image: url(//ak.staticimgf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery-1.8.3.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/jquery-1.8.3.min.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery-3.5.1.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	89475
Entropy (8bit):	5.289540431614111
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl
MD5:	12B69D0AE6C6F0C42942AE6DA2896E84
SHA1:	D2CC8D43CE1C854B1172E42B1209502AD563DB83
SHA-256:	6150A35C0F486C46CADF0E230E2AA159C7C23ECFBB5611B64EE3F25FCBFF341F
SHA-512:	A55F55D56899AB440EF0CAE17B28D5CC8F5B9766D1E9BC1A8AC6B89376924B476C1AB0C325497EB5D44AF41F4EBF8EEA236D87A36902244B8A3ECA54994B8711
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/js/jquery-3.5.1.min.js?t=1617900761&ver=3.5.1
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\languageDetect[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	5630
Entropy (8bit):	5.496568070628921
Encrypted:	false
SSDEEP:	96:qS99b8qW4ox34oOS4o5i4otM4ouz4ojE4oGm84o5s4oCfB4ogAK4o944od4fif/m:qy9IPxG4d64Hkp8L
MD5:	FD10CF28572AAC0C4B1107E54773BCB7
SHA1:	6208B446864C9078FD014CBD434C1D37F432BB90
SHA-256:	7BCD0A6CD514E2EED2D78F910F1248AB8CD27DEE467F3FEDF1B8EE04854288A2
SHA-512:	E070E012FCC6F29F33A1E3E31F1BC6A6355211CF0724E3F22FAB08F4221B4E7DC4C0512D2AB4C69F4021397A1D419BFE8A8B4B50628C4046EBCE1410E74401AD
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/eula/languageDetect.js
Preview:	./..var lang = navigator.language \|\| navigator.userLanguage;..lang = lang.toLowerCase();....try {...if(lang == "pt") {....document.location = "index_pt.html";...} else if(lang.indexOf('es-') != -1 \|\| lang.indexOf('es') != -1) {....document.location = "index_es.html";...}..}catch(e){}..../../.. look into: http://stackoverflow.com/questions/1043339/javascript-for-detecting-browser-language-preference..*/....function setUpLanguageBox(){.....var cobrandParam = getParameterByName('cobrand');...//alert("cobrandParam ="+cobrandParam ).....var langBoxStr =.'<form id="menuForm" name="menuForm" >'+........'<select class="langugebox" name="languageMenu" id="languageMenu" onchange="selectLanguage()" >'+.........'<option >Select language...</option>'+......'<option value="//eula.mindspark.com/eula/index.html?cobrand='+cobrandParam+'">English</option>'+....'<option value="//eula.mindspark.com/eula/fr/index.html?cobrand='+cobrandParam+'">Fran\u00E7ais</option> '+....'<option value="//eula.minds

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\languageDetect[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4430
Entropy (8bit):	5.4699825437233995
Encrypted:	false
SSDEEP:	96:b+gj8OY4o4h4oZ04ogI4o0W4o5t4oeO4oR/4ogS4oCqT4ogng4okm4oQ50gif1xd:qgACV0/k6KC/Wg
MD5:	8A3A37CB387C9A9F9105012EA60DA232
SHA1:	82BD9229C536B87668E855B70B2206D756567E1F
SHA-256:	A6F34B6234DE3486632721D76044F06909061CA79927E57E5C8E814F8CE770A0
SHA-512:	F9E6A0252E10689F6CD76C62FDC372971E8FDC83206E21FFFADDF3345847A1FF69BE016F75550AD928A953DC4A8B208B15F29B1BFF9B2AE5BF447F9CB39CE1DB
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/cookies/languageDetect.js
Preview:	function setUpLanguageBox(){...var cobrandParam = getParameterByName('cobrand');...var langBoxStr =.'<form id="menuForm" name="menuForm" >'+...'<select class="langugebox" name="languageMenu" id="languageMenu" onchange="selectLanguage()" >'+...'<option >Select language...</option>'+....'<option value="//eula.mindspark.com/cookies/index.html?cobrand='+cobrandParam+'">English</option>'+...'<option value="//eula.mindspark.com/cookies/fr/index.html?cobrand='+cobrandParam+'">Fran\u00E7ais</option> '+...'<option value="//eula.mindspark.com/cookies/de/index.html?cobrand='+cobrandParam+'">Deutsch</option>'+...'<option value="//eula.mindspark.com/cookies/sp/index.html?cobrand='+cobrandParam+'">Espa\u00F1ol</option>'+...'<option value="//eula.mindspark.com/cookies/it/index.html?cobrand='+cobrandParam+'">Italiano</option> '+...'<option value="//eula.mindspark.com/cookies/pt/index.html?cobrand='+cobrandParam+'">Portugu\u00EAs</option>'+...'<option value="//eula.mindspark.com/cookies/cn/index.html?c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\nl[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	282
Entropy (8bit):	6.529854880959816
Encrypted:	false
SSDEEP:	6:6v/lhPFMktZuUjQq6w458/QZrcF0z8F4m5BP5al9p:6v/7t5ZV46MC0z8VBPAT
MD5:	94BDC9BC61AF4DE68EE3BCD24FB8962B
SHA1:	E41E8463A412B26D841F39773CAFC15DD7222C4B
SHA-256:	42495D821CCD0890CF42F1B7FF365069DFBBF2DB6A7CD2F58CBFF0724153C1A0
SHA-512:	25AECBA93980C19E499B52615302E8357293A527CD1DF14E36FD78CA80E27F6CF29E9E1AED97B818E0C1151C5F44CB9647A5167A258D819B9DE1040A9F92E385
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/08/nl.png
Preview:	.PNG........IHDR..............pz....+tEXtCreation Time.za 31 dec 2005 16:17:53 +0100.\|.4....tIME......"4.@.....pHYs...........~.....gAMA......a....rIDATx..... ...1\|..x/.$y...M..kk.....c....@.&J....-_S..d.Ea...j.;W.0..zS.....<....=h.>j.6..E.Hk.....L..Ci>.p.N.N....R....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\otSDKStub[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	16911
Entropy (8bit):	5.39685705534693
Encrypted:	false
SSDEEP:	192:/Qp/7PwSgaXIlnci9zwEDgzFHSttsK2Oqc+OwYYnpzHwtBVR7iIHRnLK:oRr14DLEzFHSkUwhFwtHRuIHlLK
MD5:	28C79E333BE900FD81199F61ACDC15CD
SHA1:	9B0DB312F31D803109F19E4744390034812ABA36
SHA-256:	2E409AF4E2CD960258EBCE74A7AF470632E2FA44A18CBC2E49DA7F098A3C572C
SHA-512:	59282D4C5C8C39765B32B567BBCE208B7623557E130F87A9BA47C819BDA955753EB708CC9CA25431062C144A584BA318BE25FDE234B6AA81DBABAA2B064EEA5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(e){"use strict";var t,o,n,i,a,r,s,l,c,p,u,d,m,h,f,g,b,A,C,v,y,I,S,w,T,L,R,B,D,G,E,P,_,U,k,O,F,V,x,N,H,M,j,K,z,q=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(o=t=t\|\|{})[o.Unknown=0]="Unknown",o[o.BannerCloseButton=1]="BannerCloseButton",o[o.ConfirmChoiceBu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ot_logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 496 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13077
Entropy (8bit):	7.917259483236238
Encrypted:	false
SSDEEP:	384:saDuLzB7lqCUfQIMrWiHUInHuAuYceTCP5Zqx0dY6n8AlS/Y:saq5snXIHrZTC/qx0d5TE/Y
MD5:	F16C8EFBBF422ED7135FCD73ADC4DF82
SHA1:	79D9F3C7D3F43EEFC059F0A18642A09C195EB135
SHA-256:	61E7A7943F7444E87B2AF6295044B34292A537A23DD3D9436886E3A2CCF620CA
SHA-512:	866B2B1E1AA76574755F7A97A706CE18F6151ECCBDCC9E432CE407666E251821B347C271C58B2EF06804847AEDDA93DCA8FAD95C7E7BC91E351430B13321CE0A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cookielaw.org/logos/static/ot_logo.png
Preview:	.PNG........IHDR...................2.IDATx..]...U..#(....vQD@..=......HS....n..7J.....k....H..3w7.... ..#=@....$;s.3.....o~.dw.9......)...u}r..m.3...l...^...rS-...~=Mu.............u.o.......Q6.w....vd.A../..2..v..j....;...e......z..k........p.2.\|i.^}7w.O\@D.V.]...L..71.}[..%...rS.kyx..i.'..6O.........".....I..o.KY.`..y....!".'.'"".IKJ.f.zh...P....^..Fy..i.........l.....g1......~o.u........8.8...^].[W.m.%.......F;GD.N.ND4:.n..==.2.]....z..}?.$..8.8..!.....V(..o..'\|.v.......()....nC.......^lrs....=.)J...OM.V.G,GD.N.ND.....^r..T...z..~...y.Ey.<.mAlGD.N.ND..'.....A..^^.}...N83...zv..V.M.G/m9e...d}.G..z......k.i......q.}...[6...zmYW^I.]..m..K.GD.N.ND...i.P..f(&.&..71..@z......J?`.RO.pa..R.8QZ....A...~5...vH..E.F.1.rIa.. .7a....}VOs.fi...].6..(w.\|.[..}?@lH.....O..({...%e......x.b&.]3ia..8V....T..K<.;k..+.........g..[f.....'.%.2...s=...Q.G/........(,u.....p$...y j..IC.o.H.....).0...D..DDDAd..W_...3..KD..]h.R.SQS.m....D..DDD.r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pintra-redirect[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	65608
Entropy (8bit):	5.290173705818126
Encrypted:	false
SSDEEP:	768:6iIz6Y7z0pnriNImL0m5dvW69Wg57P9AfoOWh3Vjdt:6NzD7fEmS6919goOWhljdt
MD5:	2EE7DB501C7E04A1E2AB58FA2921DF2E
SHA1:	F9CCE47349404234E89DF90FB02541CF256B9081
SHA-256:	E5ACDC89C5C349715E6C856A903772D0A11E82C3A31362CF2BF5B640ACFD77E6
SHA-512:	579C0787A656B3280168B1F6D08CD2895C02E170D2D1933C3929D27C1670D7A2D3205455187B92B48A24AE6EB274EFAF006923BEE825E3FB7F45B49519C9B0A3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/plugins/wpo365-login/apps/dist/pintra-redirect.js?ver=12.11
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=25)}([function(e,t){var n=e.exports="undefined"!=typeof window&&window.Math==Math?window:"und

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ranstad_white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7295
Entropy (8bit):	4.146422523471472
Encrypted:	false
SSDEEP:	192:Y5NoIo0OjTlZEUpwWmjyI3RM5pwqT66/NLHX:Y3sj5ZEOz43RM5pww669
MD5:	8EE39CA73D760C065DC627BDE59527E9
SHA1:	93807344F518B39D5DA556DAEEF5B5D4909F8CC0
SHA-256:	7AE5A966DB315E61D8825747D42845F6F91A61AF4BE1FC3A35226E825E29D35D
SHA-512:	DC98F6E008E32D3607FD62B1785A2E61DD81E323B0E5AE9EDDBCF52BB8CE2B1F4E4882695989DCBF7D4712DEE022E7099D1C09FC70C84A5C883AFAA504A77366
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/ranstad_white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="136px" height="21px" viewBox="0 0 136 21" version="1.1"><title>ranstad_default</title><g id="ranstad_default" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Page-1" fill="#FFFFFF" fill-rule="nonzero"><g id="Randstad-logo_main" transform="translate(0.710687, 0.694925)"><path d="M95.2936063,6.05301456 C96.3480974,6.06987654 97.3935961,6.2501682 98.39283,6.58746229 L98.1779046,8.74602933 C97.3549618,8.35227267 96.4651451,8.11724047 95.5550988,8.05325325 C94.2856063,8.05325325 93.1744422,8.58626814 93.1744422,9.70602927 C93.1744422,12.47785 99.0268598,11.6776112 99.0268598,16.0219692 C99.0268598,18.9184466 96.7192778,20.2345063 94.3121138,20.2345063 C93.0338502,20.2964606 91.7599511,20.0433044 90.6025021,19.4973123 L90.7350394,17.2764169 L90.737905,17.274984 C91.6761617,17.8463774 92.7415567,18.1759901 93.8385616,18.2342676 C94.9762331,18.2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rounded_box_bottom[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 852 x 24
Category:	downloaded
Size (bytes):	1244
Entropy (8bit):	7.530342997379142
Encrypted:	false
SSDEEP:	24:chW3vALDgjtN7xy5B4JCH3/6lrxo9VzT05mJN6P4mJaBXFoNNvxl0rF1H:cdfgjTNCB4C6Po05mJPmAXF2NvorLH
MD5:	B954AD333F9B20CAAD3EC96CA41F1162
SHA1:	DEBACC52CBF5BD3F8572C2414272FEF5D0457C3C
SHA-256:	AC428763C2002603E60B032FF6114AD074906E5EE521C9A1487FD340A884669D
SHA-512:	6EF50C410AAB413CCCD0CEAD219286074B2F4AB973A94577288861518795F72F570C73065616038274FBDF86F9090549C31AB96676020EFCD8F3750B6661A797
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/assets/rounded_box_bottom.gif
Preview:	GIF89aT.....................................................................................................................28A.......................................bkwbkx29Abjw...bjx39Aakw38A......akx......ajw..._htELV4;DHPZ...T]h:AJajx>DN]frQXd4:CGNX........^fs6<ECJT6<Dvz.JR]...28B...3:B`ivOVaNV`[dp...DKUAHR>EP...;BK.........7>F@GQHOY5<D...JQ\...9?I...`iu9@I=DM...8?HBIRu}....ZbnKS^V^i...BIT8>GFMXXalS[fV^jW_kMU``hu\eq...W`lnv....4;C8>H...ZcnXamR[f<CLLT^MT_...PXbiq~\erRZe9?H..........[coYam\dp=CMAGQ...T\gOWbS[gV_k?FO=DN^gs49B4:BclyZboRYe;BK]eq...<BLLT_`ht...ZamU]i:AINUaCHQ<AJRZf<CM.........aivS\h...Ybm......FMW`dkHMU5;Cx\|.IP[......S\g...ZcoX`l...\ep...MRZMU_@FN@GP...[cpbjvX`kQYdW_lLS^...ZbmclwU^i]dqV]j[do9@J...MVaGNZdly5:C...8?Igo}@HQ...AGRX`m...\dq...SZf......=CL...!.......,....T.......K..H......\....#J.H....3j.... C..I...(S~,!P..0c.I...8s...gD.>...J...H.].t".OM.J.J...X.jm.....`..K...S=.....p...6..0t...............+...e.#K.L..e....s....C.......F.^...e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rounded_box_bottom[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 852 x 24
Category:	downloaded
Size (bytes):	1244
Entropy (8bit):	7.530342997379142
Encrypted:	false
SSDEEP:	24:chW3vALDgjtN7xy5B4JCH3/6lrxo9VzT05mJN6P4mJaBXFoNNvxl0rF1H:cdfgjTNCB4C6Po05mJPmAXF2NvorLH
MD5:	B954AD333F9B20CAAD3EC96CA41F1162
SHA1:	DEBACC52CBF5BD3F8572C2414272FEF5D0457C3C
SHA-256:	AC428763C2002603E60B032FF6114AD074906E5EE521C9A1487FD340A884669D
SHA-512:	6EF50C410AAB413CCCD0CEAD219286074B2F4AB973A94577288861518795F72F570C73065616038274FBDF86F9090549C31AB96676020EFCD8F3750B6661A797
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.staticimgfarm.com/temp/mndspk/rounded_box_bottom.gif
Preview:	GIF89aT.....................................................................................................................28A.......................................bkwbkx29Abjw...bjx39Aakw38A......akx......ajw..._htELV4;DHPZ...T]h:AJajx>DN]frQXd4:CGNX........^fs6<ECJT6<Dvz.JR]...28B...3:B`ivOVaNV`[dp...DKUAHR>EP...;BK.........7>F@GQHOY5<D...JQ\...9?I...`iu9@I=DM...8?HBIRu}....ZbnKS^V^i...BIT8>GFMXXalS[fV^jW_kMU``hu\eq...W`lnv....4;C8>H...ZcnXamR[f<CLLT^MT_...PXbiq~\erRZe9?H..........[coYam\dp=CMAGQ...T\gOWbS[gV_k?FO=DN^gs49B4:BclyZboRYe;BK]eq...<BLLT_`ht...ZamU]i:AINUaCHQ<AJRZf<CM.........aivS\h...Ybm......FMW`dkHMU5;Cx\|.IP[......S\g...ZcoX`l...\ep...MRZMU_@FN@GP...[cpbjvX`kQYdW_lLS^...ZbmclwU^i]dqV]j[do9@J...MVaGNZdly5:C...8?Igo}@HQ...AGRX`m...\dq...SZf......=CL...!.......,....T.......K..H......\....#J.H....3j.... C..I...(S~,!P..0c.I...8s...gD.>...J...H.].t".OM.J.J...X.jm.....`..K...S=.....p...6..0t...............+...e.#K.L..e....s....C.......F.^...e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\slick[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8342
Entropy (8bit):	4.946457453829198
Encrypted:	false
SSDEEP:	96:LVokpV85TDzyIhTHzYkB4Q9i77ZV8V89DOVJevOc4zZr1:LukSlDGItHc24ki77ZuSVOTOOc4zZr1
MD5:	66D66CC93C6730300F1CF714D78F6C75
SHA1:	8C325668BC4B6093DCDC6773EA664783569E7D41
SHA-256:	B6132C21167F5D0784AD07D4846BD550584434D36D81E93ECFC88CAE686AB9AC
SHA-512:	B7D7383F1E681F2DC4146B27049E78D8CCF77046BD32BF4FD00E4BB2A8C0EF544C7AFDBA1F146A064FC609A921F1273BA7C6AFDAC41F90E1FDFEA9A39819C5DA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/css/slick.css
Preview:	.slick-next,.slick-prev{font-size:0;line-height:0;position:absolute;top:50%;display:block;width:20px;height:20px;padding:0;transform:translateY(-50%);cursor:pointer;border:none}.slick-next,.slick-next:focus,.slick-next:hover,.slick-prev,.slick-prev:focus,.slick-prev:hover{color:transparent;outline:none;background:0 0}.slick-next:focus:before,.slick-next:hover:before,.slick-prev:focus:before,.slick-prev:hover:before{opacity:1}.slick-next.slick-disabled:before,.slick-prev.slick-disabled:before{opacity:.25}.slick-next:before,.slick-prev:before{font-size:20px;line-height:1;opacity:.75;color:#fff;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.slick-prev{left:-25px}[dir=rtl] .slick-prev{right:-25px;left:auto}.slick-prev:before{content:"."}[dir=rtl] .slick-prev:before{content:"."}.slick-next{right:-25px}[dir=rtl] .slick-next{right:auto;left:-25px}.slick-next:before{content:"."}[dir=rtl] .slick-next:before{content:"."}.slick-dotted.slick-slider{margin-bottom:30px

