top title background image
flash

http://rs112.zol.co.zw

Status: finished
Submission Time: 2020-07-31 15:44:59 +02:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    254923
  • API (Web) ID:
    406256
  • Analysis Started:
    2020-07-31 15:46:48 +02:00
  • Analysis Finished:
    2020-07-31 15:56:53 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 48
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
87.248.118.23
United Kingdom
212.82.100.181
United Kingdom
41.79.28.6
Zimbabwe
Click to see the 15 hidden entries
31.13.86.36
Ireland
66.216.86.92
United States
172.217.20.2
United States
13.227.157.110
United States
151.101.14.109
United States
151.101.0.217
United States
64.233.167.154
United States
31.13.86.4
Ireland
80.75.66.243
United Kingdom
34.120.202.204
United States
13.227.157.35
United States
18.206.22.193
United States
151.101.114.109
United States
172.217.18.67
United States
172.217.16.98
United States

Domains

Name IP Detection
ep.chatpath.com
0.0.0.0
vimeo-video.map.fastly.net
151.101.114.109
sp.analytics.yahoo.com
0.0.0.0
Click to see the 33 hidden entries
m.addthis.com
0.0.0.0
www.facebook.com
0.0.0.0
s7.addthis.com
0.0.0.0
secure.adnxs.com
0.0.0.0
i.vimeocdn.com
0.0.0.0
apikeys.civiccomputing.com
0.0.0.0
edge.gycpi.b.yahoodns.net
87.248.118.22
connect.facebook.net
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
s.yimg.com
0.0.0.0
g.msn.com
0.0.0.0
googleads.g.doubleclick.net
0.0.0.0
f.vimeocdn.com
0.0.0.0
player.vimeo.com
0.0.0.0
m.addthisedge.com
0.0.0.0
scontent.xx.fbcdn.net
31.13.86.4
pagead46.l.doubleclick.net
172.217.20.2
d4hm2u4pioc0c.cloudfront.net
13.227.157.110
stats.l.doubleclick.net
64.233.167.154
rs112.zol.co.zw
41.79.28.6
apikeys-lb.civiccomputing.com
80.75.66.243
spdc-global.pbp.gysm.yahoodns.net
212.82.100.181
vimeo.com
151.101.0.217
vimeo.map.fastly.net
151.101.0.217
star-mini.c10r.facebook.com
31.13.86.36
luxsci.com
66.216.86.92
fresnel.vimeocdn.com
34.120.202.204
pagead.l.doubleclick.net
172.217.16.98
elb-agepath-17684.aptible.in
18.206.22.193
cdn.mxpnl.com
130.211.5.208
djrufvackyewl.cloudfront.net
13.227.157.35
ib.anycast.adnxs.com
37.252.173.38
www.google.ch
172.217.18.67

