Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

http://www.booking.com

Status: finished
Submission Time: 2020-08-12 13:13:18 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    262832
  • API (Web) ID:
    422248
  • Analysis Started:
    2020-08-12 13:14:06 +02:00
  • Analysis Finished:
    2020-08-12 13:23:14 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 1
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
13.224.95.8
 United States
64.74.236.127
 United States
35.186.226.184
 United States
Click to see the 23 hidden entries
185.86.138.114
 France
52.59.18.27
 United States
18.195.197.134
 United States
5.57.16.99
 Netherlands
13.224.95.52
 United States
172.217.168.34
 United States
185.60.216.35
 Ireland
172.217.168.2
 United States
185.184.8.30
 Poland
172.217.168.70
 United States
178.250.0.130
 France
216.58.215.226
 United States
178.250.2.151
 France
35.186.220.184
 United States
141.226.228.48
 Israel
108.177.126.154
 United States
5.57.19.231
 Netherlands
172.217.168.66
 United States
37.10.0.1
 Netherlands
172.217.168.3
 United States
5.57.17.100
 Netherlands
13.224.95.43
 United States
37.10.0.220
 Netherlands

Domains

Name IP Detection
sync.outbrain.com
 0.0.0.0
sync.teads.tv
 0.0.0.0
bid.g.doubleclick.net
 0.0.0.0
Click to see the 46 hidden entries
ssp-csync.smartadserver.com
 0.0.0.0
secure.booking.com
 0.0.0.0
r.bstatic.com
 0.0.0.0
ct.pinterest.com
 0.0.0.0
q.bstatic.com
 0.0.0.0
4228414.fls.doubleclick.net
 0.0.0.0
cotads.adscale.de
 0.0.0.0
sslwidget.criteo.com
 0.0.0.0
accommodations.booking.com
 0.0.0.0
cm.g.doubleclick.net
 0.0.0.0
r-cf.bstatic.com
 0.0.0.0
static.criteo.net
 0.0.0.0
sync.taboola.com
 0.0.0.0
www.facebook.com
 0.0.0.0
adservice.google.ch
 0.0.0.0
www.booking.com
 0.0.0.0
googleads.g.doubleclick.net
 0.0.0.0
q-cf.bstatic.com
 0.0.0.0
s.pinimg.com
 0.0.0.0
cm.adform.net
 0.0.0.0
tags.tiqcdn.com
 0.0.0.0
eb2.3lift.com
 0.0.0.0
secure.c.booking.com
 5.57.19.231
static.par.vip.prod.criteo.net
 178.250.0.130
star-mini.c10r.facebook.com
 185.60.216.35
pagead46.l.doubleclick.net
 216.58.215.226
collector-pxikkul2rm.perimeterx.net
 35.186.220.184
dart.l.doubleclick.net
 172.217.168.70
rtb-csync-itx5.smartadserver.com
 185.86.138.114
creativecdn.com
 185.184.8.30
chidc2.outbrain.org
 64.74.236.127
d19l6uotjzm32g.cloudfront.net
 13.224.95.68
sc-static.net
 13.224.95.8
tr.snapchat.com
 35.186.226.184
accommodations.c.booking.com
 37.10.0.1
r.lb.bstatic.com
 5.57.17.100
www.c.booking.com
 37.10.0.220
ams.creativecdn.com
 185.184.8.30
dualstack.engagement-bus-prod-641612343.eu-central-1.elb.amazonaws.com
 18.195.197.134
widget.am5.vip.prod.criteo.com
 178.250.2.151
ih.adscale.de
 52.59.18.27
pagead.l.doubleclick.net
 172.217.168.34
q.lb.bstatic.com
 5.57.16.99
am-sync.taboola.com
 141.226.228.48
ads-bid.l.doubleclick.net
 108.177.126.154
www.google.ch
 172.217.168.3