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\solutions-menu[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5613
Entropy (8bit):	5.126044693780031
Encrypted:	false
SSDEEP:	96:1epKN+UM5OC1EL6OutXUgyVqKBZNBnB4Xi:1ek+N5O4EL6OuteVqatnL
MD5:	ECDDBA408D669850001FB383626C6067
SHA1:	84971384687F42D7A76C21A8CE45352780D00BD3
SHA-256:	164445A8BE32F387C229679D9C90797E4557CAA7B71CF9D34D65836AFEE817C6
SHA-512:	8D4DEE288A71B880994391730833238A2739165450DBCE14F49FD23FC53C8796D06060E40EC02044A5476F8098E81BC2993512757A6A31004F560D8475BA072A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/css/solutions-menu.css
Preview:	@charset "UTF-8";header{border-bottom:1px solid #e5e5e5;box-shadow:0 0 0;top:0;transition:all .5s ease}.admin-bar header{transition:all .5s ease}@media(min-width:992px){header.slideup{top:-60px;overflow:hidden}.admin-bar header.slideup{top:-28px;overflow:hidden}}@media(min-width:992px){}#tertiaryMenu-placement{height:60px;position:relative;width:100%}#tertiaryMenu{background:#f8f8f8;width:100%;height:auto;top:60px;z-index:600;border-top:#e5e6e6;font-weight:600;font-family:open sans;position:static;padding:0;transition:top .5s ease}#tertiaryMenu.sticky{position:fixed;top:0;z-index:788;border-bottom:1px solid #e5e5e5}#tertiaryMenu.sticky.slideDown{top:60px}.admin-bar.scroll #tertiaryMenu.sticky{position:fixed;top:0;z-index:888;border-bottom:1px solid #e5e5e5;transition:top .5s ease}.scroll #tertiaryMenu.sticky.slideDown{top:60px}@media(min-width:600px){.admin-bar #tertiaryMenu.sticky{top:46px}.admin-bar.scroll #tertiaryMenu.sticky{top:46px}}@media(min-width:783px){.admin-bar #tertiaryMen

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\subscribe-31f0f3c3cd612a84bf995ce8736116ef[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	22188
Entropy (8bit):	5.418532338052362
Encrypted:	false
SSDEEP:	384:Aky7vr4rTm2vurGr0qKH9DeJGYIemKWEv2oYJQOuWhRvyPoAUBmOPxhjLqhyqDdi:AksjqTm2sc0veJGYIemKWEv21uIvGgBv
MD5:	6E0B58783ED03318D2DE73EB28167FA8
SHA1:	FC409692F0EB450FDED119A4855CFA5B5D5AB3A2
SHA-256:	3507B96326B7B58A9FF90A3B12A0C4C93F91AD3F3459037E322DA21DC223BAB3
SHA-512:	C31CDC382C1158C9FCE7A266DA803150CDC3FAA695189DFC996BA4547D94157AC8AB3F1BCB4342EDD4E04F7A3EA696FD73155639267816B210B590AC9CC2BC65
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/subscribe-31f0f3c3cd612a84bf995ce8736116ef.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"043a59f82ffc9750a385":function(e,n,a){var t=a("745a70c961e0aad60670"),c=a("a30f98a1b5878c1b0983");"string"==typeof(c=c.__esModule?c.default:c)&&(c=[[e.i,c,""]]);var r={insert:"head",singleton:!1},o=(t(c,r),c.locals?c.locals:{});e.exports=o},"05decd0422de0aa28b91":function(e,n,a){e.exports=a("06530a2c1309280ff0c5")},"06530a2c1309280ff0c5":function(e,n,a){var t=a("9f4fac5aae4db9c85a5f");e.exports=t},"412fcd05b78d694c9578":function(e,n,a){"use strict";var t=a("65d96aee20091f55476f"),c=a.n(t),r=a("f50e233540a5c40f0ea1"),o=a.n(r),i=a("8af190b70a6bc55c6f1b"),f=a.n(i),s=a("8a2d1b95e05b6a321e74"),l=a.n(s),d=a("be0037ee9446566ee46d"),u=a("3e9c7e5351d86134f5f6"),b=a.n(u),p=a("c941771c892f8eea9763"),m=a.n(p);function v(){for(var e=arguments.length,n=new Array(e),a=0;a<e;a++)n[a]=arguments[a];var t=Object(i.useRef)();return Object(i.useEffect)((function(){m()(n).call(n,(function(e){e&&("function"==typeof e?e(t.current):e.current=t.current)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\theming_v1_support-cf937686d5b6669242017892da7bad78[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	15093
Entropy (8bit):	5.930137408400451
Encrypted:	false
SSDEEP:	192:MBkGPoGpslJRfd6g2XHkXAHAgY46zXnREnUMlF7woMDuQtfoQd9xLdXsoMWq/Rm5:Mhg3j6g2XjRY44KnUl7xxVYW/
MD5:	04DD236A288FD3671DB968D3C326E208
SHA1:	BB684AAD3BECBD253764C3DFFB293094D2BBFB48
SHA-256:	BAC9AF8373385437AC65EFDF64B048573540A28F284BD5F13ECCED236A17D62A
SHA-512:	A00CF36D927EF6C69DD9FEA8814611B3BC0D8EACC86D4ED65413AB0FEB9DA647F9A2DB1FF5CCDC57E00FBB5DC0B1DDE9FBB2F41909274128687ED99982E1CD5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/theming_v1_support-cf937686d5b6669242017892da7bad78.css
Preview:	/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inheri

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\tos[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	42517
Entropy (8bit):	5.134883516490101
Encrypted:	false
SSDEEP:	768:u4xtXTHXfDh3xNW2zy0fuBk8v57mo9dkUR8btkxBFE71OuO:u4brunK8vFmoAUR8b+tEZ6
MD5:	16CA3E54DD4E1435DB0CF7599228B484
SHA1:	4DD36F6F3F231E4F0DF64D61E166C26C928BAE91
SHA-256:	7645E6C7427E0A0068E7D6E94E22081EFB3351188BBA8313EEAB5B47FFB30331
SHA-512:	723BA6D9F189939015B4284D93A014515CACFA85BD773B8AE12A514103BA40E64163BEC172780333B87463D0FF36040B7B7AB1CEF8B8E133188A957D75B98C1A
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/tos/
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">..<html lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">...<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7">.. <meta http-equiv="refresh" content="0;URL='https://eula.askapplications.com/tos/'" />.....<title>Terms of Service</title>.......<meta name="copyright" content="Copyright Mindspark, 2012">...<meta name="robots" content="noindex,nofollow">.....<link rel="stylesheet" href="bm~styles.css" type="text/css">...<link href="bm~styles-custom.css" type="text/css" id="BM_CUSTOM_SHEET" rel="stylesheet">...<link rel="stylesheet" href="local.css" type="text/css">...<script src="../jquery-1.8.3.min.js"></script>...<script src="languageDetect.js"></script>.....<style type="text/css">.. body {.. display: none !important;.. }....a[name]:hover{.....background: none;.....color: inherit;....}.......underline{.....text-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\videoThumbnail[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	34273
Entropy (8bit):	5.319342063553741
Encrypted:	false
SSDEEP:	768:U77ow5r0ebT3d2qhOUSqLj1Q+PM3bQKsI+cK/sErMtb/SdlHkjWpWqsH:PwlNa2ALQPj7IcEjWpU
MD5:	A36DD78320D240CE542383C677F83B3A
SHA1:	247B66273438839ADE36281395F191266A2DB3C3
SHA-256:	070967BE0A366DECD234992A2361D4B6B222C208FCDB9905F08052CE430BC5FF
SHA-512:	C922ABB3136243AC027C57C0F1D51D2EF59B58FC01C346C93A54DDE50228C6FD667A27EFA534E5B12BF3AF9B700756BB07DAF382A559CC95A804E19BCA2C73E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://fast.wistia.com/assets/external/videoThumbnail.js
Preview:	/****/ (function() { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// 20:.// (function(module) {..function _typeof(obj){"@babel/helpers - typeof";return _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function _typeof(obj){return typeof obj}:function _typeof(obj){return obj&&"function"==typeof Symbol&&obj.constructor===Symbol&&obj!==Symbol.prototype?"symbol":typeof obj},_typeof(obj)}/@license MIT-promiscuous-.Ruben Verborgh*/(function(func,obj){// Type checking utility function.function is(type,item){return _typeof(item)[0]==type}// Creates a promise, calling callback(resolve, reject), ignoring other parameters..function Promise(callback,handler){return handler=function pendingHandler(resolved,rejected,value,queue,then,i){// Case 1) handle a .then(resolved, rejected) call.if(queue=pendingHandler.q,resolved!=is)return Promise(function(resolve,reject){queue.push({p:this,r:resolve,j:reject,1:resolved,0:rejected})});// Case 2) handle a resolve o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1280px-Flag_of_Brazil[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1280 x 896, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	20697
Entropy (8bit):	7.951199110219313
Encrypted:	false
SSDEEP:	384:eOvSYkkeVgkD11Fp6ZXvq+xbTo2+4Rghjb6KHBrAMar7aH08+i5NrkLpJXi:xvHg11FORb8T6CBshMDkJi
MD5:	1FA510D42CFB1C8F95F3D9614347972C
SHA1:	DC753FB290E7A8969C5E524203A698A282928F8D
SHA-256:	072ED0680219EEEDBF5D09EE9F37EBB20E72F233F2EFB9DD0EB82EC4A82E49A2
SHA-512:	B5E58391CA99DC9F7350F9C1E0F7D17E18995A5CA20D13ACDEF5FC14634BDF7A04F0040A4F82E75946C91C566E5076239D43CB888E3CCC481C6F357BC7276111
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/05/1280px-Flag_of_Brazil.png
Preview:	.PNG........IHDR.............RZ.'....PLTE..:..........(v..9..;.'v.............5.......w....7..."D../{f.#.....>x..2R.o.!^.%........8.....6.t..F...?.+....x.....B...f}.Da.........8...Fb .2...........3...Uo...PS.z..L.....4/./'.1......U.'..........7k..(I.....9.....-r......^w..2}..D.2K_~.;L.u......\iK.4nm......5:.,...$.2......".TMh..<.........9...............+.0..5..........................H.)4.......w...g.o...>g......4.b'.X......-M..,y.....@.k..I:.gHd.K]S..qE.p6U............?\....+.[....;i9P\..#s....mvCVeN..........?.Zt.........w}>.......;Y.Rl....s..BWWR.'7.-../M.(...........................2......2o_../.^Y..k..bz..........+qyAb.........7...>SY.0p..'..fpG.....A..+y..........)...........L.)$Af{......^kJRbPamI..5...FYU........P..#..\.......y............?.....g.....9XWrk.. .IDATx...oV...ql.G..#...lK...K.....T{.U.e*`(...ue...E2S$Fs........`!..C"%....jb....>.9...........~.................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1412617045042[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 85 x 63, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3718
Entropy (8bit):	7.780568246339781
Encrypted:	false
SSDEEP:	96:s2vrzQIkRp349eBbSIBWyWdfLx+atVhURJWNyK+0tOeLjSR1k:7sRluwbSYxGx+sUvWNFIR+
MD5:	955B14931477860DA511B8F2512835E3
SHA1:	BF6FD819762E2E56A4AAB253DCDC125F5A24C4E3
SHA-256:	373023F9BD67721848E7471F00802C1EA7D5F07E433E3E1D424F20C93D8B1383
SHA-512:	52A45D12088D6413365E87FF260AEF495911C49E293DD06858F9633031857D3DF76F5E7771AA23CEA4DD5338F5BFB281B26DB5B2B885A42BBF70ADB3CA525121
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/jason.pepping/asset6/1412617045042.png
Preview:	.PNG........IHDR...U...?........f....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:838BAA043EA311E0B9C0A7986BA3780C" xmpMM:DocumentID="xmp.did:838BAA053EA311E0B9C0A7986BA3780C"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:838BAA023EA311E0B9C0A7986BA3780C" stRef:documentID="xmp.did:838BAA033EA311E0B9C0A7986BA3780C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>E..F....IDATx..o..W....K.R.DMM,...X0T.?i....D.&..~.u........J..E.....V...(h./5.j.Z>H....Q..Z..EaYv....w..;...;o..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1510074091906[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 58 x 68, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1925
Entropy (8bit):	7.368610495134294
Encrypted:	false
SSDEEP:	24:n11hxWwjx82lY2T3UVPY8BLyJ3VzjbG28ylJMJEj24kLAi+rKEXpeh3/A5sMFbNl:b6Nn2wN4J3ZJlKas51Gw3/ADFbNWwkNY
MD5:	6996AE606231FBFCDA3B62A515BF487D
SHA1:	AD4A830B367D6E2590720890302672575EB34F66
SHA-256:	D683C86E12A51A6E1EE1612110C8F4B94C219B4AAA4DF578339F39CC16445D14
SHA-512:	3223CF4A72209CBDA454A0C660DEB0B7D25E3384289BE94FDBB2403EE29B602028E2D4F13BD7F967CF4D5EDC7BB617151284C7337D4E79F04C7136F3B0786AE1
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/lisa.delmar/asset1_4/1510074091906.png
Preview:	.PNG........IHDR...:...D......&.....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:E0B60CF8BB7E11E7B6A4C27F39DE0792" xmpMM:DocumentID="xmp.did:E0B60CF9BB7E11E7B6A4C27F39DE0792"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E0B60CF6BB7E11E7B6A4C27F39DE0792" stRef:documentID="xmp.did:E0B60CF7BB7E11E7B6A4C27F39DE0792"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.].^....IDATx..[H.Q..w..$..2/.Z....D..V.....5.*....JPOAQ=t%...!....E.. t..~1_.W.#..LH......afgv...o?..w......9.]...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1511835218471[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 242 x 29, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6205
Entropy (8bit):	7.8940187673194195
Encrypted:	false
SSDEEP:	96:W2c+dnKssw/7gRXvBBqL48bl3DIx4UOJfYa7KzCRwTxwYoX9ZN3m2Gcp3aQo8mw:ldnFAvB0flY4vKGRWxwNXfN3fGcpqQRb
MD5:	6621B2102E53CC375B051873F9D0D470
SHA1:	E1FA913222B3F9CC48F8BECAA0489990EB1F8F9E
SHA-256:	611BA3E6BC2F9D6D2C836CEA50827A14F1DB9D750AC5329A3A91B0AB301F0CD4
SHA-512:	CB6478733D202F3A0191FB3F8CBF98EF56FF4D0D6E5379D66262B01A1A6804EEF6A6EEB6BE2DB0C43F20FA37889819B4DA1447747087CAE071AFCBBAAB87898A
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/jeremy.jacinto/asset1_1/1511835218471.png
Preview:	.PNG........IHDR..............z1.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:3D72E0B7D3DE11E797358EE773CA37BD" xmpMM:DocumentID="xmp.did:3D72E0B8D3DE11E797358EE773CA37BD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3D72E0B5D3DE11E797358EE773CA37BD" stRef:documentID="xmp.did:3D72E0B6D3DE11E797358EE773CA37BD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.xK.....IDATx...x....]......6(."!..tTd.j.J[....X;Z.B[..L}......Z.R.#.. 3..*.U.Y.....$...a....y.......{..h .y.'7

