Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

http://sur.ly/i/mywork.thrivent.com/

Status: finished
Submission Time: 2020-10-30 22:52:29 +01:00
Clean

Comments

Tags

Details

  • Analysis ID:
    307784
  • API (Web) ID:
    517360
  • Analysis Started:
    2020-10-30 22:52:29 +01:00
  • Analysis Finished:
    2020-10-30 22:59:07 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
clean
Score: 2
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
13.224.102.83
 United States
104.17.243.204
 United States
52.49.171.198
 United States
Click to see the 43 hidden entries
104.26.10.185
 United States
104.17.71.176
 United States
64.202.112.191
 United States
161.69.17.94
 United States
13.224.102.49
 United States
52.45.203.114
 United States
104.17.233.204
 United States
64.211.58.123
 United States
40.76.84.176
 United States
13.224.102.94
 United States
3.214.152.179
 United States
172.217.168.34
 United States
104.16.215.237
 United States
185.60.216.19
 Ireland
35.201.112.186
 United States
104.26.11.185
 United States
13.224.102.77
 United States
44.233.14.248
 United States
54.173.41.122
 United States
104.18.27.190
 United States
104.16.18.94
 United States
35.186.194.58
 United States
87.250.250.119
 Russian Federation
52.9.41.146
 United States
199.60.103.31
 Canada
104.22.0.180
 United States
108.177.126.155
 United States
104.18.21.191
 United States
35.175.43.167
 United States
13.224.102.68
 United States
87.250.251.119
 Russian Federation
13.224.102.23
 United States
104.19.155.83
 United States
18.203.124.74
 United States
185.60.216.6
 Ireland
104.19.154.83
 United States
216.58.215.226
 United States
185.63.144.5
 United States
185.60.216.35
 Ireland
104.17.112.176
 United States
104.17.212.204
 United States
13.224.101.41
 United States
54.221.246.158
 United States

Domains

Name IP Detection
script.crazyegg.com
 0.0.0.0
connect.facebook.net
 0.0.0.0
mc.yandex.com
 0.0.0.0
Click to see the 82 hidden entries
cx.atdmt.com
 0.0.0.0
assets.calendly.com
 0.0.0.0
m.addthis.com
 0.0.0.0
mywork.thrivent.com
 0.0.0.0
www.mywot.com
 0.0.0.0
scripts.kissmetrics.com
 0.0.0.0
static.hotjar.com
 0.0.0.0
js.driftt.com
 0.0.0.0
px.ads.linkedin.com
 0.0.0.0
stats.g.doubleclick.net
 0.0.0.0
z.moatads.com
 0.0.0.0
visitor-scoring.marketlinc.com
 0.0.0.0
amplify.outbrain.com
 0.0.0.0
securepubads.g.doubleclick.net
 0.0.0.0
trc-1505028960.us-east-1.elb.amazonaws.com
 35.175.43.167
monitor.clickcease.com
 40.76.84.176
atlas.c10r.facebook.com
 185.60.216.6
mywork.gslb.thrivent.com
 64.211.58.123
mywot.com
 44.233.14.248
bam-cell.nr-data.net
 0.0.0.0
tr.outbrain.com
 0.0.0.0
saxp.zedo.com
 0.0.0.0
snap.licdn.com
 0.0.0.0
i.kissmetrics.com
 0.0.0.0
vars.hotjar.com
 0.0.0.0
www.clickcease.com
 0.0.0.0
s7.addthis.com
 0.0.0.0
www.linkedin.com
 0.0.0.0
js-agent.newrelic.com
 0.0.0.0
www.facebook.com
 0.0.0.0
www.google.co.uk
 216.58.215.227
trc.kissmetrics.com
 0.0.0.0
www.northpass.com
 0.0.0.0
script.hotjar.com
 0.0.0.0
northpass.marketlinc.com
 0.0.0.0
insight.adsrvr.org
 0.0.0.0
adservice.google.co.uk
 0.0.0.0
www.googletagservices.com
 0.0.0.0
v1.addthisedge.com
 0.0.0.0
googleads.g.doubleclick.net
 0.0.0.0
scontent.xx.fbcdn.net
 185.60.216.19
q.quora.com
 3.214.152.179
tracking.g2crowd.com
 104.18.27.190
cdnjs.cloudflare.com
 104.16.18.94
vars-live-cf.hotjar.com
 13.224.102.94
js.hs-scripts.com
 104.17.212.204
static-live-cf.hotjar.com
 13.224.102.68
pagead.l.doubleclick.net
 216.58.215.226
no-cache.hubspot.com
 104.19.155.83
track.hubspot.com
 104.19.155.83
kmccs-201209-cert-2056600847.us-east-1.elb.amazonaws.com
 54.221.246.158
star-mini.c10r.facebook.com
 185.60.216.35
adxprs-nc-298422198.us-west-1.elb.amazonaws.com
 52.9.41.146
dl7g9llrghqi1.cloudfront.net
 13.224.102.77
js.hs-analytics.net
 104.17.71.176
sur.ly
 54.173.41.122
www.getapp.com
 104.22.0.180
d2mvl3dkxvehny.cloudfront.net
 13.224.102.23
in.hotjar.com
 52.49.171.198
siteadvisor.com
 161.69.17.94
mc.yandex.ru
 87.250.251.119
edge.fullstory.com
 35.201.112.186
marketlinc-prod1.33rtaidtis.us-east-1.elasticbeanstalk.com
 52.45.203.114
script-live-cf.hotjar.com
 13.224.102.49
group14.sites.hscoscdn10.net
 199.60.103.31
partnerad.l.doubleclick.net
 216.58.215.226
pop-tln1-alpha.mix.linkedin.com
 185.63.144.5
rs.fullstory.com
 35.186.194.58
doug1izaerwt3.cloudfront.net
 13.224.101.41
insight-566961044.eu-west-1.elb.amazonaws.com
 18.203.124.74
js.hsleadflows.net
 104.17.233.204
d1x6e7o1hj3963.cloudfront.net
 13.224.102.83
cdn2.hubspot.net
 104.17.243.204
img.sur.ly
 104.26.11.185
js.hsadspixel.net
 104.17.112.176
cdn.sur.ly
 104.26.11.185
f.hubspotusercontent10.net
 104.16.215.237
stats.l.doubleclick.net
 108.177.126.155
app.hubspot.com
 104.19.154.83
nydc1.outbrain.org
 64.202.112.191
pagead46.l.doubleclick.net
 172.217.168.2
js.hs-banner.com
 104.18.21.191

URLs

Name Detection
https://www.hotjarconsent.com/fi.html
https://www.northpass.com/hs-fs/hubfs/customers-icon.png?width=190&height=165&name=customers
https://www.northpass.com/hs-fs/hubfs/gig-icon.png?width=96&height=72&name=gig-icon.png
Click to see the 97 hidden entries
http://sur.ly/i/mywork.thrivent.com/
https://googleads.g.doubleclick.net/pagead/html/r20201027/r20190131/zrt_lookup.html#
https://googleblog.blogspot.com/2011/06/updated-and-more-detailed-transparency.html
http://sur.ly/surly/images/platforms/drpl.png
http://sur.ly/contacts
https://www.northpass.com/hubfs/Copied%20Assets/U3GM_Header/jquery.nb.offscreenMenuToggle.min.js
https://www.northpass.com/hs-fs/hubfs/gig-icon.png?width=64&height=48&name=gig-icon.png
https://www.justice.gov/criminal-ccips/file/1017511/download
http://app.kissmetrics.com/debugger.msg
https://cdn.sur.ly/css/alert.css
https://brasil.googleblog.com/2014/06/adeus-ao-orkut.html
http://www.hubspot.com
http://flickity.metafizzy.co
https://www.hotjar.com
https://www.hotjarconsent.com/zh.html
https://sur.ly/notify?d=
https://ngrx.io/guide/migration/v8
https://www.un.org/en/universal-declaration-human-rights/index.html
https://www.northpass.
http://googleads.g.doubleclick.net
https://www.northpass.com/hubfs/Copied%20Assets/U3GM_Footer/js.cookie.min.js
https://www.northpass.com/customers?hsLang=en
https://www.northpass.com/hs-fs/hubfs/NBM/northpass_logo.png?width=1719&height=428&name=nort
https://www.northpass.com/hs-fs/hub/392014/hub_generated/module_assets/13953048603/1603819990850/mod
https://siteadvisor.com/sitereport.html?url=mywork.thrivent.com
https://app.northpass.com/login
http://sur.ly/i/mywork.thrivent.com/
https://cdn.sur.ly/favicon-16x16.png
http://sur.ly/i/mywork.thrivent.com/amp
https://www.northpass.com/solutions/employees
https://googleblog.blogspot.com/2010/06/update-on-china.html
https://www.northpass.com/product-updates
https://www.northpass.com/hs-fs/hubfs/partners-icon.png?width=195&height=195&name=partners-i
https://www.northpass.com/elearning-glossary
https://www.northpass.com/contact
https://transparency.wikimedia.org/
https://www.northpass.com/hs-fs/hub/392014/hub_generated/module_assets/1571094942934/module_13995770
https://gmail.googleblog.com/2010/01/default-https-access-for-gmail.html
https://www.northpass.com/hs-fs/hubfs/customers-icon.png?width=76&height=66&name=customers-i
https://img.sur.ly/thumbnails/620x343/l/lunsfordshonda.com.png
https://support.northpass.com/en/
https://www.northpass.com/hubfs/what-is-customer-training.jpg)
http://sur.ly/o/mywork.thrivent.com/AA000014z
https://spascorecard.api.mywot.com
https://mths.be/mit
https://www.cyberghostvpn.com/en/transparency-report
https://www.northpass.com/get-started-training-on-demand?hsLang=en
https://www.northpass.com/hubfs/Lyft_grey.png
https://www.northpass.com/hubfs/Homepage_2000x600-min.png
https://www.reddit.com/wiki/transparency
https://f.hubspotusercontent10.net/hub/392014/hubfs/Homepage_2000x600-min.png?length=1920&name=H
https://www.nytimes.com/2006/01/20/technology/20google.html
https://www.northpass.com/solutions/gig-workers
https://www.northpass.com/hs-fs/hubfs/NBM/northpass_logo.png?width=8595&height=2138&name=nor
https://openjsf.org/
https://sur.ly/faq
https://www.certificate-transparency.org/known-logs
https://support.mywot.com/hc
https://newzealand.googleblog.com/2020/06/introducing-transparency-report-for-new.html
https://cdn.sur.ly/js/jquery.min.js
https://www.northpass.com/hs-fs/hubfs/employees-icon.png?width=183&height=195&name=employees
https://sur.ly/stat.php?id=
https://px.ads.linkedin.com/collect?
https://www.trademe.co.nz/trust-safety/transparency-reporting
https://www.northpass.com/hubfs/builder-illustration-alpha.svg
https://www.northpass.com/hubfs/cabify-logo-color-min.png
https://cdnjs.cloudflare.com/ajax/libs/normalize/3.0.3/normalize.min.css
http://sur.ly/contactshrivent.com/neighboursing/search?url=mywork.thrivent.comN
http://sur.ly/contacts
https://www.northpass.com/about-us
https://www.twilio.com/legal/transparency
https://www.blueberry.io)
https://js.hs-scripts.com/392014.js
https://nid.naver.com/user2/privacycenter/globalInfo.nhn
https://www.northpass.com/hs-fs/hubfs/partners-icon.png?width=130&height=130&name=partners-i
https://cyber.law.harvard.edu
https://transparency.oath.com/prior-reports.html
https://cdn.sur.ly/android-chrome-192x192.png
http://mc.yandex.ru/metrika/watch.js
https://js.driftt.com/include/
https://www.northpass.com/hubfs/Airbnb_grey.png
https://www.mywot.com/images/favicon.png
https://user.api.mywot.com
http://underscorejs.org/LICENSE
http://sur.ly/js/panel-ads.js
https://www.hotjarconsent.com/sv.html
https://cdn.sur.ly/surly.new/css/custom.css
https://auth.api.mywot.com
https://germany.googleblog.com/2018/07/update-netzdg.html
https://www.sicher-im-netz.de/
http://127.0.0.1
http://cdn.sur.ly/surly/images/platforms/wp.png
https://www.gesetze-im-internet.de/netzdg/BJNR335210017.html
https://trc.kissmetrics.com
https://www.lookout.com/legal/transparency-report
https://www.hotjarconsent.com/pl.html
https://www.northpass.com/hubfs/ms-icon-310x310.png

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery-1.7.1[1].js
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\module_13953048603_U3M_Hero[1].js
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\medium-circle[1].svg
 SVG Scalable Vector Graphics image
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m=hubModuleId[1].js
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\lunsfordshonda.com[1].png
 PNG image data, 620 x 343, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo_48[1].png
 PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\loader-v2[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\leadflows[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\js[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\js.cookie.min[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\jquery.bxslider.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\module_13979583254_U3GM_Header.min[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\insight.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\info_2x[1].png
 PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\index[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\image_2x[1].png
 PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\icon[2].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\icon[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\icn_information[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\i[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\hubspot.search.min[1].js
 HTML document, ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\frameDenyDialog[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fontawesome-webfont[2].eot
 Embedded OpenType (EOT), FontAwesome family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\presentation[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\stat[3].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\stat[2].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\stat[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sodar2[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sitereport[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\search[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\scorecard.bundle[1].js
 UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\quote-left[1].png
 PNG image data, 22 x 17, 8-bit colormap, interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pxl[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\proximanova-regular-webfont[1].woff
 Web Open Font Format, TrueType, length 71686, version 0.0
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\proximanova-bold-webfont[1].woff
 Web Open Font Format, TrueType, length 61569, version 0.0
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\programs.nyenrode.nl[1].png
 PNG image data, 620 x 343, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fontawesome-webfont[1].eot
 Embedded OpenType (EOT), FontAwesome family
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\popup[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\php[1].png
 PNG image data, 197 x 125, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\panel[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\osd[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\nr-1184.min[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\normalize.min[1].css
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\nicole-headshot[1].png
 PNG image data, 800 x 800, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\neighbours[1].htm
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\my.nyenrode.nl[1].png
 PNG image data, 620 x 343, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\modules.8831d20acac5f9d5fa63[1].js
 C source, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\module_13995770675_unified3_modules_U3M_4_Card_Section[1].js
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1[2].gif
 GIF image data, version 89a, 716 x 449
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\aaec216529[2].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\aaec216529[1].js
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\NewErrorPageTemplate[1]
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\LYjbdGHgj0k1DIQRyUEyyEL3UM_YeJc[1].woff
 Web Open Font Format, TrueType, length 32872, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\LYjGdGHgj0k1DIQRyUEyyEoodNw[1].woff
 Web Open Font Format, TrueType, length 29796, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff
 Web Open Font Format, TrueType, length 20348, version 1.1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Airbnb_grey[1].png
 PNG image data, 184 x 70, 8-bit gray+alpha, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\AA000014[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\764795804[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\392014[2].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\392014[1].js
 HTML document, UTF-8 Unicode text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\2[1].gif
 GIF image data, version 89a, 200 x 200
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\advert[1].gif
 GIF image data, version 89a, 1 x 1
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1[1].gif
 GIF image data, version 89a, 200 x 200
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{810EA840-1B3D-11EB-90E4-ECF4BB862DED}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7A5B1AC9-1B3D-11EB-90E4-ECF4BB862DED}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7A5B1AC7-1B3D-11EB-90E4-ECF4BB862DED}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\B3I8RORQ\www.google[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\B3I8RORQ\sur[1].xml
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\3TMJDZ4K\www.northpass[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\3TMJDZ4K\www.mywot[1].xml
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\2YHFTVAW\vars.hotjar[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\2YHFTVAW\transparencyreport.google[1].xml
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[3].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\font-awesome.min[1].css
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fo[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\flickity.pkgd.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fbevents[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico
 MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon-32x32[1].png
 PNG image data, 32 x 32, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f[3].txt
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f[2].txt
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\f[1].txt
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\downsize_200k_v1[1].jpg
 JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dev.agc.org[1].png
 PNG image data, 620 x 343, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\deployment[1].js
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\1OTLCE6Z\sur[1].xml
 UTF-8 Unicode text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[2].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[1].css
 ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\chrome-color[1].svg
 SVG Scalable Vector Graphics image
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\box-469cf41adb11dc78be68c1ae7f9457a4[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bframe[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\babyquip-logo-gray[1].png
 PNG image data, 275 x 72, 8-bit colormap, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\api[1].js
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\aos3.min[1].js
 ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\anchor[2].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\anchor[1].htm
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\analytics[1].js
 ASCII text, with very long lines
 #