URLs

Name Detection
https://www.booking.com/covid-19.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQPoAQH4A
https://q.bstatic.com/favicon.ico
https://www.booking.com/region.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4
Click to see the 97 hidden entries
https://sc-static.net/scevent.min.js
https://www.booking.com/content/contact-us.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjI
https://www.booking.com/business.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQ
https://www.booking.com/index.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4A
https://www.booking.com/hostels/index.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://www.booking.com/trust-and-safety.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://secure.booking.com/reviewtimeline.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4AR
https://secure.booking.com
https://www.booking.com/resorts/index.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://www.booking.com/index.es-mx.html
https://www.booking.com/index.nl.html
http://cars.booking.com/Home.do?affiliateCode=booking-com&adplat=footer&preflang=it
https://secure.booking.com/reviewtimeline.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIA
https://www.booking.com/trust-and-safety.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ
https://secure.booking.com/reviewtimeline.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7Y
https://www.booking.com/country.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHo
https://secure.booking.com/mysettings.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ
https://www.booking.com/communities/c/greece?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQ
https://www.booking.com/hotel/index.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQH
https://www.booking.com/index.sk.html
https://www.booking.com/destination.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQH
https://booking.com/pxgo?lang=en&token=UmFuZG9tSVYkc2RlIyh9YbOR38QzVgTMusIfau0cOqUBLais6l-Y7RFUZXvF7
https://r-cf.bstatic.com/static/img/tfl/group_logos/logo_booking/27c8d1832de6a3123b6ee45b59ae2f81b0d
https://www.booking.com/index.hu.html
https://www.booking.com/content/affiliates.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjI
https://www.booking.com/destination.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7Y
https://www.booking.com/genius.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4AQK
https://www.booking.com/business.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQPoAQH4A
https://q-cf.bstatic.com/static/img/theme-index/carousel_320x240/bg_boats/5b974434f444153092a0249af7
https://www.booking.com/villas/index.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQ
https://www.booking.com/searchresults.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://account.booking.com/auth/oauth2?lang=en-us&state=UtUB7pjF65Q8bUqLMMA4i1GM4e2KTtib_UcjIUU
http://www.twitter.com/
https://secure.booking.com/myreservations.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIA
https://booking.com/articles.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4AQ
https://www.booking.com/destinationfinderdeals.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4
https://www.booking.com/destinationfinderdeals.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYA
https://booking.com/articles.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH
https://r-cf.bstatic.com/static/img/flags/24/gb/b2f01d4fd94cb1420fcdbbef62c06ade1026fbbd.png
https://secure.booking.com/mywishlist.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://www.booking.com/index.sv.html
https://www.booking.com/content/about.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHo
https://r-cf.bstatic.com/static/img/theme-index/carousel_320x240/bg_campsite/6d40bef46964b8841a84cd8
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/988382855/?random
https://q-cf.bstatic.com/static/css/main_cloudfront.iq_ltr/7ad81971cc273fdf96a595e89c94d4f50d80b207.
https://4228414.fls.doubleclick.net/ddm/fls/r/src=4228414;type=funne910;cat=cross;u1=-1;u3=3;u4=3041
https://www.booking.com/guest-house/index.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIA