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\1526908607958[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 338 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4796
Entropy (8bit):	7.772461265774245
Encrypted:	false
SSDEEP:	96:Uxk6fLOQkXwhIKGdA/ctfFx49XfNWzzqH+DVbIGm8AysYSP8P19db:qc6GdgYFSPUzzqedIZ2Ph
MD5:	A1B577292152EF2624F4E1485F0233A2
SHA1:	09C914DEE326C4692B1114B08ACF77EABC3B8E2E
SHA-256:	EE4B8F452D0A5DBD4119721602289941AB1E5385E8989F8AF6DD479DA98F2498
SHA-512:	EA3549A1F41C1A8709F5F90A27C3E8EFA3EA30105F0A534879842BF11AEAE9EF8169E33DCAE4012102D21FE1FF263069EBD15128E0DBA82D915D862A734E2092
Malicious:	false
Reputation:	low
IE Cache URL:	https://ak.imgfarm.com/images/vicinio/dsp-images/kit.sullivan/button1_1/1526908607958.png
Preview:	.PNG........IHDR...R...^.....q`. ....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:fcb93bf3-198b-304f-8360-8a53088f8599" xmpMM:DocumentID="xmp.did:B80364073F5811E8A1EBBF32C0ABFF39" xmpMM:InstanceID="xmp.iid:B80364063F5811E8A1EBBF32C0ABFF39" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:94f946ba-751a-4801-8c87-16a3dd277c66" stRef:documentID="adobe:docid:photoshop:8f1b332a-d5b8-fd42-92e4-b82df973ce0c"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..Oc....IDATx...t.....$

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\3389PKTG.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	13785
Entropy (8bit):	4.732707325135999
Encrypted:	false
SSDEEP:	192:4KEmrkUbO5YljytGuTQ0SDmCix3XZiZJbHICygI:4KPJyeOt/Q0SDmCi1eBI
MD5:	65DCA63323F5F574DBA11C61816DE47F
SHA1:	770E67FFA6D993EB0DB5B0AAF14E8197F70B9C18
SHA-256:	71061986BA4DD5AF36AF542B5F4C2552B39C70A441CC91E729B905686DA8181B
SHA-512:	1FD7AA08BA4FE52949E721088EFDC29B27A39A04AAE1B67C47550123F9B0BEC65DE4598338C739E00E0588A236892A12714FA9463637E201744EEA412EE14753
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. <html>. <head>. <link type="text/css" rel="stylesheet" href="https://fonts.googleapis.com/css?family=Open+Sans:regular,bold"/>.. <title>EasyPDFCombine</title>.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta name="author" content=""/>.<meta name="description" content=""/>.<meta name="keywords" content=""/>.. <link rel="icon" href="data:;base64,iVBORw0KGgo=">. <link rel="stylesheet" href="//akz.imgfarm.com/images/dlp2/prod/css/core.css"/>. <link rel="stylesheet" type="text/css" href="https://fonts.googleapis.com/css?family=Open+Sans:regular,bold" />. <link rel="stylesheet" href="//akz.imgfarm.com/images/dlp2/prod-ue/splash/47470/23/styles_ie.css"/>. <link rel="stylesheet". href="//akz.imgfarm.com/images/dlp2/prod-ue/installer/8891/13/styles_ie.css"/>. <script type="text/javascrip

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\50-41798991f0245f49fd42a9b8b7a99c0c[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10734
Entropy (8bit):	5.3202368213455635
Encrypted:	false
SSDEEP:	192:r8U6ZtZcJkhkVmumKWEv/+oYrNQqBloHwN2oGBv:D6lNhGTmKWEv2oYJQON2JZ
MD5:	844792DE8F2A47539575700CFCF8E569
SHA1:	A6963CB1462C641022E174BF5FCF443A61AFA302
SHA-256:	0D075C5AA765130E1836818C370C3F7CEF41BFFACF5B6F11054188854E67C436
SHA-512:	62DACB7C23156A6AD3803B40963151CC72C2CF7E06DF6C5A6E9269865626AD3A382C82953F55907DE8D414CC3EE4B4B39BF3FB18C1361E6540C7A2E3516092BD
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/50-41798991f0245f49fd42a9b8b7a99c0c.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"0efe4d2baa95b81d2a6c":function(n,e,t){"use strict";t.r(e),t.d(e,"default",(function(){return s}));var a=t("8af190b70a6bc55c6f1b"),o=t.n(a),c=t("aa002c9ecdc30c05062b"),i=t.n(c),r=t("a8f8105d2d40178f277f");function s(){return r.a.get("current_brand_active")?o.a.createElement(o.a.Fragment,null,i()("txt.help_center.views.shared.setup_mode_notification.message")," ",o.a.createElement("a",{href:"/hc/admin/general_settings"},i()("txt.help_center.views.shared.setup_mode_notification.general_settings"))):o.a.createElement(o.a.Fragment,null,o.a.createElement("strong",null,i()("txt.help_center.views.shared.brand_inactive_notification.heading"))," ",i()("txt.help_center.views.shared.brand_inactive_notification.message")," ",o.a.createElement("a",{href:"/agent/admin/brands",target:"_blank"},i()("txt.help_center.views.shared.brand_inactive_notification.brand_settings")))}},"525da436d046ad36d588":function(n,e,t){"use strict";t.d(e,"a",(functi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\8662cb62-712d-4929-88d6-c585ee14ea99-en-us[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	57498
Entropy (8bit):	4.970850485752005
Encrypted:	false
SSDEEP:	768:vRo8Tld+g1UYT59DPKuHvahscf13Zy64Ma7oRNTf7hrpkfQWp:tlvl59DPTHShzHFN7leB
MD5:	E458C6BCBA6E82B3E31ED9F270F1C3EF
SHA1:	069E82B4EAE6592C6E4649A11C0FF4230FDA052E
SHA-256:	33598A2D6AB0695985746520EA4CC3CE2186797F4136E894AC29548F6E502A03
SHA-512:	D9078DEC056BC9A4DFF5833467A8B7B71A6B0F00813622F8185619433515F12569FD4EC1A6B84CB60DCD57A420A37F7E7AC496B87E57486259979991EC798540
Malicious:	false
Reputation:	low
IE Cache URL:	https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/8662cb62-712d-4929-88d6-c585ee14ea99-en-us.json
Preview:	{"schemaType":"content","schemaVersion":2,"notices":{"57224899-2752-499f-ab87-0813ce81d68b":{"content":"<div class=\"otnotice-content\"><div class=\"otnotice-sections\"><section class=\"otnotice-section\" id=\"otnotice-section-cfb53a5c-9633-443c-b6e1-b10ad97b50c5\"><h2 class=\"otnotice-section-header\">Privacy Policy</h2><div class=\"otnotice-section-content\"><p><strong>Last Updated: December 21, 2020</strong></p><p>California Residents may click <a href=\"#california\" rel=\"noopener noreferrer\" target=\"_self\">here</a> for your California Rights.</p><p class=\"ql-align-justify\">At Ask Apps, we have developed this privacy policy (the \"Privacy Policy\") to demonstrate our commitment to protect your privacy. This Privacy Policy describes the practices concerning the information collected by the Ask Apps family of companies consisting of Ask Applications, Inc. and its affiliates (\"Ask Apps\", \"we\", \"us\" and \"our\") through the use of the (i) website and browser

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\95061b6b-8c20-49bf-a186-861b98f5338f[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	339
Entropy (8bit):	5.194064819293609
Encrypted:	false
SSDEEP:	6:YWGZqt+B3QVgr17SdAELTeAWmUFiJOdF8fBgwHCxnRYLBJK3X/54HY1:YWGZzB3qgp7SdA4CFqyMHCxnRmBHY1
MD5:	3E8711D2671696006BE332B64998CE94
SHA1:	A75A04C6E9445083EDC2083F1641DB05552EA465
SHA-256:	FA08F69603B4929AD1F6DA1A11F96F87F2B99F2B61D7901A082DDBFA31D47471
SHA-512:	E6B4DEBE50356640EAE9883E1306D0206ADD05F1AC9FFE66CE2D930D1987CF323B3E2659F20EB5F03B67E002E313B3D89A2B197683524AA2F5D66501E0BB27D8
Malicious:	false
Reputation:	low
IE Cache URL:	https://appds8093.blob.core.windows.net/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/95061b6b-8c20-49bf-a186-861b98f5338f.json
Preview:	{"schemaType":"notice","schemaVersion":2,"languages":{"en-us":{"languageId":"6fe77eb0-7481-4ab5-bfd5-3d221490f4b8","language":"en-us","isDefault":true,"policyUrl":"https://privacyportal-cdn.onetrust.com/982b0a23-3053-4df0-9089-7ce3acd59c8d/privacy-notices/95061b6b-8c20-49bf-a186-861b98f5338f-en-us.json","languageName":"English (U.S.)"}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\9f63be63-0490-4123-bb2c-9ab8201ff738[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3513
Entropy (8bit):	4.763127674839322
Encrypted:	false
SSDEEP:	96:yyI8408IL+3Uu8CppUVHQYa6AyDsjSIjVja4+:OKdxCpp76vAhdD+
MD5:	DD2B774616FAD846491316D1D9B1ACE3
SHA1:	FE951AB3D0C9316C3BAAF89BFAB31920AC819914
SHA-256:	B00B8725F0ECCC454AA5D53AACAA3213E3EDE0827EA74B6AE565C1D293021B5C
SHA-512:	D06EADED6DB5D2E23D62828DA442CF8FC97C3E9E2128C24AFBEBBB5E68161CF502F7AE92A5433C1A8C030427B7973F2FE98EE96CEBDDAD3183E0D4B0A3952AEE
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cookielaw.org/consent/9f63be63-0490-4123-bb2c-9ab8201ff738/9f63be63-0490-4123-bb2c-9ab8201ff738.json
Preview:	{"CookieSPAEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"6.9.0","OptanonDataJSON":"9f63be63-0490-4123-bb2c-9ab8201ff738","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","RuleSet":[{"Id":"f50ad5b8-7b14-4e64-964f-5ec2220fdbb4","Name":"LGPD","Countries":["br"],"States":{},"LanguageSwitcherPlaceholder":{"default":"pt"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"DEFAULT","UseGoogleVendors":false},{"Id":"a8a65736-da75-4fe0-9c37-6188cda717a5","Name":"CCPA","Countries":[],"States":{"us":["ca"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CCPA","UseGoogleVendors":false},{"Id":"96826864-0c78-4e11-a778-7cba382e28f3","Name":"EU/EA","Countries":["de","no","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","sl","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","gr","it","es","at","re","cy

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Cookie_consent_bg[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7818
Entropy (8bit):	4.632559274534452
Encrypted:	false
SSDEEP:	96:xM4GbJLLYMeLdLTqk5CLYLTqkOI/oCLYLTAcLYLTqkJ6PLYLdLkOIW:sFXsLkwPokwAew76jw
MD5:	07AACB4C0B315382A789DB2ECBDBE3B9
SHA1:	4B65A8202DD09A6851434A557AC8596FA7DDAD63
SHA-256:	21679C744FA8464846DCAC4F7DDA33560DC6DD6D5276E8E35D27B3248F73AD70
SHA-512:	60F4011E07155731C9E78EE9A372E979E5B292562D96345B23B3F87B36C98522A7C8446E35EA1D64ECAC26ED0BF79BC5CD4DC7FA255B6570463EBBEBC6F1B440
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/Cookie_consent_bg.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="1440px" height="280px" viewBox="0 0 1440 280" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>2B307567-EEDC-4429-9635-E79328F4A866</title>. <defs>. <linearGradient x1="111.274748%" y1="57.5371962%" x2="7.00065607%" y2="44.1660728%" id="linearGradient-1">. <stop stop-color="#758592" offset="0%"></stop>. <stop stop-color="#414042" offset="56.6833668%"></stop>. <stop stop-color="#414042" offset="100%"></stop>. </linearGradient>. <rect id="path-2" x="0" y="0" width="1440" height="279.014545"></rect>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Cookie-Consent-1" transform="translate(0.000000, -705.000000)">. <g id="Header-background" transform="translate(0.000000, 705.000000)">. <mask id="mask-3" fill="white">. <use xlink

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\OneTrustLogo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20063
Entropy (8bit):	4.24869179356229
Encrypted:	false
SSDEEP:	384:U60xWLoJyXpCYiz9tz9lX+edXP+oihlNYjgbhywffVnVoVN2zkB:UBVyXpCYYB9lX+edf+9a8TdVoVN7
MD5:	CDB209401571C7108FFCE4488FE14A1F
SHA1:	6B2D9E79E6AF65D78B97EF24FF244FFA922522B5
SHA-256:	0CB8599C32F55151C63AC01662F8179C43A4ADA5E5D5D62B8EF2EEE44FB35274
SHA-512:	07A05B2C68A7AD22C2F4F96F6EBA670ED634A5BC552F0C9A5371C782F3A6C307ED3D294B7A1AE7422CB3E1DB2BE673E31BD870799B1110691EBD72FCF9BA0EE9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/OneTrustLogo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="811px" height="222px" viewBox="0 0 811 222" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>20200729-OneTrust-RGB-Color</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="20200729-OneTrust-RGB-Color">. <path d="M6.929,199.528 L9.06,199.528 C11.051,199.528 12.541,199.135 13.53,198.349 C14.519,197.562 15.014,196.416 15.014,194.912 C15.014,193.395 14.599,192.272 13.771,191.549 C12.941,190.824 11.643,190.462 9.874,190.462 L6.929,190.462 L6.929,199.528 Z M21.552,194.682 C21.552,197.969 20.524,200.482 18.471,202.224 C16.416,203.964 13.495,204.835 9.707,204.835 L6.929,204.835 L6.929,215.697 L0.453,215.697 L0.453,185.156 L10.209,185.156 C13.913,185.156 16.729,185.954 18.658,187.548 C20.587,189.143 21.552,191.521 21.552,194.682 L21.552,194.682 Z" id="Fill-1" fill="#717592"></path>. <path d="M35.932,198.714 L38.021