URLs

Name Detection
https://luxsci.com/hipaa-compliant-hostinglv
https://d4hm2u4pioc0c.cloudfront.net/icons/service/fb/001-Secure-FTP.png
https://www.linkedin.com/in/erikkangas
Click to see the 97 hidden entries
https://djrufvackyewl.cloudfront.net/s3/2018/logo/mjhs.png
https://luxsci.com/hipaa-compliant-email-marketing
https://djrufvackyewl.cloudfront.net/s3/logo/gannett-logo.png
https://luxsci.com/abo
https://m.addthisedge.com
https://m.addthis.com
https://luxsci.com/
https://djrufvackyewl.cloudfront.net/s3/2020-logos/Forms-Web.png
https://stats.g.doubleclick.net/dc.js
https://www.google.%/ads/ga-audiences?
https://webmail.luxsci.com/
https://luxsci.com/hipaa-compliant-high-volume-secure-email-sending
https://djrufvackyewl.cloudfront.net/s3/design2018/SecuritySeals2018.png
http://www.twitter.com/
http://www.amazon.com/
https://s.yimg.com/wi/ytc.js
https://luxsci.com/sec
http://schema.org/PostalAddress
https://d4hm2u4pioc0c.cloudfront.net
https://djrufvackyewl.cloudfront.net/s3/2020/secureform/Processing_website-forms.png?v1
https://luxsci.com/perl/member/login.pl?settheme=1(
https://djrufvackyewl.cloudfront.net/s3/design2018/FooterSocial.png
https://djrufvackyewl.cloudfront.net/s3/2018/icon-envelop.png
http://www.wikipedia.com/
https://vimeo.com/ablincoln/vuid
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
https://luxsci.com/favicon-32x32.png?v=pgeBe6QXX4
https://luxsci.com/H
https://djrufvackyewl.cloudfront.net/s3/company/Zach-600.jpg
https://djrufvackyewl.cloudfront.net/s3/2019/LuxSciLocation.jpg
http://ckeditor.com/license
https://luxsci.com/perl/member/forgot_pass.pl?settheme=1&email=&language=en
https://djrufvackyewl.cloudfront.net/s3/2018/icon-clock.png
https://djrufvackyewl.cloudfront.net/s3/2020/secureform/Processing_PDF-forms.png?v1
https://djrufvackyewl.cloudfront.net/s3/2020-logos/SMTP-TLS.png
https://d4hm2u4pioc0c.cloudfront.net/icons/png/o/office/16x16/undo.png
https://www.linkedin.com/in/jasontkaufman/
https://luxsci.securevideo.com/
https://luxsci.com/pac
https://djrufvackyewl.cloudfront.net/s3/2018/logo/hplogo_ymca.png
https://ep.chatpath.com
https://djrufvackyewl.cloudfront.net/s3/2018/LuxSci-Name-Logo-26-light.png
https://player.vimeo.com/NOTICE.txt
http://www.nytimes.com/
https://djrufvackyewl.cloudfront.net/s3/company/Erik-600.jpg
https://luxsci.easydns.net/login.php/
https://djrufvackyewl.cloudfront.net/s3/2020-logos/LuxSci-SecureForm.png
https://djrufvackyewl.cloudfront.net/s3/design2018/main-logo.png
https://d4hm2u4pioc0c.cloudfront.net/icons/service/fb/004-Slack.png
https://djrufvackyewl.cloudfront.net/s3/2020/climber_final.jpg);background-repeat:no-repeat;backgrou
https://s.yimg.com
https://player.vimeo.com/video/240086662
https://securesend.luxsci.com/
http://www.reddit.com/
https://luxsci.com/package-levels.htmlng
https://djrufvackyewl.cloudfront.net/s3/2020-logos/LuxSci-SmartHosting.png
https://luxsci.com/hipaa-compliant-email-marketingRHIPAA-compliant
https://stats.g.doubleclick.net/j/collect
https://luxsci.com/consultation4Be
http://getbootstrap.com)
https://djrufvackyewl.cloudfront.net/s3/design2018/LuxChat.png
https://djrufvackyewl.cloudfront.net/s3/2016/hipaa-ebook3.png
https://djrufvackyewl.cloudfront.net/s3/2020-logos/WebHosting.png
https://luxsci.com/hipaa-compliant-forms
https://djrufvackyewl.cloudfront.net/s3/2020-logos/SecureLine.png
https://luxsci.com/about-LuxSci
https://luxsci.com/contact-us
https://djrufvackyewl.cloudfront.net/s3/2020-logos/Firewalls.png
https://luxsci.com//secure-email-services.html
http://luxhv.com/
https://www.linkedin.com/in/krista-wolfe-barton-76924b12/
https://stats.g.doubleclick.net/r/collect?t=dc&aip=1&_r=3&
https://djrufvackyewl.cloudfront.net/s3/2018/logo/hplogo_athena.png
https://djrufvackyewl.cloudfront.net/s3/2018/icon-email.png
https://luxsci.com/perl/member/members.pl
http://stats.g.doubleclick.net
https://securechat.luxsci.com/
https://djrufvackyewl.cloudfront.net/s3/2020-logos/SSL-TLS.png
https://wordpress.org/plugins/duplicator/
https://djrufvackyewl.cloudfront.net/s3/2020-logos/Enterprise.png
https://stats.g.doubleclick.net/j/collect?
https://www.linkedin.com/in/zach-miller-318453a7/
https://luxsci.com/extranet/privacy.html
https://mediprocity.com/
https://luxsci.com/per
https://d4hm2u4pioc0c.cloudfront.net/icons/png/o/office/16x16/delete.png
https://luxsci.com/perl/member/resources/tickets.pl?tree=newticket
https://djrufvackyewl.cloudfront.net/s3//logo/CVS-Logo.png
https://d4hm2u4pioc0c.cloudfront.net/icons/service/fb/003-Database.png
https://luxsci.com/blog/extended-validation-ev-ssl-certificates.html
https://luxsci.com/affiliates
https://luxsci.com/contact-usiant-hosting
https://djrufvackyewl.cloudfront.net/s3/design2018/logo.png
https://luxsci.com/blog/is-a-click-here-to-agree-checkbox-really-legally-binding.html
https://luxsci.com/secure-email-services.html
https://djrufvackyewl.cloudfront.net/s3/2020-logos/LuxSci-PHV.png
https://d4hm2u4pioc0c.cloudfront.net/icons/png/o/blue_dark_grey/16x16/signpost2.png