https://www.booking.com/content/contact-us.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjI
https://www.booking.com/index.is.html
https://r-cf.bstatic.com/static/img/theme-index/carousel_320x240/bg_resorts/6f87c6143fbd51a0bb5d15ca
https://www.booking.com/hostels/index.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://booking.com/pxgo?url=https%3A%2F%2Fbooking.kayak.com%2Fin%3Fa%3Dbdc%252Ffooter_link%26bdclc%
http://www.opensource.org/licenses/mit-license.php
https://secure.booking.com/mysettings.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://r-cf.bstatic.com/static/img/theme-index/carousel_320x240/card-image-chalet_300/8ee014fcc493c
https://booking.com/pxgo?lang=en&label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4AQKIAg
https://account.booking.com/auth/oauth2?dt=1597230981&client_id=vO1Kblk7xX9tUn2cpZLS&aid=304
https://www.booking.com/index.lv.html
https://www.booking.com/destinationfinderdeals.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4
https://www.booking.com/bed-and-breakfast/index.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG
https://www.booking.com/content/how_we_work.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARj
https://secure.booking.com/company/search.de.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIA
https://www.booking.com/articles/cosa-leggere-e-guardare-prima-di-andare-a-torino.it.html?label=gen1
https://www.booking.com/covid-19-booking-faqs.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4A
https://www.booking.com/region.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoA
https://www.booking.com/index.fi.html
https://www.booking.com/pr_ue
https://www.booking.com/content/privacy.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7
https://r-cf.bstatic.com/libs/perimeterx/px_v2.min..js
https://www.booking.com/city.fr.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4AQ
https://www.booking.com/apartments/index.es.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ
https://booking.com/pxgo?lang=en&url=https%3A%2F%2Fwww.bravofly.ch%2Fstaedtereisen%2Fbooking.html&la
https://www.booking.com/covid-19-booking-faqs.en-gb.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYAT
https://q-cf.bstatic.com/static/css/raf_cloudfront.iq_ltr/1cc6f430e334f486e67ca494f3c4230afef510e4.c
https://r-cf.bstatic.com/static/img/communities/cover-photo/300x300/united-states-of-america/34a3b1b
https://www.booking.com/content/about.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQPo
https://www.booking.com/articles/bucher-und-filme-die-lust-auf-hamburg-machen.de.html?label=gen173nr
https://q-cf.bstatic.com/static/img/twitter-image-else/566c7081f1deeaca39957e96365c3908f83b95af.jpg
https://github.com/toddmotto/echo
https://www.booking.com/index.pt-br.html
https://ct.pinterest.com/v3/
https://q-cf.bstatic.com/static/js/ski_lp_overview_panel_cloudfront/9d8e7cfd33a37ffb15285d98f6970024
https://www.booking.com/city.it.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4AQ
https://www.booking.com/articles/what-to-read-and-watch-before-visiting-new-orleans.xu.html?label=ge
https://r-cf.bstatic.com/static/img/bh/awareness/campaign/bh_aw_cpg_main_image/b0f5755d0651acbe9d3f3
https://q-cf.bstatic.com/static/js/tpi_searchresults_cloudfront/2a2cd8377620a78eeea106c1081028b6dd6a
https://www.booking.com/index.pl.html
https://www.booking.com/villas/index.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQPoA
https://www.booking.com/articles/jaw-dropping-destinations-on-everyone-s-wishlist.fr.html?label=gen1
https://join.booking.com/?lang=en-gb&aid=304142&utm_source=footer_menu&utm_medium=fronte
https://join.booking.com/?lang=es&utm_source=topbar&utm_medium=frontend&label=gen173
http://www.reddit.com/
https://www.booking.com/apartments/index.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YA
https://join.booking.com/?lang=de&aid=304142&utm_source=footer_menu&utm_medium=frontend&
https://booking.com/pxgo?url=https%3A%2F%2Fbooking.kayak.com%2Fin%3Fbdclc%3Dde-de%26a%3Dbdc%252Fsear
https://www.booking.com/bed-and-breakfast/index.html?label=gen173nr-1DCAEoggI46AdIM1gEaCyIAQGYATG4AR
https://secure.booking.com/help.html?label=gen173nr-1FCAEoggI46AdIM1gEaCyIAQGYATG4ARjIAQ7YAQHoAQH4AQ