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Open-Sans[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Open Sans family
Category:	downloaded
Size (bytes):	217534
Entropy (8bit):	6.418415896116898
Encrypted:	false
SSDEEP:	6144:u6pzdD/rIJXiQTutgCNktQFvmnoxXTS4ubCl:l9FrIJJaqCNktA+SXfUCl
MD5:	06A04537DB9294681F93BC12BD1D9C53
SHA1:	7055716734B30DD8A0862C8B664BA332608476A9
SHA-256:	31B6B855254621325884EBEEE8F42134E48C68BDE9C41552E8F701D483D47CBA
SHA-512:	1B285D4CC4186448DBCC831E2B5FFD248CA4F29D268FC1ACEAA9E6F7708AC9E13E8FBFBC1B3A541C9432B935A2A833D34EBC8FD15A93513A44707AF6E1172E64
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/fonts/Open-Sans.eot?
Preview:	.Q...Q............................LP....[ .@(.......... ...._..!....................O.p.e.n. .S.a.n.s.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...1.0.....O.p.e.n. .S.a.n.s................0DSIG..D...;....tGDEF.&....7\|....GPOS.7.7..7....8GSUB.+=...7.....OS/2.>.........`cmap)./h........cvt .M..........fpgm~a..........gasp...#..7l....glyft8.K..%.../.head.v....<...6hhea...s...t...$hmtx.5<.........kernT+.~..U@...6loca)......4...Vmaxp.C......... names......x....post.C.l...@..&+prepC...................!..__.<..........51.......LL.......b...........................{...............................V......./.\.......................3.......3.....f..................@. [...(....1ASC.@. ...........X ........H..... ...................#...5...+.3.......h...q.....^.R.^.=.j.V...h...?...T.!.........f.......d...^...+.......u...^...h...j.!...!.?...h...w...h.o...1.y...../.....}.....s...!.....}.......T.#.`.....'...9.......;.}.....;.}.....d.j.m...........h.......{.....R...........3.V.1.........s.^.......s...s.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\PolicyAndNotice_icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1246
Entropy (8bit):	5.227612275153829
Encrypted:	false
SSDEEP:	24:2diO4LJRlgsC7eFeaxMu9632IAbfb3eMQbobrlNCrI87H5cTM6daiwc02NR3SqFD:c34/ln3v9pRbnCrtKaiwc02NdSql
MD5:	870F58BBE9CE444DACA04BCE723CF46B
SHA1:	517F7EB3828D7D063361E1D4D47178281CF0343D
SHA-256:	94D6C2B9294E591AA2F1AD9816A9854E7B133BEAA55DBC461711749E332C8BDB
SHA-512:	C910EF2F6B6CCD962C434EA1DA6D2F1DEFEA370A1B42A3EB72D42C59F7FD492D2D3EB24A7AC9534A90F68E32393537914E0E1B51A8D310A3E051D67EE8A98D49
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2021/02/PolicyAndNotice_icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="57px" height="58px" viewBox="0 0 57 58" version="1.1"><title>privacy-certification</title><g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Cookie-Consent-1" transform="translate(-610.000000, -4684.000000)" stroke="#FFFFFF" stroke-width="1.71875"><g id="OT-releated-product" transform="translate(152.000000, 4481.000000)"><g id="Boxes" transform="translate(0.000000, 192.000000)"><g id="Policy" transform="translate(392.000000, 0.000000)"><g id="icon-/-Resellers" transform="translate(54.000000, 0.000000)"><g id="privacy-certification" transform="translate(13.000000, 13.000000)"><line x1="27.5" y1="55" x2="27.5" y2="0" id="Path"></line><line x1="3.14285714" y1="27.5" x2="52.6428571" y2="27.5" id="Path"></line><path d="M27.5,0 C19.6428571,5.89285714 7.85714286,9.82142857 0,9.82142857 C0,28.1541071 9.16732143,47.1428571 27.5,55 C45

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\PrivacyLegal_not-Selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1126
Entropy (8bit):	5.165668566073385
Encrypted:	false
SSDEEP:	24:2diO4LpgompMaAjeaxMe6Abxy5NnddXgHfGWlo+/0pDR3lserc:c34pgNKdxsNif1MHG3
MD5:	4BCD0F8E8AE38887257EAED0E5C0F0B4
SHA1:	D9C79BDDF28F9280B956648ED351D356D36D2E53
SHA-256:	6DDF15A369FF2589160889595755B89C2122A0423AFC3FF732DE75A097D19B65
SHA-512:	001FE482B8DE9455999760DE32C5FB34E540AAA409D3E59317D46290A85BD0396DB2C8D2A324675A2F387BAB1DC0F5369F20808E43D652E01BC37FE48E9BB385
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/10/PrivacyLegal_not-Selected.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="20px" height="20px" viewBox="0 0 20 20" version="1.1"><title>PrivacyLegal_not Selected@1x</title><g id="PrivacyLegal_not-Selected" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="PrivacyProgram" transform="translate(3.000000, 1.000000)" stroke="#414042" stroke-width="1.52941185"><path d="M7.37823516,0.147567581 L2.22558711e-13,1.48656694 L2.22558711e-13,7.52717219 C2.24724753e-13,10.7091949 1.54676354,13.6926375 4.14722184,15.5264547 L7.32358157,17.7663917 L7.32358157,17.7663917 L10.4999413,15.5264547 C13.1003996,13.6926375 14.6471631,10.7091949 14.6471631,7.52717219 L14.6471631,1.48656694 L14.6471631,1.48656694 L7.37823516,0.147567581 Z" id="Path-2" stroke-linejoin="round"></path><line x1="7.32358157" y1="0" x2="7.32358157" y2="17.7663917" id="Path-4"></line><path d="M2.22558711e-13,9.39670633 C3.26858351,8.46446601 5.72799523,7.9983458

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\SecurityRiskAudit_not-Selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1777
Entropy (8bit):	5.12201979338891
Encrypted:	false
SSDEEP:	48:c34pgNqpjp+0VqQ2ksAxRitG8JHAG7i9g:9uApjpXr2JaRitGuA8i9g
MD5:	99655C9CB6A51627CFB4BE6087E9802F
SHA1:	414B3A2674BAA2DD0CBBA0DD927E2D5557483031
SHA-256:	F8D362F34186F7748F893BFC95E3A2ADF2F3C9FBA7161DE974B7602846BBDBE9
SHA-512:	6131E2A2C3E73D93EA81F9DB0994F7FAD6C4B3F68DA58AB15FE1AE8F97362B6ECD84EE0960A33203BD36D6A20CE53C62D7E28FE32F60C7F0671A20A253803681
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/10/SecurityRiskAudit_not-Selected.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="20px" height="20px" viewBox="0 0 20 20" version="1.1"><title>SecurityRiskAudit_not Selected@1x</title><g id="SecurityRiskAudit_not-Selected" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Group-2-Copy" transform="translate(2.000000, 1.000000)"><g id="Breach-SVG-GreenBlack" transform="translate(0.144000, 0.008000)"><g id="Group" transform="translate(0.232368, -0.000470)" fill="#414042" fill-rule="nonzero"><g id="Group-4"><path d="M6.95746465,13.9149293 C6.20020662,13.9149293 5.5944002,13.3091229 5.5944002,12.5518649 C5.5944002,11.7946068 6.20020662,11.1888004 6.95746465,11.1888004 C7.71472268,11.1888004 8.32052911,11.7946068 8.32052911,12.5518649 C8.32052911,13.3091229 7.71472268,13.9149293 6.95746465,13.9149293 Z" id="Path"></path><path d="M13.2427063,17.2847275 L0.672223002,17.2847275 L0.672223002,7.97045377 L13.2616378,7.97045377 L13.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\VendorSourcing_Selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1069
Entropy (8bit):	5.178363439919492
Encrypted:	false
SSDEEP:	24:2diO4LpgompzeaxMz96ONX8XVSO8Fgloi2GbOOitRHIF2c3x/s80E1u:c34pgN0GVSOkGbOOGzoxQ
MD5:	6E2228210890CA97BBA75864FB6C9933
SHA1:	5E6B509DA76FED0F112133625592940396E81AA9
SHA-256:	A378FA74BFE55623FC02AE2B949CA8238B19EF10D65AD5CF1DDAF2078F4D4EB5
SHA-512:	4FFF1AB507A345F403249439A2DA0F74A8E7A28AB56FD2FBBF6CD1017C91AB9D374D3DA12688785FB7A30514B0674B7AC8BF8912999D4407D0DF9B1BFC02F107
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/10/VendorSourcing_Selected.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="20px" height="20px" viewBox="0 0 20 20" version="1.1"><title>VendorSourcing_Selected@1x</title><g id="VendorSourcing_Selected" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd"><g id="Group-2" transform="translate(1.000000, 6.000000)" stroke="#6CC04A" stroke-width="1.4"><g id="Group"><path d="M2.83102601,1.82520665e-13 L15.6600002,1.82520665e-13 L15.6600002,5.02326727 M15.6600002,8.64000011 L2.70000004,8.64000011 L2.70000004,3.78000005" id="Shape" stroke-linecap="square" stroke-linejoin="round"></path><polyline id="Path" transform="translate(15.660000, 3.556325) rotate(-45.000000) translate(-15.660000, -3.556325) " points="17.2800002 5.17632474 14.0400002 5.17632474 14.0400002 1.9363247"></polyline><polyline id="Path" transform="translate(2.700000, 5.083675) rotate(-45.000000) translate(-2.700000, -5.083675) " points="1.08000001 3.46367537 4.3200

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\anemone-1.2.8.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	18772
Entropy (8bit):	5.302922803808574
Encrypted:	false
SSDEEP:	384:8rHxNVk2h9m3wkD6/grYxav8dwG4q9Bqfg91OmctwV2B:8jaUhafg9oMa
MD5:	BE95DB238C2919FE3323D940BD6E6952
SHA1:	6BD1E288761DF0BA84276F9C8F03FCF44BC5031A
SHA-256:	3FD57AF30B92C95A4EE3D0766C4498A1D8312EBAB6A2BE200CD7BC49F812B9A4
SHA-512:	A9CE625DB9B340A87E86A8FCE6005B8E0AC0EA956446395041FDE2E3A0A42C3474119A468E0AEC7DE6641CF505B55D4AD6B17AD96F27EFCE11C9FA23D9A8C58E
Malicious:	false
Reputation:	low
Preview:	"undefined"==typeof anxDebug&&(anxDebug=function(e){});var JSUtil={isNull:function(e){return null==e},isNotNull:function(e){return null!=e},isEmpty:function(e){return null==e\|\|0===e.length},isNotEmpty:function(e){return null!=e&&e.length>0},isBlank:function(e){return this.isEmpty(this.trim(e))},isNumber:function(e){return"number"==typeof e},isFunction:function(e){return null!==e&&"function"==typeof e},trim:function(e){return this.isNull(e)?null:0===e.length?e:e.replace(/^\s\s/,"").replace(/\s\s$/,"")},defaultVal:function(e,i){return null==e\|\|""===e?void 0===i?null:i:e},defaultIntVal:function(e,i){var t=parseInt(e,10);return isNaN(t)?i:t},optionalVal:function(e,i){return this.defaultVal(window[e],i)},optionalProperty:function(e,i,t){var n=this.optionalVal(e);return null===n?t:this.defaultVal(n[i],t)},merge:function(e,i){var t,n={};if(this.isNotNull(e))for(t in e)e.hasOwnProperty(t)&&(n[t]=e[t]);if(this.isNotNull(i))for(t in i)i.hasOwnProperty(t)&&(n[t]=i[t]);return n},hash:function(e)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\answerBot[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	390093
Entropy (8bit):	5.619956762114505
Encrypted:	false
SSDEEP:	3072:nE/ewhEB8Aw0Jq3fTGtckPBt/Q7YGUuiMOxhhzk9DaEALHdaDR+5Ru5nqiHHDP85:nEfiIG/5MYGUiOJz62VHl0nfI5
MD5:	642DA21B8F76EAC921E1FFF85B5D8DD4
SHA1:	85A81B95A2DF2169272FCA985CFC28585BFB33F0
SHA-256:	9F514E151444B63F6537E6C828732DF061F90379BA3AF60BE9F9D46E732E7D87
SHA-512:	C836875C1DD2BA2C01DC755CF8C4405CAE46F037F5D50C3EFAC6C2ED54D27F7CA362F88513838EAB96EF9B4E2390ECB57ED04D1A25D59A637C4904A5D984DD6F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/answer_bot_embeddable/answerBot.js
Preview:	var answerBot=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=56)}([function(e,t,n){"use strict";e.exports=n(64)},function(e,t){var n;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\application-79172500fb4dbec2484043d570946543[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	55259
Entropy (8bit):	5.371302838735274
Encrypted:	false
SSDEEP:	384:+p1Rryu+Rx/fzZACiqwCiCyCzCC5CjPCx6TL7qUBluXToyhTO7s5ykQrDY2Vfu/Z:Fx/fzZEM2qUBluXhEO3pEz8Rcpex3
MD5:	14F116BB4A422639983DD8BF23C0860F
SHA1:	61D07BF17912B7E57D9657B5B1375BFBE765367D
SHA-256:	ECB2B8B7D11FB59C52755FF250D1F81C80BC782857D6E3A3920A2A24228B11AA
SHA-512:	2FF349C5BEDEB4D903F77458D61326389CC05195C4447AC6863A312C473432A83DCD8A44004D4AEC380910ADC143F57F9244CE21020F507729B3B65A5DF2FEEB
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.zdassets.com/hc/assets/application-79172500fb4dbec2484043d570946543.css
Preview:	.wysiwyg-color-black{color:#000}.wysiwyg-color-black70{color:#4d4d4d}.wysiwyg-color-black60{color:#666}.wysiwyg-color-black50{color:gray}.wysiwyg-color-black40{color:#999}.wysiwyg-color-black30{color:#b3b3b3}.wysiwyg-color-black20{color:#ccc}.wysiwyg-color-black10{color:#e6e6e6}.wysiwyg-color-red{color:red}.wysiwyg-color-orange{color:#f90}.wysiwyg-color-yellow{color:#ff0}.wysiwyg-color-green{color:lime}.wysiwyg-color-cyan{color:aqua}.wysiwyg-color-blue{color:blue}.wysiwyg-color-purple{color:#90f}.wysiwyg-color-pink{color:#f0f}.wysiwyg-color-red90{color:#f33}.wysiwyg-color-red80{color:#f66}.wysiwyg-color-red70{color:#f99}.wysiwyg-color-red110{color:#c00}.wysiwyg-color-red120{color:#900}.wysiwyg-color-red130{color:#600}.wysiwyg-color-orange90{color:#ffad33}.wysiwyg-color-orange80{color:#ffc266}.wysiwyg-color-orange70{color:#ffd699}.wysiwyg-color-orange110{color:#cc7a00}.wysiwyg-color-orange120{color:#995c00}.wysiwyg-color-orange130{color:#663d00}.wysiwyg-color-yellow90{color:#ff3}.wysiwy

