Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

https://hes32-ctp.trendmicro.com/wis/clicktime/v1/query?url=https%3a%2f%2fbusicorner.wordpress.com&umid=9f210cc2-ed11-4ac7-8217-bd9bf8dcd3cf&auth=144056baf7302d777acad187aac74d4b9ba425e1-21b1eed6d4fa17a21b38438be65c37008b1ab72d

Status: finished
Submission Time: 2020-08-12 13:42:19 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    262863
  • API (Web) ID:
    422333
  • Analysis Started:
    2020-08-12 13:44:21 +02:00
  • Analysis Finished:
    2020-08-12 13:53:03 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 1
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
35.201.67.47
 United States
18.158.128.62
 United States
3.220.121.95
 United States
Click to see the 42 hidden entries
35.244.159.8
 United States
35.156.19.236
 United States
208.100.17.177
 United States
151.101.113.108
 United States
91.228.74.226
 United Kingdom
185.64.189.115
 United Kingdom
35.190.59.101
 United States
54.148.238.87
 United States
176.34.151.72
 Ireland
52.94.232.32
 United States
52.30.187.36
 United States
87.248.118.22
 United Kingdom
192.0.76.3
 United States
52.59.125.145
 United States
185.184.8.30
 Poland
104.16.68.69
 United States
87.248.118.23
 United Kingdom
192.0.78.23
 United States
34.98.64.218
 United States
151.139.128.11
 United States
178.162.133.149
 Netherlands
192.0.78.13
 United States
192.0.72.30
 United States
185.33.220.240
 Netherlands
185.33.220.244
 Netherlands
216.58.215.226
 United States
213.19.147.150
 United Kingdom
18.195.7.149
 United States
192.0.73.2
 United States
192.0.77.38
 United States
192.0.72.20
 United States
35.244.245.222
 United States
18.197.99.6
 United States
18.156.0.31
 United States
192.0.77.32
 United States
23.54.113.52
 United States
185.29.133.58
 United Kingdom
3.125.82.176
 United States
188.165.27.173
 France
185.255.84.152
 France
34.201.203.209
 United States
185.255.84.150
 France

Domains

Name IP Detection
fastlane.rubiconproject.com
 0.0.0.0
pixel.rubiconproject.com
 0.0.0.0
c1.adform.net
 0.0.0.0
Click to see the 84 hidden entries
acdn.adnxs.com
 0.0.0.0
cookiex.ngd.yahoo.com
 0.0.0.0
match.adsrvr.org
 0.0.0.0
defaultcustomheadersdata.files.wordpress.com
 0.0.0.0
cm.g.doubleclick.net
 0.0.0.0
sync.targeting.unrulymedia.com
 0.0.0.0
token.rubiconproject.com
 0.0.0.0
id.sharedid.org
 0.0.0.0
hb-api.omnitagjs.com
 0.0.0.0
secure.adnxs.com
 0.0.0.0
sync.go.sonobi.com
 0.0.0.0
ssc-cms.33across.com
 0.0.0.0
pm.w55c.net
 0.0.0.0
eus.rubiconproject.com
 0.0.0.0
pool.automattic.iponweb.net
 176.34.151.72
visitor-fra02.omnitagjs.com
 185.255.84.152
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud
 18.156.0.31
ib.anycast.adnxs.com
 185.33.220.244
s0.wp.com
 192.0.77.32
busicorner.wordpress.com
 0.0.0.0
eb2.3lift.com
 0.0.0.0
ads.creative-serving.com
 0.0.0.0
ib.adnxs.com
 0.0.0.0
hes32-ctp.trendmicro.com
 0.0.0.0
pixel.quantserve.com
 0.0.0.0
ad.turn.com
 0.0.0.0
x.bidswitch.net
 0.0.0.0
busicorner.files.wordpress.com
 0.0.0.0
visitor.omnitagjs.com
 0.0.0.0
pixel.advertising.com
 0.0.0.0
public-api.wordpress.com
 192.0.78.23
ads.yahoo.com
 0.0.0.0
s.skimresources.com
 0.0.0.0
ups.analytics.yahoo.com
 0.0.0.0
image6.pubmatic.com
 0.0.0.0
sync.teads.tv
 0.0.0.0
p.rfihub.com
 0.0.0.0
sync.mathtag.com
 0.0.0.0
rtb.mfadsrvr.com
 0.0.0.0
ads.pubmatic.com
 0.0.0.0
s.pubmine.com
 0.0.0.0
match.deepintent.com
 34.201.203.209
cs.media.net
 23.54.113.52
s8.files.wordpress.com
 192.0.72.30
sharedid-2070269664.us-east-1.elb.amazonaws.com
 3.220.121.95
elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com
 18.158.128.62
us-u.openx.net
 35.244.159.8
s3.files.wordpress.com
 192.0.72.20
creativecdn.com
 185.184.8.30
pugm22000nf.pubmatic.com
 185.64.189.115
c0.pubmine.com
 192.0.77.38
id.rlcdn.com
 35.244.245.222
ams-1-sync.go.sonobi.com
 178.162.133.149
match-1943069928.eu-west-1.elb.amazonaws.com
 52.30.187.36
lb.wordpress.com
 192.0.78.13
sync.1rx.io
 213.19.147.150
cdn.districtm.io
 104.16.68.69
pagead.l.doubleclick.net
 216.58.215.226
v4q8x2v6.stackpathcdn.com
 151.139.128.11
elb-aws-fr-clickdistrict-1651093077.eu-central-1.elb.amazonaws.com
 18.195.7.149
prebid.media.net
 23.54.113.52
eu-u.openx.net
 34.98.64.218
global.px.quantserve.com
 91.228.74.226
asf-ris-prod-neurope.northeurope.cloudapp.azure.com
 168.63.67.155
pixel.wp.com
 192.0.76.3
green.erne.co
 188.165.27.173
dualstack.engagement-bus-prod-641612343.eu-central-1.elb.amazonaws.com
 52.59.125.145
dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com
 3.125.82.176
r.skimresources.com
 35.190.59.101
s.amazon-adsystem.com
 52.94.232.32
ds-geoycpi-uno.gycpi.b.yahoodns.net
 87.248.118.23
alb-aws-fr-bswx-1-445786803.eu-central-1.elb.amazonaws.com
 35.156.19.236
prod.ups-eu-central-1.aolp-ds-prd.aws.oath.cloud
 18.197.99.6
pixel.33across.com
 208.100.17.177
stats.wp.com
 192.0.76.3
contextual.media.net
 23.54.113.52
ams.creativecdn.com
 185.184.8.30
0.gravatar.com
 192.0.73.2
hb-api-fra02.omnitagjs.com
 185.255.84.150
u.openx.net
 34.98.64.218
pixel-origin.mathtag.com
 185.29.133.58
t.skimresources.com
 35.201.67.47
ctp.wtp.trendmicro.com
 54.148.238.87
prod.appnexus.map.fastly.net
 151.101.113.108

URLs

Name Detection
https://busicorner.files.wordpress.com/2019/10/qrcode.53783463.png?w=700
https://s0.wp.com/wp-content/themes/h4/global.css?m=1420737423h&cssminify=yes
https://busicorner.wordpress.com/industrial-equipment//playlists
Click to see the 97 hidden entries
https://www.google.%/ads/ga-audiences?
https://sync.teads.tv/iframe
https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
https://busicorner.wordpress.com/beauty-wellness/?share=facebook
https://s0.wp.com/_static/??/wp-includes/js/jquery/jquery.js
https://busicorner.files.wordpress.com/2019/10/qrcode.53783463.png?w=144
https://busicorner.wordpress.com/slide-menu
http://www.twitter.com/
https://wp.me/s6HWxn-welcome
https://busicorner.wordpress.com/author/busicorner/
https://s.pubmine.com/wl_pixel?pc=WMgSlzGtEcBkcCunNx090I7HxLkqMhZexX_9W8J2TMgXrt3z0Gyhx50A0G5cuacoaj
https://ads.pubmatic.com/AdServer/js/showad.js#PIX&kdntuid=1&SPug=true&predirect=https%3A%2F%2Fs.pub
http://www.amazon.com/
https://pixel.wp.com/b.gif?v=noscript
https://sync.mathtag.com/sync/img?mt_exid=10008&redir=https%3A%2F%2Floadm.exelator.com%2Fload%2F%3Fp
https://ssc-cms.33across.com/ps/?m=xch&rt=html&id=0010b00002CphGRAAZ&gdpr_consent=&ru=https%3A%2F%2F
https://busicorner.files.wordpress.com/2019/10/qrcode.53783463.png?w=150
https://wordpress.com/following/edit
https://bit.ly/2sflq47ress.com/used-machinery-2/
https://sync.teads.tv/ex/sync
https://busicorner.wordpress.com/#slide-menu
https://s.pubmine.com/click2/WMgSlzGtEcBkcCunNx090I7HxLkqMhZexX_9W8J2TMgXrt3z0Gyhx50A0G5cuacoaj3fxes
http://www.nytimes.com/
https://wordpress.com/read/blogs/
https://busicorner.wordpress.com/beauty-wellness/?share=twitter
https://s1.wp.com/opensearch.xml
https://ib.adnxs.com/getuid?https://loadm.exelator.com/load/?p=204&g=013&bi=$UID&j=0
https://s0.wp.com/_static/??-eJxtjNsKwjAQRH/ImDTQ1jyI32LbbdiQm91di39vRPFBhIF5OGdG71VhnqMsQDq03AS2x6e
https://busicorner.wordpress.com/used-machinery-2/
https://busicorner.wordpress.com/proposal/?share=twitter
http://forums.wordpress.com/;icon-uri=https://s0.wp.com/i/favicon.ico
https://wp.me/6HWxn
https://github.com/zohararad/audio5js
https://busicorner.wordpress.com/#content
https://x.skimresources.com/?provider=zeotap_dbm
https://ads.pubmatic.com/AdServer/js/showad.js
https://c1.adform.net/serving/cookie/match?party=22
https://busicorner.wordpress.com/feed/
https://busicorner.wordpress.com/proposal/?share=facebook
https://busicorner.wordpress.com/comments/feed/
https://busicorner.wordpress.com/2020/06/04/welcome/?share=facebook
https://busicorner.wordpress.com/$
https://match.adsrvr.org/track/cmf/openx?oxid=4e44d758-512e-7af3-d1fc-ebd591afe625&gdpr=0
https://busicorner.wordpress.com/Root
https://x.skimresources.com/?provider=exelate&gdpr=$
https://www.youtube.com/embed/XJay3ZAIt8U?version=3&rel=1&fs=1&autohide=2&showse
https://busicorner.wordpress.com/beauty-wellness/
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
https://busicorner.wordpress.com/qrcode-53784467/
https://s0.wp.com/_static/??-eJyVj90KwjAMhV/IGidM5oX4LF0Xu2j6Q5tSfHsr3mz4A96EHE6
https://wp.me/P6HWxn-3u
https://wp.me/P6HWxn-3r
https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156204&gdpr=0&gdpr_consent=
https://s0.wp.com/_static/??-eJydketOwzAMhV
https://busicorner.files.wordpress.com/2019/10/qrcode.53784467.png?w=200
https://s0.wp.com/_static/??-eJydkdFqwzAMRX9omhhNHvow9i2uo6RKbNlYctLPnzPoVjootC9GvvI5IAu3DD6JkRjOigO
https://github.com/yonran
http://en.wordpress.com/abuse/
http://fontello.comsocial-logosRegularsocial-logossocial-logosVersion
https://s0.wp.com/_static/??-eJydk01SwzAMhS
https://wordpress.com/?ref=vertical_footer
http://postmessage.freebaseapps.com)
https://public-api.wordpress.com/geo/
https://busicorner.wordpress.com/ZBusicorner
https://widgets.wp.com/likes/master.html?ver=20190321
https://s0.wp.com/wp-content/mu-plugins/actionbar/actionbar.css?m=1560469195h&cssminify=yes
https://x.skimresources.com/?provider=tapad
https://api.skimlinks.mgr.consensu.org
https://acdn.adnxs.com/ib/static/usersync/v3/async_usersync.html
https://busicorner.wordpress.com/xmlrpc.php?rsd
https://r.skimresources.com/api/
https://cm.g.doubleclick.net/pixel?google_nid=exelate&google_cm&google_sc
https://public-api.wordpress.com/oembed/?format=json&url=https%3A%2F%2Fbusicorner.wordpress.com%
https://stats.g.doubleclick.net/j/collect?
https://s.pubmine.com/match?bidder_id=13&external_user_id=b44da98c-3fa5-4a1b-9519-4ee1f6ba3922&ssp_d
http://www.JSON.org/json2.js
https://public-api.wordpress.com/oembed/?format=xml&url=https%3A%2F%2Fbusicorner.wordpress.com%2
https://wp.me/P6HWxn-V
https://bit.ly/2sflq47
https://cm.g.doubleclick.net/pixel?google_nid=skimlinks_ddp&google_cm
http://gmpg.org/xfn/11
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie/Simple_document.cookie_framework
https://s0.wp.com/wp-includes/wlwmanifest.xml
https://wordpress.com/?ref=footer_blog
https://eus.rubiconproject.com/usync.html
https://busicorner.wordpress.com/qrcode-53783463/
https://www.youtube.com/channel/UCIi4rUoLROCwKwU7YVzdsWQ/playlists
https://www.youtube.co
https://busicorner.wordpress.com/used-machinery-2/?share=facebook
https://widgets.wp.com/likes/master.html?ver=20190321#ver=20190321
https://dmp.adform.net/serving/cookie/match/?party=1012
https://vimeo.com/143151068
http://www.reddit.com/
https://s0.wp.com/_static/??/wp-content/mu-plugins/comment-likes/css/comment-likes.css
https://busicorner.files.wordpress.com/2019/10/qrcode.53783463.png
https://busicorner.wordpress.com/feed/;icon-uri=https://s0.wp.com/i/favicon.ico
http://metaweb.com

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\errorPageStrings[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\info_48[2]
 PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\info_48[1]
 PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\iframe[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[2]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gprofiles[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ga[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\g[5].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\g[4].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\g[3].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\g[2].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\g[1].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jizYRExUiTo99u79D0e0ycmO[1].woff
 Web Open Font Format, TrueType, length 67356, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\dnserror[1]
 HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\cksync[2].gif
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\cksync[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\cksync[1].gif
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bullet[2]
 PNG image data, 15 x 15, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bullet[1]
 PNG image data, 15 x 15, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\background_gradient[2]
 JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\background_gradient[1]
 JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\_static[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\_static[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\Genericons[1].eot
 Embedded OpenType (EOT), Genericons family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\user_sync[1].htm
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\_static[2].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\_static[2].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\_static[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\_static[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\NewErrorPageTemplate[2]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\NewErrorPageTemplate[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\MQ494Z1R.htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ErrorPageTemplate[2]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ErrorPageTemplate[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\725X1342.skimlinks[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\user_sync[3].htm
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\user_sync[2].htm
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ErrorPageTemplate[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\used-machinery-2[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\showad[2].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\showad[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\sd[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\proposal[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\pixel[1].png
 PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\navcancl[1]
 HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\match[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\khaos[1].jpg
 JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x1, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jizdRExUiTo99u79D0e8fOydIRUb[1].woff
 Web Open Font Format, TrueType, length 52208, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jizaRExUiTo99u79D0yEww[1].woff
 Web Open Font Format, TrueType, length 71868, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\background_gradient[1]
 JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ata[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\async_usersync[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\_static[2].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\_static[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\_static[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ErrorPageTemplate[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\EJRVQgYoZZY2vCFuvAFYzrk[1].woff
 Web Open Font Format, TrueType, length 52324, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\EJRSQgYoZZY2vCFuvAnt66qcVy0[1].woff
 Web Open Font Format, TrueType, length 45836, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\bullet[1]
 PNG image data, 15 x 15, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{BEB2D9E0-DCDC-11EA-90E5-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B73FECAE-DCDC-11EA-90E5-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B73FECAC-DCDC-11EA-90E5-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\TGJOGRUS\busicorner.wordpress[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[8].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\4[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\2[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\wp-emoji-release.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\w[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\usync[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\user_sync[1].htm
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\qrcode.53786073[1].png
 PNG image data, 150 x 150, 8-bit grayscale, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\qrcode.53783463[1].png
 PNG image data, 200 x 200, 1-bit grayscale, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\pd[1].htm
 HTML document, ASCII text, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\navcancl[1]
 HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\info_48[1]
 PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\httpErrorPagesScripts[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DCYN0JNQ\ads.pubmatic[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[7].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[6].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[5].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[4].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[3].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[2].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\g[1].gif
 GIF image data, version 89a, 6 x 5
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\errorPageStrings[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\city1[1].jpg
 [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], progressive, precision 8, 1440x600, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\checksync[1].htm
 HTML document, ASCII text, with very long lines
 #