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tr[2].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tr[1].gif
 GIF image data, version 89a, 1 x 1
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tags[1].htm
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\src=4228414;type=funne910;cat=cross;u1=-1;u3=3;u4=304142;u5=CHF;u6=-1;u7=-1;u9=-1;u10=-1;u11=-1;u12=-1;u14=-1;u15=fr;u16=-1;u17=Ur-h_veQ0RSI-vORgFtMuw;u18=-1;u19=0;u20=index;u27=0;u[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\src=4228414;type=funne910;cat=cross;u1=-1;u3=3;u4=304142;u5=CHF;u6=-1;u7=-1;u9=-1;u10=-1;u11=-1;u12=-1;u14=-1;u15=en-gb;u16=-1;u17=Ur-h_veQ0RSI-vORgFtMuw;u18=-1;u19=0;u20=index;u27=[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\scevent.min[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\px_v2.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ping[2].txt
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ping[1].txt
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\noCors[2].gif
 ID=0x55, start-CHS (0x20,0,42), end-CHS (0xaa,170,0), startsector 2867724446, 1437204565 sectors
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\noCors[1].gif
 ID=0x55, start-CHS (0x20,0,42), end-CHS (0xaa,170,0), startsector 2867724446, 1437204565 sectors
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\logo[2].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\utag.263[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\js[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\js-sha256-v1.min[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\index[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CR, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\fb6f63d62231f9fe552d79b5448620b2e63c726e[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon[1].ico
 MS Windows icon resource - 3 icons, 32x32, 16 colors, 4 bits/pixel, 24x24, 16 colors, 4 bits/pixel
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[4].txt
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[3].txt
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[2].txt
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[1].txt
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f6a51682b06f6ac87c18b8e7621014c885eae7d0[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\e141ef5515ae57f0536a5cd5cb51dabae7516571[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\437a96936c64591af902e1a9331fdb48381a1594[1].png
 PNG image data, 130 x 234, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\83ef7122074473a6566094e957ff834badb58ce6[1].png
 PNG image data, 79 x 26, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\7a0939f5a5338faf255840e895953a522335434a[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x210, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\74065694[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x238, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\73715592[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x336, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\6ffa05069b50124c993f00c998f1dfc66999c93f[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\6bc5ec89d870111592a378bbe7a2086f0b01abc4[1].png
 PNG image data, 109 x 26, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\66399546[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\64768746[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\5e1fd9cd716f4825c6c7eac5abe692c52cc64516[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\5b974434f444153092a0249af70b3678c2e22e7c[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x214, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\5132764897ca62019efeefc5ad9c296227434ba9[1].jpg
 JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 353x433, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\44d20cd12a233cfc196701b40a8c2a86faf03cbf[1].gif
 GIF image data, version 89a, 32 x 32
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dc92020627f8ae26a5d6727cef75c82262923859[1].png
 PNG image data, 24 x 96, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\312c784f761fc4f1e315742e93b9fa10d96ea67d[1].jpg
 [TIFF image data, big-endian, direntries=1], baseline, precision 8, 360x360, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\27c8d1832de6a3123b6ee45b59ae2f81b0d9d0d0[1].png
 PNG image data, 91 x 26, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\22615963add19ac6b6d715a97c8d477e8b95b7ea[1].png
 PNG image data, 300 x 50, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\20481989[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\1c9191b6a3651bf030e41e99a153b64f449845ed[1].png
 PNG image data, 70 x 26, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\121176371[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\117127047[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\106393405[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\utag[1].js
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\utag.8[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\utag.428[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\39615603[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\38437078[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\3753f376f8fe37059e84a3ac3aa13cb5cbc459e1[1].png
 PNG image data, 24 x 96, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\2454015045ef79168d452ff4e7f30bdadff0aa81[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\212218112[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\112346687[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\109725963[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\109169996[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x333, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\103951224[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x334, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\100210804[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x334, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\40890517[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7EF96E3C-DCD8-11EA-90E0-ECF4BB570DC9}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7EF96E3B-DCD8-11EA-90E0-ECF4BB570DC9}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7EF96E39-DCD8-11EA-90E0-ECF4BB570DC9}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\9f60235dc09a3ac3f0a93adbc901c61ecd1ce72e[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\core[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\client[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\b2f01d4fd94cb1420fcdbbef62c06ade1026fbbd[1].png
 PNG image data, 24 x 24, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\b2e5f2aa32b71ca0fc66aa671e4e958bcd69b7d0[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\api[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\activityi;src=4228414;type=funne910;cat=cross;u1=-1;u3=3;u4=304142;u5=CHF;u6=-1;u7=-1;u9=-1;u10=-1;u11=-1;u12=-1;u14=-1;u15=fr;u16=-1;u17=Ur-h_veQ0RSI-vORgFtMuw;u18=-1;u19=0;u20=ind[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\activityi;src=4228414;type=funne910;cat=cross;u1=-1;u3=3;u4=304142;u5=CHF;u6=-1;u7=-1;u9=-1;u10=-1;u11=-1;u12=-1;u14=-1;u15=en-us;u16=-1;u17=Ur-h_veQ0RSI-vORgFtMuw;u18=-1;u19=0;u20=[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\activityi;src=4228414;type=funne910;cat=cross;u1=-1;u3=3;u4=304142;u5=CHF;u6=-1;u7=-1;u9=-1;u10=-1;u11=-1;u12=-1;u14=-1;u15=en-gb;u16=-1;u17=Ur-h_veQ0RSI-vORgFtMuw;u18=-1;u19=0;u20=[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\a9369e77b0a359b9c66f9c618f2fc25e3b2becec[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\a14721d7698af5131b08bd34227508c729ab11bc[1].png
 PNG image data, 24 x 24, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\J1ESXR4Y.htm
 HTML document, UTF-8 Unicode text, with very long lines, with CR, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\EPRDAN5X.htm
 HTML document, UTF-8 Unicode text, with very long lines, with CR, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\6NVCUKT7\www.booking[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\9aeedf4b943c722367e5e901681463bf543c5afd[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\988382855[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\8ee014fcc493cb3334e25893a1dee8c6d36ed0ba[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\891162048c0a9c104752ed3c4462f2c230e2fabc[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x180, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\879757069[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\87213372[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7ad81971cc273fdf96a595e89c94d4f50d80b207[1].css
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\6f87c6143fbd51a0bb5d15ca3b9cf84211ab0884[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\6d40bef46964b8841a84cd88793fc8f0fa6663d9[1].jpg
 [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 320x213, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\577174af68cd012ac76305dcf142e7949006d3c8[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\57584488[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
 #