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ask_applications_logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 134 x 70, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5777
Entropy (8bit):	7.941002682284533
Encrypted:	false
SSDEEP:	96:BioEN14PZqELeBlLV6d2IyTbk9hWxhwBl0HOcgtQK3Y3+2XPoYnCPxuEjOQjP:YF4AE6BtMLyXkyrC0u/op/ojJuiOQj
MD5:	660217E5FD40C2FA8AEA45F2A1F1DDF9
SHA1:	3857DAEA838EF989B3C593FBBA4FA644A6749EE1
SHA-256:	19A1F245392C1597F87220ADDA6EA5DF0CE505F5223DA8F8D559BCBD1A52A176
SHA-512:	B4E5D6B14FA64096BDCA88CE71EAEFEA38AD3253AED972198A3DF7E314D4D5DBFD530DE74971BEDAAFEB15D9A25C5A3906A1CFCC0E3BD9B99E3B31DE5FB429B0
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/assets/ask_applications_logo.png
Preview:	.PNG........IHDR.......F........%....bKGD..............pHYs...H...H.F.k>....IDATx..{\|\U...1..&..4..m.B[ZJ[. H.@[.-..@........>@..WE.....r..\AP..i.R^..4.Q.#..4I..ygf.....LfN2.L..L...g>m..g.}.....^{.u4.AQw..q3.xb.X\|.J...L.5..x..(....=.."@.......o.o...>.........%.{...v.@...\....rv.#..'n.O?...A.U..f.8..)(.....\|.h^...^......7.NHO.....r..E.>.U..rE.3'W=...q.....~W...Kw.".g...Ip(.!.u....!D..(.X]..w... !\....B...q{O.........K...&......=........\.<.._W;..<....".....<..1\|O..Ms.`.}.......Kp.G.3..qx..(.r..t.t=mM...O.!.........lAT.:jc.$..:.^...WUa;+Q..dFg/..F8.Y^....(-!.s7.m..e.... p+...B....".#c.us.BW.L...})...p.GB]8..I.1......E/(@/...h...4s.........?.9......n.,P..u....8.g...!.B9....(.3.......4...].6q6.?.........s..7.....V.tEn.Q......Or....1.S.x$...K..a(52.....A~.cL..n.I..k....._....7.9.iP.+.L.$.9D.....S=e.}...4.eO..Y...c..@f.1C...O....p.C......).3..._G`...".R...jk=..=...g........./RcL..n..@+%.........<.4..l.fE.Fq.S'JaV....}....".m...)k^ ..Qw.iB.S.&n..\|..0..e...Ih

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bm~styles-custom[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2338
Entropy (8bit):	3.3645130175801463
Encrypted:	false
SSDEEP:	24:HqcvhmXoMF7+96hrNIXydbJPh1rGlBqMl2wGweqOFA:HPvhghOXyhVh1qlBqMlp9eqOFA
MD5:	07220E8AF924F5332040009C9A6E02F8
SHA1:	7B2B6FF99B48FB9CA5BD3EE92F63E19087CE36EC
SHA-256:	D8B672B7A400F3B41FC84C31CAB10D46ABF73833713DA6699C9348E86FCBBEA4
SHA-512:	0B234E163EF79A97B6565C46F1FB9486C2A7F158B56623B8DCF2EB3417BD0E07C5A89DB42ABE49282A8E1AD1BC7C3E7CB640574148A3C372DD7648F99444C376
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/eula/bm~styles-custom.css
Preview:	/* bm~styles-custom.css -----------------------------------------------------.. CSS custom styles for Mindspark,.. generated 2009-12-11 22:09:31 GMT by Big Medium v2.0.8.. .. DO NOT EDIT THIS FILE MANUALLY.. This file is generated automatically, and any changes that you.. make to it will be overwritten. The styles in this sheet may.. instead be added or edited via Big Medium's style editor... To create your own custom style entries, use Big Medium's.. "Edit Theme Style Sheet" option, which applies styles to the.. main bm~styles.css sheet... ------------------------------------------------------------------- /..../ START BIG MEDIUM STYLE EDITOR STYLES..----------------------------------------------------------- /..../ ---------------------------------------.. DEFAULT STYLES.. --------------------------------------- /....../ ---------------------------------------.. DETAIL STYLES.. --------------------------------------- */....div.bmc_image { .. pad

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bm~styles-custom[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2249
Entropy (8bit):	3.2550658412350773
Encrypted:	false
SSDEEP:	48:HrohQ3RXERhIRrRdGRcRbR9RARMRQR/RzRq0Rz:LsSRXERhIRrRdGRcRbR9RARMRQR/RzRL
MD5:	DC81450AA06B32FE574DC0832C27F269
SHA1:	E0C0BE5C49086A730AC2BDDB8A5CEF0DED658737
SHA-256:	45F8588ABD9D1C03C3C4BE7B548D8388A8F0D7B694BBB221BDCD80C3BCF445EC
SHA-512:	C1F6E78B95B90E7B97D3151928C4919C8621412E11301952327133A301178C89765DDE25E89AF4CAB3E274FCD612FEE48B5D9A735C8302C90EA36562A6140A0A
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/cookies/bm~styles-custom.css
Preview:	/* bm~styles-custom.css -----------------------------------------------------. CSS custom styles for Mindspark,. generated 2009-12-11 22:09:31 GMT by Big Medium v2.0.8. . DO NOT EDIT THIS FILE MANUALLY. This file is generated automatically, and any changes that you. make to it will be overwritten. The styles in this sheet may. instead be added or edited via Big Medium's style editor.. To create your own custom style entries, use Big Medium's. "Edit Theme Style Sheet" option, which applies styles to the. main bm~styles.css sheet.. ------------------------------------------------------------------- /../ START BIG MEDIUM STYLE EDITOR STYLES.----------------------------------------------------------- /../ ---------------------------------------. DEFAULT STYLES. --------------------------------------- /.../ ---------------------------------------. DETAIL STYLES. --------------------------------------- /..div.bmc_image { . padding-right:20px; .}.../ -

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bm~styles[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	32094
Entropy (8bit):	4.975686709163245
Encrypted:	false
SSDEEP:	384:CWeWlE9DtmErCVNIJ1ONJt5LqFCVEbFHuo+71lhd:CDDgErCVNIrONn5eFCVEbFHuo+Jlhd
MD5:	895F99189A390E735DF9860A88C427B4
SHA1:	9ACCCBD82A5699B65322FBAFF1011864A538676E
SHA-256:	15D459DC6EB22B3B6F53B26D51838FE6517877534C4588D25D78AFE20DE7390E
SHA-512:	D7B5768141682304005A144B713F1DE8221325D2C70101FEBE45B9C90ADB6EE238D5F61A99D137880D8D711D94F8883E8565BED70C64C31E4756CFD540412A50
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/cookies/bm~styles.css
Preview:	/* bm~styles.css -----------------------------------------------------. CSS styles for Mindspark,. generated 2009-12-11 22:09:31 GMT by Big Medium v2.0.8.. DO NOT EDIT THIS FILE MANUALLY. This file is generated automatically, and any changes that you. make to it will be overwritten. To add your own custom styles,. use the "Edit Theme CSS" option in the Big Medium control panel.. You may also remove theme styles via the "Remove Design Theme". option. Navigation styles may be removed via the navigation options. in "HTML Preferences.". ------------------------------------------------------------------- /../ START BASE BIG MEDIUM STYLES.------------------------------------------------------ /./ $Id: base.css 3311 2008-09-05 09:56:36Z josh $ /../ margins and containers.---------------------------------------------------------- /.p {. margin-top:0;. margin-bottom:1em;.}..div.bmw_link { / container for each page link */. margin-bottom: 1.4em;.}..div.bmw_p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cookie-consent[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	18247
Entropy (8bit):	5.105455102580246
Encrypted:	false
SSDEEP:	192:KoOekqVx9BYLDwfHPqU3siP/jw5rx1Eq4z4pbbI3t+YzTTmJoxCuzXcERnmvycGZ:/qU3sispo/dtD
MD5:	9542536D04DD173B3D155C3DC77498DD
SHA1:	C5E50F33ED7993A03B62D16626CDCF2B030B4E88
SHA-256:	161404CDB973A555C74BB480BDA9DFDB1B62A9916E1205C25673BC694FD49842
SHA-512:	99C84B9688BB142E322110231F5C82A1DBF7500C0F5EA4E7E0320335EA7AF4AA61BB8D3F5DFB6C35CF783D67F935E8F08EBB426391FC1ECB3CAFDA613BF12ABC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/bundles/pages/cookie-consent.css
Preview:	@font-face{font-family:open sans;src:url(/wp-content/themes/onetrust/fonts/opensans-light.eot);src:url(/wp-content/themes/onetrust/fonts/opensans-light.eot?#iefix) format("embedded-opentype"),url(/wp-content/themes/onetrust/fonts/opensans-light.woff2) format("woff2"),url(/wp-content/themes/onetrust/fonts/opensans-light.woff) format("woff"),url(/wp-content/themes/onetrust/fonts/opensans-light.ttf) format("truetype"),url(/wp-content/themes/onetrust/fonts/opensans-light.svg#open_sans_lightregular) format("svg");font-display:block;font-weight:300;font-style:normal}@font-face{font-family:open sans;src:url(/wp-content/themes/onetrust/fonts/Open-Sans.eot);src:url(/wp-content/themes/onetrust/fonts/Open-Sans.eot?#iefix) format("embedded-opentype"),url(/wp-content/themes/onetrust/fonts/Open-Sans.woff) format("woff"),url(/wp-content/themes/onetrust/fonts/Open-Sans.ttf) format("truetype"),url(/wp-content/themes/onetrust/fonts/Open-Sans.svg#glyphicons_halflingsregular) format("svg");font-display:bl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cookie_compliance_icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4373
Entropy (8bit):	4.657085383714875
Encrypted:	false
SSDEEP:	48:cCczKvHolxMGcyZphm6JXcMzwlyEvvPQgbXsEJ4UyvpiugwyjQp5cbCzkJfh2pxz:dAKQ7LcQ24zOyEmUyQVwyjQXYJfherqa
MD5:	AE4D852A202724F658E0F1020AF05D5C
SHA1:	D89FF890B0B95E4DB45D7FDA228F0BED86D9FC0E
SHA-256:	7A842EBF026606596542EAC926E3401CF00F7D9D0935521EA02B7BF6BF05160D
SHA-512:	958F122ED9BBD1A0952FB2B27162EEDFF05A12674F0C293981C05D90E7F70F14DB1D49A586E2C91EF1F4A298BD31294FCF3E8084153B7B8229BF1730AA59FD3B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/cookie_compliance_icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="100px" height="100px" viewBox="0 0 100 100" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon / product / cookie compliance</title>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Cookie-Consent-1" transform="translate(-529.000000, -5462.000000)" stroke="#FFFFFF">. <g id="Stat-02" transform="translate(91.000000, 5249.000000)">. <g id="icon-/-product-/-cookie-compliance" transform="translate(438.000000, 213.000000)">. <circle id="Oval" stroke-width="3" fill="#6CC04A" cx="50" cy="50" r="48.5"></circle>. <g id="Cookie-SVG-GreenBlack" transform="translate(18.125000, 19.375000)" fill="#FFFFFF">. <path d="M32.1341633,59.2235681 C15.8521296,59.2235681 1.84287405,46.741803 1.84287405,30.0377197 C1.84287405,16.8522348 12.8341783,4.51862121 26.1727779,1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\css[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.142133486649227
Encrypted:	false
SSDEEP:	6:0IFFm15+56ZRWHTizlpd0aFlcLFNijFFm15+56ZN7izlpd0celLnJNin:jFMO6ZRoT6pIFqFMO6ZN76pYnJY
MD5:	1561B66F09CDE805EABFAB2DA360A953
SHA1:	E06ED58997252B681CFFB992EAB6E220A92E1F87
SHA-256:	3425109C96FBED965075A759ABE818A2EE4C5F67AC45C75D55D81FA082720DF0
SHA-512:	73CD2F0C523D125E5160541E30001D7CB379EA832C298F20F379956EAFA21FF67B9E13707C166831350606D1F656EBD43F1CA4AD641C035E3F8985C3B7FF8168
Malicious:	false
Reputation:	low
Preview:	@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0d.woff) format('woff');.}.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhv.woff) format('woff');.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\en[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 18 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	7.297819446461804
Encrypted:	false
SSDEEP:	12:6v/7XuxX3Rm54yc+pkhDSkvZqmRT7c8kWLThG00fxS58/yc:zxjfxTLkWLtN0oFc
MD5:	1BA36EFB938281E2A9F0F736122EDA65
SHA1:	174F9EFC5CCF88999AD93D9BF6BF310541142F71
SHA-256:	797C85D8A20FF3F9F93B6EC59865E2905E3DB10A11066E42AB09D3697FF3AD1F
SHA-512:	2A0E4900C27A77CE2E1D742DD903C8DA8F4D1E4C51902D243286C6B83ACCFADD2700FAE78B3D333534659B01F5630F6AA10668B14BC39D6FAC428E517B7B4F33
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/uploads/2020/08/en.png
Preview:	.PNG........IHDR.............o.....XIDAT(...?/.A....33w..-v...U..^...F.&..A/.*D...D#Q(..........Q.. ....y2.\|.<ydue+to.I.........`....=1....^....o.@...Da..,..)....1....V3X..%...{;T.X......>.uh.)...u4..l.s..Y.%I...(j .(.q.Q....2..1..T...z9J....e....>.i.=8....$-..A..$IL.l.^..i...3....r...h...~..Z.P........~.fO.....#.o..\|._...N.........H.......?..B....7R. ...D.C../....l....D.^....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	43680
Entropy (8bit):	5.510104267519919
Encrypted:	false
SSDEEP:	384:KXEqAQASFydwq2zCzkuIXZCff2g2BTL8aXu5zdQyuYSuykP/e2yxCRfDAe8j3Xcr:iA9DHGwVaUvyk3d8jq7FxDcankjy
MD5:	602E05153E03C5E5DB10288D953773A1
SHA1:	C471B6E36DB7EE161333D944C6A7ADC6242F02A3
SHA-256:	F8E03FF588E0A7E35BB5FB0F0916145174F696AA35D4D3B86001FCA66B77D7A0
SHA-512:	0119D6E22631C5FE1B22F06AA97FAB44C0A3E5C232C08BAFB8106E250A58599777046D0F919D0A346D44232F34DFC023915713550CBEA74709FC072FB2CE245B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googleadservices.com/pagead/conversion.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),l={},fa={};function p(a,b){var c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]} .function t(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in l?f=l:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;b=b(c)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\feature-v1[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3461
Entropy (8bit):	4.992770232489419
Encrypted:	false
SSDEEP:	48:EBu7PpPEp4eeg2tYQixRDaEl90xEHnaZVwmG7241:EBu7PpPEp4ejtxRDaEl90xQaU
MD5:	A71DBCC85A54FB9414C043AA04E38159
SHA1:	066A4F9459173AA72070B164A5C0AFE12B2D3B3F
SHA-256:	F6FEDF5AF46968FF3AC957C2144E2AA196FE956E9521C810B00DAB5D3F7970CC
SHA-512:	D0927CC09BA272497249BFF0F776061F5B8DCAC8D5FC99DE1643147E44F58C4400A87381FFCC48D5FA34D3105233C96FFB3CBC1C9EC48184BABBD0B32922A849
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/feature-v1.css?t=1617901555
Preview:	.feature-v1 h2{margin:0}.feature-v1 p{margin-top:15px}.feature-v1 p:first-of-type{margin-top:0}.feature-v1 a{color:#6cc04a}.section.feature-v1{max-width:100%}.feature-v1 .white-bg,.white.feature-v1{background-color:#fff}.feature-v1 .gray-bg,.gray.feature-v1{background-color:#f8f8f9}.dark.feature-v1,.feature-v1 .dark-bg{background-color:#414042}.dark.feature-v1 h2,.dark.feature-v1 h4,.dark.feature-v1 p,.feature-v1 .dark-bg h2,.feature-v1 .dark-bg h4,.feature-v1 .dark-bg p{color:#fff}.dark.feature-v1 .card .image,.feature-v1 .dark-bg .card .image{background:#fff}.feature-v1 .arrows a.btn-primary,.feature-v1 .arrows a.btn-secondary{background:0 0;border:none;color:#414042;display:-ms-flexbox;display:flex;font-size:15px;font-weight:600;border-radius:5px;min-width:100%;padding:0;text-align:left}.feature-v1 .arrows a.btn-primary img,.feature-v1 .arrows a.btn-secondary img{margin-left:8px;transition:.5s}.feature-v1 .arrows a.btn-primary:hover,.feature-v1 .arrows a.btn-secondary:hover{backgrou

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\footer-info-mail[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1017
Entropy (8bit):	5.934236277230484
Encrypted:	false
SSDEEP:	24:2d6goRG3LIEOeFeaxM3C4QdaZ89kWM2AmqbEFAMzAw:c6gKGbIkopQwZ89ZMJEyo
MD5:	EB88BDECA0BE56EA1B57035AD86CD519
SHA1:	1D2CC588869F60724B9169F38B15C209BEF3DB8A
SHA-256:	616D3AAFF1EBE651F64797A3E509499B5F94973CEC801F1775D361AE39911E50
SHA-512:	73949FC4BFB602E4F7F5CEAD74A47B491BD7D27A4954F7B8BD61E261B61266CA1BD15C8D55BD9E4D277F9C273ED48CB83E73A0BF93678961268E341234612A72
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/images/footer-info-mail.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="14px" viewBox="0 0 20 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 55.2 (78181) - https://sketchapp.com -->. <title>Bitmap</title>. <desc>Created with Sketch.</desc>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <image id="Bitmap" x="0" y="0" width="20" height="14" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAOCAYAAAAvxDzwAAAAAXNSR0IArs4c6QAAAS1JREFUOBG1kLFqwlAUhu+1EvABOpU6CNJNp3boYDJKwRcQx47tKujeqQ/g2rV0a1/A2iAODl0UbEMpXV3qJBYhfic0koYbmgge+Dj3/uc/J+dG+76/Ukot4RV2jRKNx1BRDPTAhVs4yDqRnia8wTOc5RjwDQ74IOIh+d/AZ0EPYwtOYSpNMlBprdfQ5ngDL/Il0ZOC+hE1Fz7ou4DF1ktxvL1w4F6EEVxF9fCMbsMEzkNNMvceBE+O6rLtF0INTjA8QEEMZA0djl1w8A1Fj0fw5LiI+Qeu0e9hwKAq+REsqFObk82B+c+T4y7qZXgCO16L3qkHT85HRdOZbd7RG6aaSZMny7/qw53JkFWTDWds4WRtTPLLwGDDX4PH8Mskcxp9Lxt+yj9M8/UUnvkG6cydqdwNIhsAAAAASUVORK5CYII="></image

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\hero-v1[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4559
Entropy (8bit):	5.011301505209764
Encrypted:	false
SSDEEP:	96:wVYj7PP23+87TxJDyYT70OOSIk6/m3xJ7PyiSKDmSJ6U:9j7P+3PT4UIk6/m3xJ7PyiSKDmSJ6U
MD5:	878E1576FA1020DA14AC42DBC46F2E42
SHA1:	5F75AC1125F423269C219AAEE6BEB41CC70F2C6B
SHA-256:	78B70FEE62F10AC0AAF1533046A64F912ACC80C0887E35C66491BD8D72F9C945
SHA-512:	CC6EF903D8963E1E9E5DA08F37DBFA4B8F61CF7376581CB69CB083B93993D29630330824386311771C563CA20771362E28275880358A9D0793C5B0C9098DAE18
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/bundles/ot-components/hero-v1.css
Preview:	.hero-v1 h2{margin:0}.hero-v1 p{margin-top:15px}.hero-v1 p:first-of-type{margin-top:0}.hero-v1 a{color:#6cc04a}.section.hero-v1{max-width:100%}.hero-v1 .white-bg,.white.hero-v1{background-color:#fff}.gray.hero-v1,.hero-v1 .gray-bg{background-color:#f8f8f9}.dark.hero-v1,.hero-v1 .dark-bg{background-color:#414042}.dark.hero-v1 h2,.dark.hero-v1 h4,.dark.hero-v1 p,.hero-v1 .dark-bg h2,.hero-v1 .dark-bg h4,.hero-v1 .dark-bg p{color:#fff}.dark.hero-v1 .card .image,.hero-v1 .dark-bg .card .image{background:#fff}.hero-v1 .arrows a.btn-primary,.hero-v1 .arrows a.btn-secondary{background:0 0;border:none;color:#414042;display:-ms-flexbox;display:flex;font-size:15px;font-weight:600;border-radius:5px;min-width:100%;padding:0;text-align:left}.hero-v1 .arrows a.btn-primary img,.hero-v1 .arrows a.btn-secondary img{margin-left:8px;transition:.5s}.hero-v1 .arrows a.btn-primary:hover,.hero-v1 .arrows a.btn-secondary:hover{background:0 0;border:none;opacity:1}.hero-v1 .arrows a.btn-primary:hover img,.hero

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\host[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	26217
Entropy (8bit):	5.433118927101112
Encrypted:	false
SSDEEP:	768:TKPLg/q/ikAGFKVQI/uot5x09SQMDLddB3y:Gg/MikAZ7/uol09SQT
MD5:	88B056726ACE593C6CFE0E92543DF20F
SHA1:	03F75F933BF33AFDA199296FF0CD19830274553B
SHA-256:	0A7006DBB5E976B8D61720007902DE944905E9CAEF9ADA0FA309B610A29872DD
SHA-512:	D9CCAD3F0F9C21F17BE321E0983BE906CEC37040224535E1F223074290243239781261B8E9E9C3C80CE7C6C8B95DE80F1EF5C960DEC1D1247FE0804D8C0DF38C
Malicious:	false
Reputation:	low
IE Cache URL:	https://mysearch.zendesk.com/auth/v2/host.js
Preview:	!function e(i,o,s){function t(r,a){if(!o[r]){if(!i[r]){var l="function"==typeof require&&require;if(!a&&l)return l(r,!0);if(n)return n(r,!0);throw new Error("Cannot find module '"+r+"'")}var d=o[r]={exports:{}};i[r][0].call(d.exports,function(e){var o=i[r][1][e];return t(o?o:e)},d,d.exports,e,i,o,s)}return o[r].exports}for(var n="function"==typeof require&&require,r=0;r<s.length;r++)t(s[r]);return t}({1:[function(e,i,o){function s(){var e=(new a).getBrowser();return e.name.toLowerCase()}function t(){return new Promise(function(e){document.requestStorageAccess().then(function(i){e(i)}.bind(this))["catch"](function(i){console.log("ACCESS REQUEST REJECTED: "+i),e(!1)}.bind(this))})}function n(){return document.cookie="_zendesk_thirdparty_test=true; SameSite=None; Secure",-1===document.cookie.indexOf("_zendesk_thirdparty_test")?(console.log("Third-party cookie not allowed"),!1):(console.log("Third-party cookie allowed"),document.cookie="",!0)}function r(e){var i=s();if(e.forceStorageAPIFor

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\index_eula[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	4.889155433043944
Encrypted:	false
SSDEEP:	48:U1ZtFGX5Xsd87sqsfsCOZkGaA5tHS5aEv5252QzkDBLuumu61oMY9kOsvksRmcPT:UlFcn1NtAaERc24fv1dKg7AgrFW7gt
MD5:	8FBDE4E8849A280EC3E60A6570800F76
SHA1:	F8A228C324412BD6E48DCBEC712B6EABFEF6E362
SHA-256:	690EBA773ECDB9064284DBBFA4AC8C7B6D4672E7894FC0907F1606A945D3C3D1
SHA-512:	8141D437523B7001B894B68B9BA6AEB5DFC2D99A4205E9CB311611230D3D1FF3967FB3EA886A99D1755CC07C61C9A12AC6DFDC7FEDDA5B14D720332F5F4C88D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.askapplications.com/eula/index_eula.css
Preview:	body {. margin: 24px 0px;. padding: 0px;. text-align: left;. background-color: #323943;. color: #000;. background-image: url(//ak.staticimgfarm.com/temp/mndspk/bkgd_gradient.gif);. background-position: top;. background-repeat: repeat-x;.}..section#otnotice-section-26ebf1e1-7a42-4bf4-8c97-04378fe973d1 h2.otnotice-section-header:nth-of-type(1), section#otnotice-section-10abc1eb-99c8-4aba-a246-6356edeb2044 h2.otnotice-section-header:nth-of-type(1) {. font-size: 17px !important;. text-transform: none !important;. margin-top: -13px;. margin-bottom: 40px;.}...otnotice-content * {. font-family: Arial, Helvetica, sans-serif !important;. font-size: 11px !important;.}...Content, .Content_FF {. width: 852px;. margin: 0px auto;. background-image: url(//ak.staticimgfarm.com/temp/mndspk/rounded_box_bg.gif);. background-repeat: repeat-y;..}...Content2, .Content2_FF {. width: 852px;. margin: 0px auto;. background-image: url(//ak.staticimgf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\interFontFace[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	26602
Entropy (8bit):	6.183923498502266
Encrypted:	false
SSDEEP:	768:YR1HnRhN0m0wWy6R1HnRhN0m0wWygkoKO:YTH7UA6TH7UA3oKO
MD5:	A3249B3E1AA2D7B473CF9791DFD0926A
SHA1:	D0246B228D776BD220C8390FAB466161D1B1FF50
SHA-256:	0E23CFC1249737748E6C5780C33C63F33B90CDC79E4F34A32E59D89FDE810D72
SHA-512:	CAA0F21E9F123687AFC25EFEFA980AC72D0E526B98ADEAFD0C04BEF6397A59DBB695B8CB4B92C6660D684C6C584D110AC8442AE2DCFB30839B563214A10B6092
Malicious:	false
Reputation:	low
IE Cache URL:	https://fast.wistia.com/assets/external/interFontFace.js
Preview:	/****/ (function() { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({..// 226:./*/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {..__webpack_require__.r(__webpack_exports__);./ harmony export / __webpack_require__.d(__webpack_exports__, {./ harmony export / "removeInterFontFace": function() { return / binding / removeInterFontFace; },./ harmony export / "interBase64": function() { return / binding / interBase64; },./ harmony export / "interFontFace": function() { return / binding / interFontFace; }./ harmony export / });./ harmony import */ var wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(5);.var _W$lib=wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__.default.lib("player/lib/elem"),addInlineCss=_W$lib.addInlineCss,elemRemove=_W$lib.elemRemove;var removeInterFontFace=function removeInterFontFace(){wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__.default._interFontFac

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	90243
Entropy (8bit):	5.522426824464924
Encrypted:	false
SSDEEP:	1536:JoUK1bOli0E+HlcnK+sCEOkKQfz2zeWghuHAil1U9aKPt52QsnyAC7jg:JoUKxui04nvsaShRin0g
MD5:	4039E07A14961AC57599014C02C78E7A
SHA1:	60BDA99AE4FB98806877B19C6458459F80450EE1
SHA-256:	37362B926E1D10A3F5D10E039F4C06E129EB4C4FDBD47EEEFE2592DF4F8E7100
SHA-512:	8A75FC9F6D9D7E20C1F34DF6960C5119065602C9994970B649395356D0E2EE650A9B944FF035068144B4FF1DE8A227E494CE75715A7F935BCB8F4E10C4583125
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagmanager.com/gtag/js?id=DC-9560938
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"1",. . "macros":[{. "function":"__e". },{. "function":"__cid". }],. "tags":[{. "function":"__rep",. "once_per_event":true,. "vtp_containerId":["macro",1],. "tag_id":1. }],. "predicates":[{. "function":"_eq",. "arg0":["macro",0],. "arg1":"gtm.js". }],. "rules":[. [["if",0],["add",0]]].},."runtime":[].....};../.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:ba(a)}},da="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ea;.if("function"==typeof Object.setPrototypeOf)ea=Object.setPrototypeOf;else{var ia;a:{var ja={a:!0},ma={};

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\local[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	830
Entropy (8bit):	4.478448089933929
Encrypted:	false
SSDEEP:	24:kG8SrnEelqF7hju/kQ+FCk0kb2Eq8opoLCCposPCtHpo5PHirNkQFArSwE:kDSrnEeQZhK/1+zfblKApirN1O2T
MD5:	80B9A92FC7C47C66E7002590A7DD5E1E
SHA1:	E37A0FB9E1840C3EB6D413B82CD20F3A6CEE7F80
SHA-256:	085E26D935B8B06BA8683C91E381BA1D1785DC249E4637DFB9FC394A99D40FE1
SHA-512:	8773888F51969B77709CE516EDE3511076135BCEE4CAF20BD5EAB1883B381A7B065C34F72BB2716132045C0269761278784F2B8E6AA3120B4A9DEF459FFF0455
Malicious:	false
Reputation:	low
IE Cache URL:	https://eula.mindspark.com/cookies/local.css
Preview:	. hr {.. .margin-top:-10px;.. }.. h1 {.. font-size: 17px;.. font-weight: bold;.. color:black;.. text-align:left;.. }....bold {....font-weight: bold;....color:black;...}.. div.para {.. margin-top: 15px;.. text-align:justify;.. color:black;... }.. div.indented {.. padding-left:50px;.. }... li{ ...text-align:left;....}.....basicBullets {....list-style-type: disc;....margin-left: 30px;...}.....letteredBullets {....list-style-type: lower-alpha;....margin-left: 30px;...}.....capitalLetterBullets {....list-style-type: upper-alpha;....margin-left: 30px;...}.. div.menu {.. float:right;.. margin-top: 15px;.. color:black;....margin-right: 5px;....width: 150px;.. }.. .langugebox{.. .width:100%;.. }

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\manual_quality_video[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	100440
Entropy (8bit):	5.361949050991734
Encrypted:	false
SSDEEP:	3072:uv9Nq955qs7mPCOBmw67gQgi5Lw+h48qy9mRoi:v7gQQ
MD5:	91B7EE0B354FC2C4C320C4D1C1096D7B
SHA1:	D779CE83FD6EAE5A104AC8B6E0288DB1D60FB840
SHA-256:	ACC86C350ACB618535A5746CAEA4107EE991F035E0D379D46B8B073577903AC4
SHA-512:	6FA1969D952A52ABB86BC90614D94DFE64D59CBCDA8FB94DFBA2DE62FF6708B8F9717A8B5F6FEABE5FC56743C16B4F992B37671FAAE53CB71EBE8014C21BE120
Malicious:	false
Reputation:	low
IE Cache URL:	https://fast.wistia.com/assets/external/engines/manual_quality_video.js
Preview:	/****/ (function() { // webpackBootstrap./**/ ."use strict";./**/ .var __webpack_modules__ = ({..// 400:./*/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {..__webpack_require__.r(__webpack_exports__);./ harmony import / var wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(5);.null==wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__.default.engines&&(wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__.default.engines={});var defineEngine=function defineEngine(name,klass){wistia_namespace_js__WEBPACK_IMPORTED_MODULE_0__.default.engines[name]=klass};/ harmony default export / __webpack_exports__["default"] = (defineEngine);..// }),..// 403:./*/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {..__webpack_require__.r(__webpack_exports__);./ harmony export / __webpack_require__.d(__webpack_exports__, {./ harmony export / "autoAsset": function() { return / binding */ autoAsset; },.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\opensans-bold[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Open Sans family
Category:	downloaded
Size (bytes):	43762
Entropy (8bit):	6.572935160137288
Encrypted:	false
SSDEEP:	768:DNeaQGcQlgEGFKvXsxIn6JK3EUpAtqCxLGGV7:xh6iG00xIn6LcNsF
MD5:	2FB4AB723F0FD745B449A7A56C2D919E
SHA1:	B51B8C7CC68DE100D3CEABA548AF9C5C61133A32
SHA-256:	7688E63D074094B9187FF761EA428ED1DEBFA077E5101630D1DCD2521577A06B
SHA-512:	4D1E77E87AFDD1E26F81200D8CF8C458287088980D6BC99BE7F035E90B105976CF5055AA7B28998293AD66258D24F1A726A905C84CE337EC87F2ABCAB0575CC0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.onetrust.com/wp-content/themes/onetrust/fonts/opensans-bold.eot?
Preview:	...@.............................LP....[ .@(.......... ....L.......................O.p.e.n. .S.a.n.s.....B.o.l.d.....V.e.r.s.i.o.n. .1...1.0.....O.p.e.n. .S.a.n.s. .B.o.l.d................0FFTM{8.f...<....GDEF.'.....X....GPOSl.t....x... GSUBy.z........xOS/2.I.........`cmap.@X....p....cvt .......L...0fpgmS./....\|...egasp............glyfJ...........head...........6hhea...........$hmtx..L4........loca............maxp........... name,.K........ post{..........prep.-._........webfT.\....8....................B......................................................latn........................8..latn......MOL ..ROM ............liga..................................... .....I.O.....I.L.....O.....L.....I.............3.......3.....f..................@. [...(....1ASC. .....f.f...... ........^..... ...................................... .......~...S.x.... . . . . " & / : _ .!"%.......... ...R.x.... . . . . " & / 9 _ .!"%............p.L.................7....................................