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\contact-us[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\663261878[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 961x454, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\base[1].js
UTF-8 Unicode text, with very long lines
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\WebHosting[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\SecureLine_Diagram_July2020-1000[1].png
PNG image data, 1000 x 648, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\SecureLine[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\LuxSciLocation[1].jpg
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Pixelmator 3.8.3, datetime=2019:05:05 09:05:07], baseline, precision 8, 1000x393, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\LuxSci-SmartHosting[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\LuxChat[1].png
PNG image data, 255 x 109, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\LinkedIn-24[1].png
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\IsolatedEnvironments[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\Hipaa-compliant-high-volume-secure-email-sending[1].png
PNG image data, 400 x 300, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\Enterprise_PHV_Diagramb[1].png
PNG image data, 1000 x 696, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\coma-icon2[1].png
PNG image data, 136 x 117, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\240086662[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\1525529811079187[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\10100343[2].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\10100343[1].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\011-Notice-Icon[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\009-WebHook[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\004-Slack[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\ytc[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\vuid.min[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\v[2].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\v[1].json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\tr[5].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\icon-envelop[1].png
PNG image data, 36 x 30, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\v[1].json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\tr[3].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\tr[2].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\tr[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\theme_vX.css[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\style[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\pdf-logo[1].png
PNG image data, 195 x 195, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\main-logo[1].png
PNG image data, 137 x 26, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\login_shared[1].js
UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\login[1].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\keyboard[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\icon-marker[1].png
PNG image data, 32 x 40, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\tr[4].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\hplogo_usameribank[1].png
PNG image data, 115 x 23, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\hplogo_athena[1].png
PNG image data, 115 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\home[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\hipaa-compliant-hosting[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\hipaa-compliant-forms[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\hand_thumb_up[1].png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\fbevents[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\f[1].txt
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\dot[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\document_text[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\document_tag[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\Processing_PDF-forms[1].png
PNG image data, 472 x 382, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\P2HGHFIK.htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\Mailer[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\LuxSci-PHV[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\BILH[1].png
PNG image data, 103 x 55, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\1525529811079187[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\10100343[2].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\10100343[1].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\01-Certified-Compliance[1].png
PNG image data, 200 x 150, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\008-Web-Aides[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\001-Secure-FTP[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\po60zt0\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\Processing_website-forms[1].png
PNG image data, 472 x 382, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{DE2A8F91-D37F-11EA-90E0-ECF4BB82F7E0}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D7D2EF62-D37F-11EA-90E0-ECF4BB82F7E0}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D7D2EF60-D37F-11EA-90E0-ECF4BB82F7E0}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\hipaa-ebook2[1].png
PNG image data, 314 x 213, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\tr[3].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\tr[2].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\tr[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\symbol_questionmark[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\star[1].png
PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\player[1].css
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\mjhs[1].png
PNG image data, 115 x 32, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\icon-clock[1].png
PNG image data, 36 x 35, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\hplogo_delta[1].png
PNG image data, 143 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\hplogo_chelan[1].png
PNG image data, 108 x 55, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\hipaa-ebook3[1].png
PNG image data, 304 x 218, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\SDQA8LEC\luxsci[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\hipaa-compliant-email-marketing[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\gearwheels[1].png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\gannett-logo[1].png
PNG image data, 115 x 36, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\fbevents[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\email[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\dc[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\arrow-right[1].png
PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\SecuritySeals2018[1].png
PNG image data, 600 x 59, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\SSL-TLS[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\SMTP-TLS[1].png
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\QZG7FCV4.htm
HTML document, ASCII text
#