Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

http://113452.bibigor.com/index

Status: finished
Submission Time: 2020-08-11 11:44:12 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    261373
  • API (Web) ID:
    418300
  • Analysis Started:
    2020-08-11 11:45:26 +02:00
  • Analysis Finished:
    2020-08-11 11:53:48 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 2
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
74.125.0.23
 United States
172.217.168.34
 United States
104.31.81.4
 United States
Click to see the 3 hidden entries
34.91.134.130
 United States
172.217.168.33
 United States
74.125.173.167
 United States

Domains

Name IP Detection
de.gewinncode.t500track29.com
 104.31.81.4
pagead46.l.doubleclick.net
 172.217.168.34
asf-ris-prod-neurope.northeurope.cloudapp.azure.com
 168.63.67.155
Click to see the 11 hidden entries
photos-ugc.l.googleusercontent.com
 172.217.168.33
r1.sn-ab5l6nzl.googlevideo.com
 74.125.0.23
r2.sn-1gieen7e.googlevideo.com
 74.125.173.167
113452.bibigor.com
 34.91.134.130
s.ytimg.com
 216.58.215.238
yt3.ggpht.com
 0.0.0.0
googleads.g.doubleclick.net
 0.0.0.0
r1---sn-ab5l6nzl.googlevideo.com
 0.0.0.0
www.youtube.com
 0.0.0.0
static.doubleclick.net
 0.0.0.0
r2---sn-1gieen7e.googlevideo.com
 0.0.0.0

URLs

Name Detection
http://de.gewinncode.t500track29.com/images/success-li.png
http://de.gewinncode.t500track29.com/abuse_report.html
https://www.youtube.com/embed/Upg0Hvk8tZ0?mute=0&autoplay=1&controls=1&disablekb=0&l
Click to see the 97 hidden entries
http://de.gewinncode.t500track29.com/fonts/mem8YaGs126MiZpBA-UFUZ0dbck.woff
http://de.gewinncode.t500track29.com/js/device.min.js
https://youtu.be/
http://youtube.com/streaming/metadata/segment/102015
http://de.gewinncode.t500track29.com/terms.html
http://www.twitter.com/
http://de.gewinncode.t500track29.com/css/swiper.min.css
http://de.gewinncode.t500track29.com/js/getdetector.js
http://www.amazon.com/
http://de.gewinncode.t500track29.com/images/crypto-bg3.jpg
http://de.gewinncode.t500track29.com/js/youtubeUP.js
http://de.gewinncode.t500track29.com/css/stylesheet.css
https://www.youtube.com/watch?v=Upg0Hvk8tZ0
http://de.gewinncode.t500track29.com/css/style.css
http://de.gewinncode.t
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1Root
http://de.gewinncode.t500track29.com/images/info-bg-2.png
http://de.gewinncode.t500track29.com/images/ft.png
http://de.gewinncode.t500track29.com/js/jquery.min.js
http://www.idangero.us/
http://de.gewinncode.t500track29.com/images/person-bg-2.png
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1&
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1
http://de.gewinncode.t500track29.com/js/swiper.min.js
http://www.live.com/
http://www.wikipedia.com/
http://de.gewinncode.t500track29.com/images/81.jpg
http://de.gewinncode.t500track29.com/fonts/glyphicons-halflings-regular.woff
http://de.gewinncode.t500track29.com/images/form-bg-2.png
http://fontawesome.io/license
http://de.gewinncode.t500track29.com/js/custom.js
http://jqueryvalidation.org/
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#faqs
http://de.gewinncode.t500track29.com/js/bootstrap.min.js
http://de.gewinncode.t500track29.com/js/jquery.validate.min.js
http://de.gewinncode.t500track29.com/css/bootstrap-theme.min.css
http://de.gewinncode.t500track29.com/privacy.htmlf87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#signu
https://www.youtube.com/embed/metjgze-uZY?mute=1&autoplay=1&controls=1&disablekb=0&l
http://de.gewinncode.t500track29.com/favicon.ico
https://youtube.com/api/drm/fps?ek=uninitialized
http://www.youtube.com
http://www.nytimes.com/
http://de.gewinncode.t500track29.com/images/crypto-bg5.jpg
http://de.gewinncode.t500track29.com/css/bootstrap.min.css
https://s.ytimg.com/yts/jsbin/www-widgetapi-vflN2g023/www-widgetapi.js
http://de.gewinncode.t500track29.com/images/forbes.png
http://de.gewinncode.t500track29.com/images/time.png
http://de.gewinncode.t500track29.com/fonts/mem8YaGs126MiZpBA-UFWZ0dbck.woff
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#user
http://getbootstrap.com)
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1x
http://de.gewinncode.t500track29.com/js/bitcoin-widget.jsv=20
https://admin.youtube.com
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&afRoot
http://de.gewinncode.t500track29.com/privacy.html
https://www.youtube.com/iframe_api
http://de.gewinnc
http://de.gewinncode.t500track29.com/fonts/mem8YaGs126MiZpBA-UFWp0dbck.woff
https://www.youtube.com
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#home
http://de.gewinncode.t500track29.com/fonts/glyphicons-halflings-regular.eot
http://de.gewinncode.t500track29.com/07gw
http://youtube.com/streaming/otf/durations/112015
http://de.gewinncode.t500track29.com/js/index.js
http://de.gewinncode.t500track29.com/images/logo_crop.png
http://de.gewinncode.t500track
http://de.gewinncode.t500track29.com/images/crypto-bg.jpg
http://de.gewinncode.t500track29.com/images/info-bg-1.png
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#live
http://de.gewinncode.t500track29.com/images/83.jpg
http://de.gewinncode.t500track29.com/images/cnn.png
http://de.gewinncode.t500track29.com/images/person-bg-3.png
http://113452.bibigor.com/index
http://de.gewinncode.t500track29.com/images/form-bg-1.png
http://de.gewinncode.t500track29.com/images/favicon.png
http://de.gewinncode.t500track29.com/css/css.css
https://gist.github.com/b16ae13905aee59b946c54fd555cc80c
https://github.com/twbs/bootstrap/blob/master/LICENSE)
http://de.gewinncode.t500track29.com/js/commonJs.js
http://www.youtube.com/videoplayback
http://www.youtube.com/
http://de.gewinncode.t500track29.com/fonts/mem8YaGs126MiZpBA-UFW50dbck.woff
http://de.gewinncode.t500track29.com/images/20.jpg
http://de.gewinncode.t500track29.com/css/font-awesome.min.css
http://youtube.com/yt/2012/10/10
http://fontawesome.io
http://www.idangero.us/swiper/
http://de.gewinncode.t500track29.com/js/script.js
http://de.gewinncode.t500track29.com/fonts/mem8YaGs126MiZpBA-UFVp0dbck.woff
http://www.youtube.com/watch?v=Upg0Hvk8tZ0
http://de.gewinncode.t500track29.com/terms.htmllf87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#signup
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1500tr
http://de.gewinncode.t500track29.com/fonts/mem8YaGs126MiZpBA-UFVZ0d.woff
https://www.youtube.com/generate_204?cpn=
http://de.gewinncode.t500track29.com/?session=c9b1f87a4a814bb4bb3c397df7b5fc96&aff_id=225&fpp=1#sign
http://www.reddit.com/
http://de.gewinncode.t500track29.com/images/ceo2.jpg