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 12, 2021 15:20:23.505068064 CEST	49704	80	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.505266905 CEST	49705	80	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.546159983 CEST	80	49704	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.546190977 CEST	80	49705	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.546355963 CEST	49704	80	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.546417952 CEST	49705	80	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.547919989 CEST	49704	80	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.588860035 CEST	80	49704	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.597281933 CEST	80	49704	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.597446918 CEST	49704	80	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.613255024 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.654115915 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.654325008 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.662175894 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.703007936 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.703839064 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.703864098 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.703876972 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.703893900 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.704112053 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.754147053 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.759877920 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.759924889 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.796674013 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.796701908 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.797297955 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.797905922 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.800642014 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.800837994 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.801482916 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.843561888 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.859359026 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.859395981 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.859407902 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.859422922 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.859591007 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.859637022 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.861428022 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.862739086 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.862843990 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.862885952 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.863384008 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.908479929 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.940849066 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.981618881 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.993837118 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.993874073 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.994044065 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.994086981 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.994911909 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.994937897 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.995023012 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.995045900 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:23.997889042 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.997915030 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:23.999685049 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:24.000679970 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:24.001688004 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:24.123694897 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:24.169378996 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:24.952574968 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:24.993365049 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:25.004478931 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:25.004667997 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:25.024846077 CEST	49706	443	192.168.2.3	34.107.128.118
Apr 12, 2021 15:20:25.070667982 CEST	443	49706	34.107.128.118	192.168.2.3
Apr 12, 2021 15:20:25.092308044 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.093429089 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.133246899 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.133413076 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.134061098 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.134455919 CEST	443	49720	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.134565115 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.135073900 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.175865889 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.175887108 CEST	443	49720	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.176671028 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.176688910 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.176773071 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.178354025 CEST	443	49720	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.178374052 CEST	443	49720	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.178421021 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.178457022 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.178481102 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.884035110 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.884588003 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.884848118 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.902261019 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.902821064 CEST	49720	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.925285101 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.925313950 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.925323963 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.925334930 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.925473928 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.925494909 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.925510883 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.925543070 CEST	49719	443	192.168.2.3	104.16.148.64
Apr 12, 2021 15:20:25.938628912 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.938659906 CEST	443	49719	104.16.148.64	192.168.2.3
Apr 12, 2021 15:20:25.938676119 CEST	443	49719	104.16.148.64	192.168.2.3

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 12, 2021 15:20:14.184209108 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:14.254312038 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:22.071386099 CEST	60152	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:22.130249977 CEST	53	60152	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:23.432795048 CEST	57544	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:23.490170956 CEST	53	57544	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:23.936976910 CEST	55984	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:23.952991009 CEST	64185	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:24.014493942 CEST	53	64185	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:24.014847994 CEST	53	55984	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:24.658375978 CEST	65110	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:24.725476980 CEST	53	65110	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:24.904865980 CEST	58361	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:24.963113070 CEST	53	58361	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:25.030268908 CEST	63492	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:25.089490891 CEST	53	63492	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:25.097959995 CEST	60831	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:25.157874107 CEST	53	60831	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:26.693649054 CEST	60100	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:26.761786938 CEST	53	60100	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:27.040859938 CEST	53195	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:27.097619057 CEST	53	53195	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:28.428446054 CEST	50141	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:28.454894066 CEST	53023	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:28.488500118 CEST	53	50141	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:28.520317078 CEST	53	53023	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.126795053 CEST	49563	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.130872011 CEST	51352	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.192215919 CEST	53	51352	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.208957911 CEST	53	49563	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.239492893 CEST	59349	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.306298971 CEST	53	59349	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.489119053 CEST	57084	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.501116037 CEST	58823	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.533495903 CEST	57568	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.547215939 CEST	53	57084	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.567271948 CEST	53	58823	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.582225084 CEST	53	57568	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:29.831628084 CEST	50540	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:29.896465063 CEST	53	50540	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:40.080465078 CEST	54366	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:40.141354084 CEST	53	54366	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:41.640887022 CEST	53034	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:41.694142103 CEST	53	53034	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:42.561849117 CEST	57762	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:42.613452911 CEST	53	57762	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:43.550841093 CEST	55435	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:43.599536896 CEST	53	55435	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:44.944271088 CEST	50713	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:44.992903948 CEST	53	50713	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:45.712913990 CEST	56132	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:45.783642054 CEST	53	56132	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:46.067778111 CEST	58987	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:46.116504908 CEST	53	58987	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:47.550349951 CEST	56579	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:47.615219116 CEST	53	56579	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:47.985691071 CEST	60633	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:48.059333086 CEST	53	60633	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:49.514183998 CEST	61292	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:49.578860998 CEST	53	61292	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:50.548866987 CEST	63619	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:50.597800016 CEST	53	63619	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:52.110546112 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:52.162142992 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:52.385957956 CEST	61946	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:52.444830894 CEST	53	61946	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:52.781450987 CEST	64910	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:52.830136061 CEST	53	64910	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:53.255014896 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:53.306567907 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:53.779634953 CEST	64910	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:53.817413092 CEST	52123	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:53.828377008 CEST	53	64910	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:53.884229898 CEST	53	52123	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:54.264435053 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:54.318439007 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:54.795301914 CEST	64910	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:54.846472979 CEST	53	64910	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:55.204139948 CEST	56130	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:55.210047007 CEST	56338	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:55.252794981 CEST	53	56130	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:55.272150040 CEST	53	56338	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:55.313255072 CEST	59420	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:55.370507956 CEST	53	59420	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:55.412986994 CEST	58784	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:55.461615086 CEST	53	58784	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:55.581222057 CEST	63978	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:55.638180017 CEST	53	63978	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:56.039364100 CEST	62938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:56.087970018 CEST	53	62938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:56.415349007 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:56.466754913 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:56.811038017 CEST	64910	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:56.868191957 CEST	53	64910	8.8.8.8	192.168.2.3
Apr 12, 2021 15:20:59.007155895 CEST	55708	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:20:59.064229012 CEST	53	55708	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:00.413027048 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:00.465549946 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:00.687407970 CEST	56803	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:00.753137112 CEST	53	56803	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:00.813067913 CEST	64910	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:00.861566067 CEST	53	64910	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:00.921452045 CEST	57145	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:00.973048925 CEST	53	57145	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:01.650837898 CEST	55359	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:01.719394922 CEST	53	55359	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:02.044307947 CEST	58306	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:02.101321936 CEST	53	58306	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:02.185750008 CEST	64124	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:02.253719091 CEST	53	64124	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:02.429795027 CEST	49361	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:02.480233908 CEST	53	49361	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:02.790940046 CEST	63150	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:02.861999035 CEST	53	63150	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:03.481177092 CEST	53279	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:03.532668114 CEST	53	53279	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:03.837007046 CEST	56881	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:03.895533085 CEST	53	56881	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:04.250158072 CEST	53642	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:04.312447071 CEST	53	53642	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:09.336051941 CEST	55667	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:09.394882917 CEST	53	55667	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:20.422095060 CEST	54833	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:20.470873117 CEST	53	54833	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:21.312824965 CEST	62476	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:21.361680984 CEST	53	62476	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:22.656868935 CEST	49705	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:22.705456018 CEST	53	49705	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:24.029653072 CEST	61477	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:24.094810963 CEST	53	61477	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:25.254002094 CEST	61633	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:25.311302900 CEST	53	61633	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:26.273053885 CEST	55949	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:26.321708918 CEST	53	55949	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:27.304379940 CEST	57601	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:27.353188992 CEST	53	57601	8.8.8.8	192.168.2.3
Apr 12, 2021 15:21:28.158413887 CEST	49342	53	192.168.2.3	8.8.8.8
Apr 12, 2021 15:21:28.210191011 CEST	53	49342	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 12, 2021 15:20:23.432795048 CEST	192.168.2.3	8.8.8.8	0x5e29	Standard query (0)	download.easypdfcombine.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:23.952991009 CEST	192.168.2.3	8.8.8.8	0x1863	Standard query (0)	akz.imgfarm.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:24.658375978 CEST	192.168.2.3	8.8.8.8	0x5715	Standard query (0)	ak.imgfarm.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:24.904865980 CEST	192.168.2.3	8.8.8.8	0x7075	Standard query (0)	ak.staticimgfarm.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:25.030268908 CEST	192.168.2.3	8.8.8.8	0xcdfb	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:25.097959995 CEST	192.168.2.3	8.8.8.8	0xecde	Standard query (0)	params.tb.ask.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:27.040859938 CEST	192.168.2.3	8.8.8.8	0xd501	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.126795053 CEST	192.168.2.3	8.8.8.8	0x1d0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.130872011 CEST	192.168.2.3	8.8.8.8	0xe833	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.239492893 CEST	192.168.2.3	8.8.8.8	0x6031	Standard query (0)	9560938.fls.doubleclick.net	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.501116037 CEST	192.168.2.3	8.8.8.8	0x4f76	Standard query (0)	www.google.de	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.831628084 CEST	192.168.2.3	8.8.8.8	0x717e	Standard query (0)	adservice.google.de	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:45.712913990 CEST	192.168.2.3	8.8.8.8	0x31e2	Standard query (0)	eula.mindspark.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:47.550349951 CEST	192.168.2.3	8.8.8.8	0x53f3	Standard query (0)	eula.askapplications.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:47.985691071 CEST	192.168.2.3	8.8.8.8	0x61bb	Standard query (0)	appds8093.blob.core.windows.net	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:49.514183998 CEST	192.168.2.3	8.8.8.8	0xa94a	Standard query (0)	privacyportal-cdn.onetrust.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:53.817413092 CEST	192.168.2.3	8.8.8.8	0xfe4d	Standard query (0)	support.myway.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.204139948 CEST	192.168.2.3	8.8.8.8	0xdc8e	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.210047007 CEST	192.168.2.3	8.8.8.8	0x614c	Standard query (0)	p23.zdassets.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.313255072 CEST	192.168.2.3	8.8.8.8	0xe65d	Standard query (0)	theme.zdassets.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.412986994 CEST	192.168.2.3	8.8.8.8	0xd6d5	Standard query (0)	secure.gravatar.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.581222057 CEST	192.168.2.3	8.8.8.8	0xfe18	Standard query (0)	mysearch.zendesk.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:56.039364100 CEST	192.168.2.3	8.8.8.8	0x8a9	Standard query (0)	i1.wp.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:00.687407970 CEST	192.168.2.3	8.8.8.8	0xeb51	Standard query (0)	onetrust.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:01.650837898 CEST	192.168.2.3	8.8.8.8	0x7c2c	Standard query (0)	www.onetrust.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.044307947 CEST	192.168.2.3	8.8.8.8	0xfa6d	Standard query (0)	fast.wistia.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.185750008 CEST	192.168.2.3	8.8.8.8	0xe6cf	Standard query (0)	onetrust-dev.web.onetrust.dev	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.790940046 CEST	192.168.2.3	8.8.8.8	0x1d7	Standard query (0)	onetrust.cloudflareaccess.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:03.837007046 CEST	192.168.2.3	8.8.8.8	0xb93c	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:04.250158072 CEST	192.168.2.3	8.8.8.8	0x623d	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 12, 2021 15:20:23.490170956 CEST	8.8.8.8	192.168.2.3	0x5e29	No error (0)	download.easypdfcombine.com		34.107.128.118	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:24.014493942 CEST	8.8.8.8	192.168.2.3	0x1863	No error (0)	akz.imgfarm.com	akz.imgfarm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:24.725476980 CEST	8.8.8.8	192.168.2.3	0x5715	No error (0)	ak.imgfarm.com	ak.imgfarm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:24.963113070 CEST	8.8.8.8	192.168.2.3	0x7075	No error (0)	ak.staticimgfarm.com	ak.staticimgfarm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:25.089490891 CEST	8.8.8.8	192.168.2.3	0xcdfb	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:25.089490891 CEST	8.8.8.8	192.168.2.3	0xcdfb	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:25.157874107 CEST	8.8.8.8	192.168.2.3	0xecde	No error (0)	params.tb.ask.com	slot-28504-ion.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:27.097619057 CEST	8.8.8.8	192.168.2.3	0xd501	No error (0)	geolocation.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:27.097619057 CEST	8.8.8.8	192.168.2.3	0xd501	No error (0)	geolocation.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.192215919 CEST	8.8.8.8	192.168.2.3	0xe833	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:29.192215919 CEST	8.8.8.8	192.168.2.3	0xe833	No error (0)	scontent.xx.fbcdn.net		31.13.92.14	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.208957911 CEST	8.8.8.8	192.168.2.3	0x1d0	No error (0)	googleads.g.doubleclick.net		172.217.168.2	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.306298971 CEST	8.8.8.8	192.168.2.3	0x6031	No error (0)	9560938.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:29.306298971 CEST	8.8.8.8	192.168.2.3	0x6031	No error (0)	dart.l.doubleclick.net		216.58.215.230	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.567271948 CEST	8.8.8.8	192.168.2.3	0x4f76	No error (0)	www.google.de		172.217.168.3	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:29.896465063 CEST	8.8.8.8	192.168.2.3	0x717e	No error (0)	adservice.google.de	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:29.896465063 CEST	8.8.8.8	192.168.2.3	0x717e	No error (0)	pagead46.l.doubleclick.net		172.217.168.2	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:45.783642054 CEST	8.8.8.8	192.168.2.3	0x31e2	No error (0)	eula.mindspark.com		35.244.183.133	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:47.615219116 CEST	8.8.8.8	192.168.2.3	0x53f3	No error (0)	eula.askapplications.com		35.244.183.133	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:48.059333086 CEST	8.8.8.8	192.168.2.3	0x61bb	No error (0)	appds8093.blob.core.windows.net	blob.dz5prdstr17a.store.core.windows.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:48.059333086 CEST	8.8.8.8	192.168.2.3	0x61bb	No error (0)	blob.dz5prdstr17a.store.core.windows.net		52.239.234.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:49.578860998 CEST	8.8.8.8	192.168.2.3	0xa94a	No error (0)	privacyportal-cdn.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:49.578860998 CEST	8.8.8.8	192.168.2.3	0xa94a	No error (0)	privacyportal-cdn.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:53.884229898 CEST	8.8.8.8	192.168.2.3	0xfe4d	No error (0)	support.myway.com	mywaycs.zendesk.com		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:20:53.884229898 CEST	8.8.8.8	192.168.2.3	0xfe4d	No error (0)	mywaycs.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:53.884229898 CEST	8.8.8.8	192.168.2.3	0xfe4d	No error (0)	mywaycs.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.252794981 CEST	8.8.8.8	192.168.2.3	0xdc8e	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.252794981 CEST	8.8.8.8	192.168.2.3	0xdc8e	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.272150040 CEST	8.8.8.8	192.168.2.3	0x614c	No error (0)	p23.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.272150040 CEST	8.8.8.8	192.168.2.3	0x614c	No error (0)	p23.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.370507956 CEST	8.8.8.8	192.168.2.3	0xe65d	No error (0)	theme.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.370507956 CEST	8.8.8.8	192.168.2.3	0xe65d	No error (0)	theme.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.461615086 CEST	8.8.8.8	192.168.2.3	0xd6d5	No error (0)	secure.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.638180017 CEST	8.8.8.8	192.168.2.3	0xfe18	No error (0)	mysearch.zendesk.com		104.16.51.111	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:55.638180017 CEST	8.8.8.8	192.168.2.3	0xfe18	No error (0)	mysearch.zendesk.com		104.16.53.111	A (IP address)	IN (0x0001)
Apr 12, 2021 15:20:56.087970018 CEST	8.8.8.8	192.168.2.3	0x8a9	No error (0)	i1.wp.com		192.0.77.2	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:00.753137112 CEST	8.8.8.8	192.168.2.3	0xeb51	No error (0)	onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:00.753137112 CEST	8.8.8.8	192.168.2.3	0xeb51	No error (0)	onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:01.719394922 CEST	8.8.8.8	192.168.2.3	0x7c2c	No error (0)	www.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:01.719394922 CEST	8.8.8.8	192.168.2.3	0x7c2c	No error (0)	www.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.101321936 CEST	8.8.8.8	192.168.2.3	0xfa6d	No error (0)	fast.wistia.com	dualstack.f4.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:21:02.253719091 CEST	8.8.8.8	192.168.2.3	0xe6cf	No error (0)	onetrust-dev.web.onetrust.dev		104.18.1.153	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.253719091 CEST	8.8.8.8	192.168.2.3	0xe6cf	No error (0)	onetrust-dev.web.onetrust.dev		104.18.0.153	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.861999035 CEST	8.8.8.8	192.168.2.3	0x1d7	No error (0)	onetrust.cloudflareaccess.com		104.19.194.29	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:02.861999035 CEST	8.8.8.8	192.168.2.3	0x1d7	No error (0)	onetrust.cloudflareaccess.com		104.19.195.29	A (IP address)	IN (0x0001)
Apr 12, 2021 15:21:03.895533085 CEST	8.8.8.8	192.168.2.3	0xb93c	No error (0)	snap.licdn.com	wildcard.licdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:21:04.312447071 CEST	8.8.8.8	192.168.2.3	0x623d	No error (0)	px.ads.linkedin.com	mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:21:04.312447071 CEST	8.8.8.8	192.168.2.3	0x623d	No error (0)	mix.linkedin.com	glb-na.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:21:04.312447071 CEST	8.8.8.8	192.168.2.3	0x623d	No error (0)	glb-na.mix.linkedin.com	pop-eda6.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Apr 12, 2021 15:21:04.312447071 CEST	8.8.8.8	192.168.2.3	0x623d	No error (0)	pop-eda6.mix.linkedin.com		108.174.11.69	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

download.easypdfcombine.com

eula.mindspark.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49704	34.107.128.118	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 12, 2021 15:20:23.547919989 CEST	1042	OUT	GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: download.easypdfcombine.com Connection: Keep-Alive
Apr 12, 2021 15:20:23.597281933 CEST	1043	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.17.6 Date: Mon, 12 Apr 2021 13:20:23 GMT Content-Type: text/html Content-Length: 169 Location: https://download.easypdfcombine.com/ Via: 1.1 google Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 37 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.17.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49769	35.244.183.133	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Apr 12, 2021 15:20:50.884635925 CEST	2489	OUT	GET /tos/ HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: eula.mindspark.com Connection: Keep-Alive
Apr 12, 2021 15:20:51.024823904 CEST	2495	IN	HTTP/1.1 302 Found Date: Mon, 12 Apr 2021 13:20:50 GMT Server: Apache X-Frame-Options: DENY Location: https://eula.mindspark.com/tos/ Content-Length: 215 Content-Type: text/html; charset=iso-8859-1 Via: 1.1 google Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 75 6c 61 2e 6d 69 6e 64 73 70 61 72 6b 2e 63 6f 6d 2f 74 6f 73 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://eula.mindspark.com/tos/">here</a>.</p></body></html>
Apr 12, 2021 15:20:52.679928064 CEST	2622	OUT	GET /privacypolicy/ HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: eula.mindspark.com Connection: Keep-Alive
Apr 12, 2021 15:20:52.819443941 CEST	2623	IN	HTTP/1.1 302 Found Date: Mon, 12 Apr 2021 13:20:52 GMT Server: Apache X-Frame-Options: DENY Location: https://eula.mindspark.com/privacypolicy/ Content-Length: 225 Content-Type: text/html; charset=iso-8859-1 Via: 1.1 google Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 75 6c 61 2e 6d 69 6e 64 73 70 61 72 6b 2e 63 6f 6d 2f 70 72 69 76 61 63 79 70 6f 6c 69 63 79 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://eula.mindspark.com/privacypolicy/">here</a>.</p></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 12, 2021 15:20:23.703893900 CEST	34.107.128.118	443	192.168.2.3	49706	CN=*.100sofrecipes.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Mon Feb 22 19:07:56 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Sun May 23 20:07:56 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:23.703893900 CEST	34.107.128.118	443	192.168.2.3	49706	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:25.176688910 CEST	104.16.148.64	443	192.168.2.3	49719	CN=cookielaw.org, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:25.176688910 CEST	104.16.148.64	443	192.168.2.3	49719	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:25.178374052 CEST	104.16.148.64	443	192.168.2.3	49720	CN=cookielaw.org, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:25.178374052 CEST	104.16.148.64	443	192.168.2.3	49720	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:27.222114086 CEST	104.20.184.68	443	192.168.2.3	49729	CN=onetrust.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Fri Feb 12 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Sat Feb 12 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:27.222114086 CEST	104.20.184.68	443	192.168.2.3	49729	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:27.224857092 CEST	104.20.184.68	443	192.168.2.3	49730	CN=onetrust.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Fri Feb 12 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Sat Feb 12 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:27.224857092 CEST	104.20.184.68	443	192.168.2.3	49730	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.282216072 CEST	31.13.92.14	443	192.168.2.3	49735	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.282216072 CEST	31.13.92.14	443	192.168.2.3	49735	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.322705030 CEST	31.13.92.14	443	192.168.2.3	49736	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.322705030 CEST	31.13.92.14	443	192.168.2.3	49736	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.361731052 CEST	172.217.168.2	443	192.168.2.3	49738	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:05 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:04 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.361731052 CEST	172.217.168.2	443	192.168.2.3	49738	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.363190889 CEST	172.217.168.2	443	192.168.2.3	49737	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:05 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:04 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.363190889 CEST	172.217.168.2	443	192.168.2.3	49737	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.417545080 CEST	216.58.215.230	443	192.168.2.3	49739	CN=*.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:03 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:02 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.417545080 CEST	216.58.215.230	443	192.168.2.3	49739	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.418827057 CEST	216.58.215.230	443	192.168.2.3	49740	CN=*.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:03 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:02 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:29.418827057 CEST	216.58.215.230	443	192.168.2.3	49740	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:30.027419090 CEST	172.217.168.2	443	192.168.2.3	49748	CN=*.google.de, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:38:29 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:38:28 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:30.027419090 CEST	172.217.168.2	443	192.168.2.3	49748	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:30.027472019 CEST	172.217.168.2	443	192.168.2.3	49747	CN=*.google.de, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:38:29 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:38:28 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:30.027472019 CEST	172.217.168.2	443	192.168.2.3	49747	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:45.896902084 CEST	35.244.183.133	443	192.168.2.3	49755	CN=eula.mindspark.com CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GTS CA 1D2, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Sun Feb 14 11:36:14 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Sat May 15 12:36:14 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:45.896902084 CEST	35.244.183.133	443	192.168.2.3	49755	CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:45.904267073 CEST	35.244.183.133	443	192.168.2.3	49754	CN=eula.mindspark.com CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GTS CA 1D2, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Sun Feb 14 11:36:14 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Sat May 15 12:36:14 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:45.904267073 CEST	35.244.183.133	443	192.168.2.3	49754	CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:47.759406090 CEST	35.244.183.133	443	192.168.2.3	49757	CN=eula.askapplications.com CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GTS CA 1D2, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Apr 06 04:48:54 CEST 2021 Thu Jun 15 02:00:42 CEST 2017	Mon Jul 05 04:48:54 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:47.759406090 CEST	35.244.183.133	443	192.168.2.3	49757	CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:47.766349077 CEST	35.244.183.133	443	192.168.2.3	49758	CN=eula.askapplications.com CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GTS CA 1D2, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Apr 06 04:48:54 CEST 2021 Thu Jun 15 02:00:42 CEST 2017	Mon Jul 05 04:48:54 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:47.766349077 CEST	35.244.183.133	443	192.168.2.3	49758	CN=GTS CA 1D2, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:49.686418056 CEST	104.20.184.68	443	192.168.2.3	49766	CN=*.onetrust.com, O=OneTrust LLC, L=Sandy Springs, ST=Georgia, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 21 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Wed Jul 27 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:49.686418056 CEST	104.20.184.68	443	192.168.2.3	49766	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:49.687007904 CEST	104.20.184.68	443	192.168.2.3	49765	CN=*.onetrust.com, O=OneTrust LLC, L=Sandy Springs, ST=Georgia, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 21 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Wed Jul 27 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:49.687007904 CEST	104.20.184.68	443	192.168.2.3	49765	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:54.003813982 CEST	104.16.51.111	443	192.168.2.3	49773	CN=help.mysearch.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sun Mar 21 00:39:19 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Sat Jun 19 01:39:19 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:54.003813982 CEST	104.16.51.111	443	192.168.2.3	49773	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:54.013942003 CEST	104.16.51.111	443	192.168.2.3	49772	CN=help.mysearch.com CN=R3, O=Let's Encrypt, C=US	CN=R3, O=Let's Encrypt, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Sun Mar 21 00:39:19 CET 2021 Wed Oct 07 21:21:40 CEST 2020	Sat Jun 19 01:39:19 CEST 2021 Wed Sep 29 21:21:40 CEST 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:54.013942003 CEST	104.16.51.111	443	192.168.2.3	49772	CN=R3, O=Let's Encrypt, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Oct 07 21:21:40 CEST 2020	Wed Sep 29 21:21:40 CEST 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:55.348783016 CEST	104.18.72.113	443	192.168.2.3	49775	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.348941088 CEST	104.18.72.113	443	192.168.2.3	49776	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.353573084 CEST	104.18.72.113	443	192.168.2.3	49774	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.375664949 CEST	104.18.70.113	443	192.168.2.3	49778	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.378140926 CEST	104.18.70.113	443	192.168.2.3	49777	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.465365887 CEST	104.18.70.113	443	192.168.2.3	49779	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.465627909 CEST	104.18.70.113	443	192.168.2.3	49780	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.575500965 CEST	192.0.73.2	443	192.168.2.3	49782	CN=*.gravatar.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Aug 14 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Wed Nov 16 01:00:00 CET 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.577279091 CEST	192.0.73.2	443	192.168.2.3	49783	CN=*.gravatar.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Aug 14 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Wed Nov 16 01:00:00 CET 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.623920918 CEST	104.18.72.113	443	192.168.2.3	49784	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.661474943 CEST	104.18.72.113	443	192.168.2.3	49781	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.703353882 CEST	104.18.72.113	443	192.168.2.3	49785	CN=ssl911790.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:55.749310970 CEST	104.16.51.111	443	192.168.2.3	49786	CN=mysearch.zendesk.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:55.749310970 CEST	104.16.51.111	443	192.168.2.3	49786	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:55.750212908 CEST	104.16.51.111	443	192.168.2.3	49787	CN=mysearch.zendesk.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:55.750212908 CEST	104.16.51.111	443	192.168.2.3	49787	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:20:56.495775938 CEST	192.0.77.2	443	192.168.2.3	49788	CN=*.wp.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Apr 02 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Tue Jul 05 02:00:00 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:20:56.496963978 CEST	192.0.77.2	443	192.168.2.3	49789	CN=*.wp.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Apr 02 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019	Tue Jul 05 02:00:00 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:21:00.860476017 CEST	104.20.184.68	443	192.168.2.3	49791	CN=*.onetrust.com, O=OneTrust LLC, L=Sandy Springs, ST=Georgia, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 21 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Wed Jul 27 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:00.860476017 CEST	104.20.184.68	443	192.168.2.3	49791	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:00.861546040 CEST	104.20.184.68	443	192.168.2.3	49792	CN=*.onetrust.com, O=OneTrust LLC, L=Sandy Springs, ST=Georgia, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 21 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Wed Jul 27 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:00.861546040 CEST	104.20.184.68	443	192.168.2.3	49792	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:01.830781937 CEST	104.20.184.68	443	192.168.2.3	49795	CN=*.onetrust.com, O=OneTrust LLC, L=Sandy Springs, ST=Georgia, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 21 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Wed Jul 27 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:01.830781937 CEST	104.20.184.68	443	192.168.2.3	49795	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:01.837939978 CEST	104.20.184.68	443	192.168.2.3	49794	CN=*.onetrust.com, O=OneTrust LLC, L=Sandy Springs, ST=Georgia, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu May 21 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Wed Jul 27 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:01.837939978 CEST	104.20.184.68	443	192.168.2.3	49794	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:02.554764986 CEST	104.18.1.153	443	192.168.2.3	49799	CN=onetrust.dev, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Mar 10 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Thu Mar 10 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:02.554764986 CEST	104.18.1.153	443	192.168.2.3	49799	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:02.561110020 CEST	104.18.1.153	443	192.168.2.3	49798	CN=onetrust.dev, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Mar 10 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Thu Mar 10 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:02.561110020 CEST	104.18.1.153	443	192.168.2.3	49798	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:02.960835934 CEST	104.19.194.29	443	192.168.2.3	49802	CN=ssl803409.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:21:02.961836100 CEST	104.19.194.29	443	192.168.2.3	49801	CN=ssl803409.cloudflaressl.com CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Wed Apr 07 02:00:00 CEST 2021 Thu Sep 25 02:00:00 CEST 2014 Thu Jan 01 01:00:00 CET 2004	Fri Oct 15 01:59:59 CEST 2021 Tue Sep 25 01:59:59 CEST 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=COMODO ECC Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Sep 25 02:00:00 CEST 2014	Tue Sep 25 01:59:59 CEST 2029
					CN=COMODO ECC Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Apr 12, 2021 15:21:04.644061089 CEST	108.174.11.69	443	192.168.2.3	49807	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 06 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Tue Jul 06 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:04.644061089 CEST	108.174.11.69	443	192.168.2.3	49807	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:04.658914089 CEST	108.174.11.69	443	192.168.2.3	49808	CN=px.ads.linkedin.com, O=LinkedIn Corporation, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 06 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Tue Jul 06 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 12, 2021 15:21:04.658914089 CEST	108.174.11.69	443	192.168.2.3	49808	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5488 Parent PID: 792

General

Start time:	15:20:21
Start date:	12/04/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff60b630000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 5548 Parent PID: 5488

General

Start time:	15:20:22
Start date:	12/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5488 CREDAT:17410 /prefetch:2
Imagebase:	0x1210000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report http://download.easypdfcombine.com

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5488 Parent PID: 792

General

Analysis Process: iexplore.exe PID: 5548 Parent PID: 5488

General

Disassembly