Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

https://www.globalportsholding.com/covid19

Status: finished
Submission Time: 2020-09-21 10:19:29 +02:00
Clean

Comments

Tags

Details

  • Analysis ID:
    287963
  • API (Web) ID:
    471060
  • Analysis Started:
    2020-09-21 10:19:30 +02:00
  • Analysis Finished:
    2020-09-21 10:26:48 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 1
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
152.199.21.141
 United States
93.184.220.70
 European Union
172.217.23.66
 United States
Click to see the 14 hidden entries
185.60.216.19
 Ireland
157.240.20.19
 United States
91.93.188.77
 Turkey
104.244.42.130
 United States
157.240.9.23
 United States
104.244.42.1
 United States
172.217.18.162
 United States
3.232.6.76
 United States
104.17.79.107
 United States
74.125.71.155
 United States
31.13.92.14
 Ireland
31.13.92.36
 Ireland
31.13.92.37
 Ireland
152.199.21.118
 United States

Domains

Name IP Detection
www.facebook.com
 0.0.0.0
external-frt3-2.xx.fbcdn.net
 0.0.0.0
abs.twimg.com
 0.0.0.0
Click to see the 37 hidden entries
www.googletagservices.com
 0.0.0.0
l.facebook.com
 0.0.0.0
api.twitter.com
 0.0.0.0
stats.g.doubleclick.net
 0.0.0.0
stories.isu.pub
 0.0.0.0
photo.isu.pub
 0.0.0.0
consentcdn.cookiebot.com
 0.0.0.0
securepubads.g.doubleclick.net
 0.0.0.0
consent.cookiebot.com
 0.0.0.0
pbs.twimg.com
 0.0.0.0
www.linkedin.com
 0.0.0.0
static.isu.pub
 0.0.0.0
connect.facebook.net
 0.0.0.0
static-exp1.licdn.com
 0.0.0.0
static.xx.fbcdn.net
 0.0.0.0
assets.isu.pub
 0.0.0.0
www.globalportsholding.com
 0.0.0.0
issuu.com
 3.232.6.76
scontent-frx5-1.xx.fbcdn.net
 185.60.216.19
twitter.com
 104.244.42.1
pagead46.l.doubleclick.net
 172.217.23.66
stats.l.doubleclick.net
 74.125.71.155
cs45.wac.edgecastcdn.net
 93.184.220.70
fbcdn.net
 31.13.92.36
z-m.c10r.facebook.com
 31.13.92.37
scontent-frt3-1.xx.fbcdn.net
 31.13.92.14
globalportsholding.com
 91.93.188.77
star-mini.c10r.facebook.com
 31.13.92.36
fbsbx.com
 31.13.92.36
tpop-api.twitter.com
 104.244.42.130
scontent.xx.fbcdn.net
 157.240.9.23
partnerad.l.doubleclick.net
 172.217.18.162
cdnjs.cloudflare.com
 104.17.79.107
scontent-frt3-2.xx.fbcdn.net
 157.240.20.19
facebook.com
 31.13.92.36
cs1404.wpc.epsiloncdn.net
 152.199.21.118
cs510.wpc.edgecastcdn.net
 152.199.21.141

URLs

Name Detection
https://www.total-croatia-news.com/editorial/43707-croatia-corona-travel
https://www.linkedin.com/company/barcelona-cruise-port?trk=similar-pages_result-card_full-click
http://www.amazon.com/
Click to see the 97 hidden entries
https://www.sardegnaturismo.it/en/guide-travelers-0
https://gist.github.com/459efb035d862da61faf
http://www.viaggiaresicuri.it/approfondimenti-insights/saluteinviaggio
https://static.xx.fbcdn.net/rsrc.php/v3/y7/l/0
https://www.globalportsholding.com/management(GLOBAL
https://www.globalportsholding.com/index.php
https://www.instagram.com/globalportsholding/
https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0
https://use.typekit.net
https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.js
https://static.xx.fbcdn.net/rsrc.php/v3/yf/l/0
https://lca1-mobile-tracking-frontend-vip-1.corp.linkedin.com/li/track
https://civilna-zastita.gov.hr/
https://www.globalportsholding.com/social-responsibility
https://abs.twimg.com/favicons/twitter.ico
http://bxslider.com
https://www.linkedin.com/legal/cookie-policy
https://www.linkedin.com/company/antiguacruiseport?trk=organization-update_share-update_update-text
https://github.com/js-cookie/js-cookie
http://www.regione.emilia-romagna.it/coronavirus
https://maratondelahabana.com/en/
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://www.globalportsholding.com/about(GLOBAL
http://www.typography.comCopyright
https://www.regione.sardegna.it/j/v/2573?&s=1&v=9&c=94254&n=10&nd=1
https://www.linkedin.com/legal/cookie-policy?trk=d_org_guest_company_overview_footer-cookie-policy
http://bugs.jquery.com/ticket/6724
http://xdsoft.net/jqplugins/datetimepicker/
https://www.linkedin.com/company/glyhoir?trk=similar-pages_result-card_full-click
https://press.linkedin.com/about-linkedin?trk=d_org_guest_company_overview_footer-about
http://www.turismo.ra.it/eng/Events/Events-and-initiatives/News/Tourism-in-Ravenna_-preventative-mea
https://edreamsmitjabarcelona.com/
https://github.com/imakewebthings/jquery-waypoints/blob/master/licenses.txt
https://www.linkedin.com/company/clia-cruise-lines-international-association-?trk=organization-updat
https://static.xx.fbcdn.net/rsrc.php/v3/ya/l/0
https://static.xx.fbcdn.net/rsrc.php/v3/y9/l/0
https://ab.gov.ag/pdf/covid_news/guidelines/Guidelines_for_Food_Service_Establishments.pdf
http://stevenwanderski.com
https://static.xx.fbcdn.net/rsrc.php/v3/yj/l/0
https://ab.gov.ag/pdf/COVID_19%20Guide.pdf
http://www.bodrumcruiseport.com
https://ab.gov.ag/pdf/covid_news/SI_No_16.pdf
https://lnkd.in/e5YMtiT?trk=organization-update_share-update_update-text
https://www.linkedin.com/company/antiguacruiseport?trk=similar-pages_result-card_full-click
https://static.xx.fbcdn.net/rsrc.php/v3/ys/l/0
https://www.linkedin.com/login?session_redirect=https%3A%2F%2Fwww%2Elinkedin%2Ecom%2Fcompany%2Fgloba
http://modernizr.com/download/#-csstransitions-shiv-cssclasses-prefixed-testprop-testallprops-dompre
http://www.salute.gov.it/portale/nuovocoronavirus/archivioNormativaNuovoCoronavirus.jsp?lingua=itali
http://https://www.gazzettaufficiale.it/attiAssociati/1/;jsessionid=MSjsY6pYw52bwMpxDmVTDA__.ntc-as2
http://getbootstrap.com)
https://www.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy
https://www.globalportsholding.com/covid19v
https://www.cookiebot.com
https://gist.github.com/e951a1b8fecffe650f84
http://www.portodelisboa.pt/portal/pls/portal/docs/1/7550067.PDF
https://www.linkedin.com/help/linkedin/answer/34593?lang=en&trk=d_org_guest_company_overview_foo
https://www.linkedin.com/accessibility?trk=d_org_guest_company_overview_footer-accessibility
https://www.internalfb.com/intern/invariant/
http://www.antalya-airport.aero/anasayfa
https://hsgm.saglik.gov.tr/en/
https://tracking.corp.linkedin.com/li/track/
https://cdnjs.cloudflare.com/ajax/libs/fancybox/3.3.5/jquery.fancybox.min.css
https://www.globalportsholding.com/android-icon-192x192.pngoN
http://benalman.com/projects/jquery-misc-plugins/#scrollbarwidth
https://www.globalportsholding.com/admin/uploads/Board-diversity-policy-final.pdf
https://ab.gov.ag/pdf/covid_news/SI_No_17.pdf
https://www.linkedin.com/jobs/global-ports-holding-plc-jobs-worldwide?f_C=1356424&trk=top-card_t
http://www.globalrunbodrum.com
https://static.xx.fbcdn.net/rsrc.php/v3/yA/l/0
https://www.globalportsholding.com/about
http://www.antalyacruiseport.com
http://www.typography.com/support/eula.html.http://www.typography.com/support/eula.htmlGotham
https://vn.usembassy.gov/u-s-citizen-services/covid-19-information/
https://www.globalportsholding.com/our-founder(GLOBAL
http://www.puertos.es/es-es/Paginas/NoticiasCoro.aspx
https://www.globalportsholding.com/social-responsibility(GLOBAL
https://www.globalportsholding.com/awards-recognitiontyng.com/android-icon-192x192.png
http://fancyapps.com/fancybox/
https://static.xx.fbcdn.net/rsrc.php/v3/yt/l/0
https://www.linkedin.com/company/global-port?trk=similar-pages_result-card_full-click
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/en.c4e94ee5.js.map
https://mt.linkedin.com/in/stephen-xuereb-b0816712?trk=organization-update_share-update_update-text
https://www.globalportsholding.com/management
http://www.typography.com/support/eula.html.A
https://koronavirus.hr/en
https://google.analtyics.com/ga.js
http://www.montenegro.travel/en/news/1692
https://www.linkedin.com/signup/cold-join?session_redirect=https%3A%2F%2Fwww%2Elinkedin%2Ecom%2Fsear
https://www.linkedin.com/company/global-ports-holding
https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/KcmF4-NGKJc.png
http://www.typography.com/support/eula.html
https://www.linkedin.com/company/global-ports-holding/logos/favicons/v1/favicon.ico
https://assets.isu.pub/document-structure/200909214047-e057bad3fc13a0bf00992427ef082632/v1/a3ad54edc
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/bundle.NetworkInstrumen
https://stats.g.doubleclick.net/j/collect
https://static.xx.fbcdn.net/rsrc.php/yo/r/iRmz9lCMBD2.ico
https://www.hzjz.hr/en/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\FWmFxqA8xyY[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\TweenMax.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\PL1sMLehMAU[1].png
 PNG image data, 24 x 24, 8-bit colormap, non-interlaced
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\PAYTrgkf_kk[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\N6I1OT_8IUf[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\MJKKpd_PvvS[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\MEq27h9ZlCO[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\Lid5Y_fENNm[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\H-JboSZztIH[1].png
 PNG image data, 33 x 1776, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\GothamNarrow-Thin[1].otf
 OpenType font data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\GothamNarrow-Book[1].otf
 OpenType font data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\GothamNarrow-Bold[1].woff
 Web Open Font Format, TrueType, length 28832, version 0.0
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\GothamNarrow-Bold[1].eot
 Embedded OpenType (EOT), Gotham Narrow Bold family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ab90b1a19a80f733df2d04d49e042ede[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 476x595, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\EHnLxTNvUWK[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\DiD8WSePDTj[1].png
 PNG image data, 24 x 24, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\D6bvjrVshnC[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojIWWaw[1].woff
 Web Open Font Format, TrueType, length 69732, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\AT9YNs6Rbpt[1].png
 PNG image data, 24 x 24, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\8[1].jpg
 [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:04:06 18:39:22], baseline, precision 8, 1200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\80_original_file_I0[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1217, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\72_original_file_I1[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x810, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\71883466_2117323088371404_1736670481404133376_n[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 526x296, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\71016318_2526613524050872_108812901954879488_n[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\6cGGR4cZEtv[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\d284af782b6baa61f3c81b47aae4222c[1].jpg
 [TIFF image data, little-endian, direntries=12, height=595, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=476], baseline, precision 8, 476x595, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gtm[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\gpt[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\footer[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\font-awesome.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[2].ico
 MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\f6b5f5c60df02c871193616babc5a6be[1].jpg
 [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 350x450, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\f40ff7112fd7a567985a5072722996e6[1].jpg
 [TIFF image data, little-endian, direntries=12, height=450, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=350], baseline, precision 8, 350x450, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\errorPageStrings[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\ed7612861ad7e8a5070b89b7ea4a4904[1].png
 PNG image data, 150 x 100, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\eMY-GI1xG-h[1].js
 C source, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\down[1]
 PNG image data, 15 x 15, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\dnserror[1]
 HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\68cqfIb7npY[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\d031d4f0dae74bff9be772467af840f4[1].jpg
 [TIFF image data, little-endian, direntries=12, height=595, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=476], baseline, precision 8, 476x595, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\config-2020-09-21-08[1].json
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\client[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\classie[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\boxedeb[1].png
 PNG image data, 3 x 3, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\bc29436ad088129b512d2ef5c07a0050[1].png
 PNG image data, 150 x 100, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\b28WI_3uGaT[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\aribg8IY1Uo[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\adria[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 725x475, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\about_img[1].jpg
 [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:02:20 15:50:01], progressive, precision 8, 255x166, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\017[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\016[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\-PAXP-deijE[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\-K1j6OoJO4b[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\BDBKUY8S\GMKquicktime[1].dat
 ISO Media, Apple iTunes Video (.M4V) Video
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\018[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x394, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
 XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{CB92E2A7-FC2E-11EA-90E8-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{BF975105-FC2E-11EA-90E8-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B647A7B5-FC2E-11EA-90E8-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B647A7B3-FC2E-11EA-90E8-ECF4BBEA1588}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MDM7GZAG\www.facebook[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\LWUT8AEG\twitter[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\IJGTDB11\consentcdn.cookiebot[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\6WITDFT5\www.linkedin[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\23473199_1536544006436646_766129297126133968_n[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\5S4XsEXBmrG[1].png
 PNG image data, 16 x 16, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\563807_476660205728355_1974659064_n[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\52422274_987161314811197_5793761133974257664_n[2].png
 PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\52422274_987161314811197_5793761133974257664_n[1].png
 PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\4[1].jpg
 [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:04:06 18:38:31], baseline, precision 8, 1200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\45_original_file_I0[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x810, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\42231097_2151538231558046_5623239679508742144_n[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\38e8e7d379208284d90094be4aa3d316[1].jpg
 [TIFF image data, little-endian, direntries=12, height=595, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=476], baseline, precision 8, 476x595, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\37160845_2187140214648109_8365162636819562496_n[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 56x56, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2e4b969452d5edb646e539d79f83a281[1].jpg
 [TIFF image data, little-endian, direntries=12, height=595, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=476], baseline, precision 8, 476x595, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\2710e8d477f9db4e8e0d2dbf67a2fdf3[1].jpg
 [TIFF image data, little-endian, direntries=12, height=450, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=350], baseline, precision 8, 350x450, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\26904427_1780698095334975_223289927658339646_n[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\6WITDFT5\issuu[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\22339615_1174108682689808_6418758307565537951_o[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 56x56, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\21314704_1792707837410766_3570979034806927020_n[1].jpg
 JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 56x56, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\1b987f909e8faee640e35fbd911e4c62[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x450, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\1[1].jpg
 [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:04:06 18:37:55], baseline, precision 8, 1200x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\18156098_1343093719105260_4883729861871256559_o[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\1487645_6012475414660_1439393861_n[1].png
 PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\119094594_10158286544595660_61413494986680338_o[1].png
 PNG image data, 56 x 56, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\10987346[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\07[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 725x475, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\05[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 725x475, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\03[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 725x475, frames 3
 #