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\bootstrap.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\time[1].png
 PNG image data, 95 x 37, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\terms[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\logo_crop[1].png
 JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 195x37, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\jquery.validate.min[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\glyphicons-halflings-regular[1].woff
 Web Open Font Format, TrueType, length 23424, version 1.0
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\ft[1].png
 PNG image data, 169 x 23, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\form-bg-1[1].png
 PNG image data, 82 x 82, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\favicon[1].png
 PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\device.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\crypto-bg5[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x255, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\cnn[1].png
 PNG image data, 56 x 26, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\bootstrap.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\videoplayback[1].m4a
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\bitcoin-widget[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\KFOmCnqEu92Fr1Mu4mxM[1].woff
 Web Open Font Format, TrueType, length 19824, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff
 Web Open Font Format, TrueType, length 21528, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\20[1].jpg
 JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 339x218, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\www-widgetapi[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\videoplayback[1].mp4
 ISO Media, MPEG v4 system, Dynamic Adaptive Streaming over HTTP
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\videoplayback[1].m4a
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\success-li[1].png
 PNG image data, 42 x 36, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\script[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\preloader[1].gif
 GIF image data, version 89a, 530 x 260
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\person-bg-3[1].png
 PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\font-awesome.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\videoplayback[2].mp4
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\videoplayback[2].m4a
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\videoplayback[1].mp4
 ISO Media, MPEG v4 system, Dynamic Adaptive Streaming over HTTP
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\videoplayback[1].m4a
 ISO Media, MPEG v4 system, Dynamic Adaptive Streaming over HTTP
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\unnamed[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\swiper.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\style[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\remote[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\privacy[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\person-bg-1[1].png
 PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\mem8YaGs126MiZpBA-UFW50dbck[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\glyphicons-halflings-regular[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\mem8YaGs126MiZpBA-UFVZ0d[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\fetch-polyfill[1].js
 Pascal source, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\css[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\bootstrap-theme.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\base[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\abuse_report[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\Upg0Hvk8tZ0[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OTUW0Q90\81[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 339x218, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\www-embed-player[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\videoplayback[3].mp4
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\videoplayback[2].mp4
 ISO Media, MPEG v4 system, Dynamic Adaptive Streaming over HTTP
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\G62TDH9B\videoplayback[1].mp4
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\list_ajax[1].json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\jquery.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\info-bg-1[1].png
 PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\index[1].js
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\endscreen[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\embed[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\crypto-bg[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x680, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\ceo2[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x379, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\83[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 339x218, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\6TXCDK4P.htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\wlm7n14\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\mem8YaGs126MiZpBA-UFUZ0dbck[1].woff
 Web Open Font Format, TrueType, length 11748, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FA4D40B5-DC02-11EA-90E0-ECF4BB2D2496}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F007880F-DC02-11EA-90E0-ECF4BB2D2496}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{F007880D-DC02-11EA-90E0-ECF4BB2D2496}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\KFOjCnqEu92Fr1Mu51S7ACc6CsI[1].woff
 Web Open Font Format, TrueType, length 21564, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\info-bg-2[1].png
 PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\h4zuOQ4o6OBv7RNXF7-4fGPGpjqaUjHC_so6TlKVP64[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\getdetector[1].js
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\form-bg-2[1].png
 PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\forbes[1].png
 PNG image data, 80 x 22, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\favicon[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\custom[1].js
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\crypto-bg3[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x561, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\commonJs[1].js
 UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\captions[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\ad_status[1].js
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9QTQHWWN\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
 Web Open Font Format, TrueType, length 20012, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\V2ZQ25VX\www.youtube[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\videoplayback[3].mp4
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\videoplayback[2].mp4
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\videoplayback[1].mp4
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\videoplayback[1].m4a
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\swiper.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\stylesheet[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\person-bg-2[1].png
 PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\mem8YaGs126MiZpBA-UFWp0dbck[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\mem8YaGs126MiZpBA-UFWZ0dbck[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\mem8YaGs126MiZpBA-UFWJ0dbck[1].woff
 Web Open Font Format, TrueType, length 20952, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3Y2ADQKS\mem8YaGs126MiZpBA-UFVp0dbck[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #