Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

https://bit.ly/39Yryji?%7C=www.santander.cl

Status: finished
Submission Time: 2021-01-27 18:03:29 +01:00
Malicious
Phishing
Phisher

Comments

Tags

Details

  • Analysis ID:
    345114
  • API (Web) ID:
    592143
  • Analysis Started:
    2021-01-27 18:03:29 +01:00
  • Analysis Finished:
    2021-01-27 18:09:28 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
malicious
Score: 48
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
95.85.11.200
 European Union
198.38.83.196
 United States
67.199.248.11
 United States
Click to see the 1 hidden entries
188.164.197.43
 Spain

Domains

Name IP Detection
bit.ly
 67.199.248.11
wordpress.roma.it
 95.85.11.200
www.lacreatura.esivalladolid.com
 188.164.197.43
Click to see the 1 hidden entries
www.zonabillar.com
 198.38.83.196

URLs

Name Detection
http://www.zonabillar.com/mesas_de_billar/MesaPoolKronos
http://www.zonabillar.com/accesorios/Default.aspx
http://www.zonabillar.com/mesas_de_billar/Pool
Click to see the 97 hidden entries
http://www.zonabillar.com/accesorios/
http://www.zonabillar.com/servicios/
http://www.zonabillar.com/mesas_de_billar/
http://www.zonabillar.com/contacto/
http://www.zonabillar.com/mesas_de_billar/MesaPoolEko
http://www.zonabillar.com/contacto/lar/w.zonabillar.com/favicon.ico
http://www.zonabillar.com/accesorios/lar/l
http://www.zonabillar.com/contacto/lar/
http://www.zonabillar.com/accesorios/img/buchacas%20mesas%20de%20pool.JPG
http://www.zonabillar.com/mesas_de_billar/img/Eko.png
http://www.zonabillar.com/mesas_de_billar/img/Kronos.png
http://www.zonabillar.com/accesorios/img/porta%20tizas.JPG
http://www.zonabillar.com/accesorios/img/triangulos%20de%20billar.JPG
http://www.zonabillar.com/accesorios/img/fundas%20tacos%20de%20billar.JPG
http://www.zonabillar.com/App_Themes/Default/Max479.css
http://www.zonabillar.com/img/OpcionAccesorio.png
http://www.zonabillar.com/accesorios/img/parches%20pa%C3%B1o%20de%20pool.JPG
http://www.zonabillar.com/accesorios/img/tizas%20cosmetico%20master.JPG
http://www.zonabillar.com/js/modernizr.custom.46138.js
http://www.zonabillar.com/accesorios/FZonaBillar
http://www.zonabillar.com/servicios/img/rep1_1.jpg
http://www.zonabillar.com/accesorios/img/bolas%20pelotas%20de%20futbolito.JPG
http://www.zonabillar.com/mesas_de_billar/MesaPoolKronos8ZonaBillar
http://www.zonabillar.com/img/BolaAccesorios.png
http://www.zonabillar.com/contacto/
http://www.zonabillar.com/accesorios/img/botella%20y%20bolitas%20de%20sorteo.JPG
http://www.zonabillar.com/App_Themes/Default/Min480Max959.css
http://www.zonabillar.com/contacto
http://www.zonabillar.com/mesas_de_billar/MesaPoolEkoos
http://scripts.sil.org/OFLCopyright
http://www.zonabillar.com/img/BolaServicio.png
http://www.zonabillar.com/img/BolaContacto.png
http://www.zonabillar.com/accesorios/img/bolas%20economicas%20para%20pool.JPG
http://www.zonabillar.com/App_Themes/Default/Min960Max1719.css
http://www.zonabillar.com/accesorios/img/tiza%20cosmetico%20tungho.JPG
http://www.zonabillar.com/img/TexturaClara.png
http://www.zonabillar.com/mesas_de_billar/Default.aspx8ZonaBillar
http://www.zonabillar.
http://www.zonabillar.com/js/CorreoZB.js
http://www.zonabillar.com/servicios/
http://kimberlygeswein.comCopyright
http://www.zonabillar.com/img/bullet.png
http://www.zonabillar.com/accesorios/img/barandas%20bandas%20de%20billar.JPG
http://www.zonabillar.com/lladolid.com/activacion/cuenta-nnwk/V
http://www.zonabillar.com/mesas_de_billar/img/DeltaNegra.png
http://www.zonabillar.com/servicios/img/rep2_1.jpg
http://www.zonabillar.com/mesas_de_billar
http://www.zonabillar.com/accesorios/img/botanas%20master.JPG
http://wordpress.roma.it/favicon.ico
http://www.zonabillar.com/mesas_de_billar/img/Tanke.png
http://www.zonabillar.com/img/OpcionServicio.png
http://www.zonabiar.com/
http://www.zonabillar.com/img/OpcionMesaBillar.png
http://www.zonabillar.com/mesas_de_billar/MesaPoolEko8ZonaBillar
http://www.zonabillar.com/mesas_de_billar/img/contempo_caram_510x320.jpg
http://www.zonabillar.com/App_Themes/Default/Comun.css
http://www.zonabillar.com/accesorios/img/taco%20de%20billar%20tipo%20union.JPG
http://www.zonabillar.com/accesorios/img/virolas%20tacos%20de%20billar.JPG
http://www.zonabillar.com/accesorios/img/regatones%20gomas%20tacos%20de%20billar.JPG
http://www.zonabicom/servicios/Default.aspxaspxKOjVLYjk7ohFpeJ
http://www.zonabillar.com/accesorios/
http://www.zonabillar.com/servicios/lar/d:
http://www.zonabillar.com/accesorios/img/botanas%20de%20billar%20hansinburg.JPG
http://www.zonabillar.com/img/LogoZonabillar.png
http://www.zonabillar.com/
http://wordpress.roma.it/wp-includes/images/w-logo-blue-white-bg.png
http://www.zonabillar.com/accesorios/img/bolas%20de%20pool%20marca%20imperial.JPG
https://www.lacreatura.esivalladolid.com/activacion/cuenta-nnwk/
http://www.zonabillar.com/lladolid.com/activacion/cuenta-nnwk/
http://www.zonabillar.com/accesorios/img/taco%20de%20billar%20cuatro%20empalmes.JPG
https://bit.ly/3iJRjYG?l=www.santander.cl
http://www.zonabillar.com/accesorios/img/charolas%20bolas%20sueltas.JPG
http://www.zonabillar.com/mesas_de_billar/img/Colonial.png
http://www.zonabillar..esivalladolid.com/activacion/cuenta-nnwk/com/lladolid.com/activacion/cuenta-n
http://www.zonabillar.com/servicios/img/mesa_reparada1.jpg
http://www.zonabillar.com/App_Themes/Default/Min1720.css
http://www.zonabillar.com/mesas_de_billar/Pool4ZonaBillar
http://www.zonabillar.com/img/BolaInicio.png
http://www.zonabillar.com/mesas_de_billar/img/KronosPool.png
http://www.zonabillar.com/Fuente/ArchitectsDaughter.ttf
http://www.zonabillar.com/accesorios/Default.aspxaspx
http://www.zonabillar.com/mesas_de_billar/img/Delta2.png
http://www.zonabillar.com/mesas_de_billar/Poolaspx~
http://www.zonabillar.com/accesorios/Default.aspxFZonaBillar
https://www.lacreatura.esivalladolid.com/activacion/cuenta-nnwk/LMEM
http://www.zonabillar.com/favicon.ico~
https://www.lacreaturait/favicon/enviar02.php?l=333342500.esivalladolid.com/activacion/cuenta-nnwk/R
http://www.zonabillar.com/mesas_de_billar/MesaPoolEko
http://www.zonabicom/accesorios/Default.aspxaspxKOjVLYjk7ohFpeJ
http://www.zonabillar.com/mesas_de_billar/Pool
http://www.zonabillar.com/mesas_de_billar/img/Boomerang.png
http://www.zonabillar.com/favicon.ico
http://www.zonabillar.com/servicios/img/mesa_reparada2.jpg
http://www.zonabillar.com/servicios/img/rep2_2.jpg
http://wordpress.roma.it/favicon/enviar02.php?l=333342500
http://www.zonabillar.com/mesas_de_billar/MesaPoolKronos
http://www.zonabillar.com/accesorios/img/Bolas%20ruedo%20carambola%20aramit%20pro%20cup.JPG

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\cuenta-nnwk[1].htm
 ASCII text, with no line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\charolas%20bolas%20sueltas[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 05:49:50, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BolaAccesorios[1].png
 PNG image data, 72 x 78, 8-bit/color RGBA, non-interlaced
 #
Click to see the 94 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\AEHAWZV0.htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\w-logo-blue-white-bg[1].png
 PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\taco%20de%20billar%20cuatro%20empalmes[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 10:13:24, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\servicios[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\regatones%20gomas%20tacos%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 05:56:30, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\prensa%20pega%20botanas[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:16:42, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\mesas_de_billar[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\mesa_reparada2[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 510x340, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\favicon[1].ico
 MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\cubiletes%20dados%20poker[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:12:41, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\contacto[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BolaInicio[1].png
 PNG image data, 72 x 78, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\cepillo%20mesas%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:19:51, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\barandas%20bandas%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:34:19, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Tanke[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Piramid[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Min1720[1].css
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Max479[1].css
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Default[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Comun[1].css
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Bolas%20ruedo%20carambola%20aramit%20pro%20cup[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 13:32:45, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\Basico[1].css
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\enviar02[1].htm
 HTML document, ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DKC746G81IF7J339D2CX.temp
 data
 #
C:\Users\user\AppData\Local\Temp\~DFB4A70F06E7D4BB57.TMP
 data
 #
C:\Users\user\AppData\Local\Temp\~DF9F2FC73470E9E1CF.TMP
 data
 #
C:\Users\user\AppData\Local\Temp\~DF63F9EEFA8506E00E.TMP
 data
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\virolas%20tacos%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 05:59:46, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\tiza%20cosmetico%20tungho[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 13:05:34, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\servicios[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\rep1_2[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 245x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\modernizr.custom.46138[1].js
 HTML document, ASCII text, with very long lines
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\mesa_reparada1[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 510x340, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\guantes%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 06:54:55, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\taco%20de%20billar%20tipo%20union[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 10:16:17, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\burritas%20mesa%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 14:06:01, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\botella%20y%20bolitas%20de%20sorteo[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 13:49:04, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bolas%20pelotas%20de%20futbolito[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 05:54:08, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\Pajhody[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\MesaPoolKronos[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\LogoZonabillar[1].png
 PNG image data, 659 x 136, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\Default[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\Colonial[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\Boomerang[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BolaServicio[1].png
 PNG image data, 71 x 78, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\BolaMesaBillar[1].png
 PNG image data, 72 x 79, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\OpcionMesaBillar[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\texturanegrapunteada[1].jpg
 [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2007:09:10 16:31:11], baseline, precision 8, 120x120, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\rep2_2[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 245x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\rep2_1[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 245x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\porta%20tizas[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:02:34, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\pa os%20para%20billar%20pool[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 14:11:16, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\buchacas%20mesas%20de%20pool[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:21:18, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\botanas%20master[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 12:57:45, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bolas%20economicas%20para%20pool[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:30:29, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\accesorios[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\TexturaClara[1].png
 PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\OpcionServicio[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tizas%20cosmeticos%20hansinburg[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 13:01:22, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\OpcionAccesorio[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\MesaPoolEko[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\KronosPool[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\DeltaNegra[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Default[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\CorreoZB[1].js
 ASCII text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\BolaContacto[1].png
 PNG image data, 72 x 78, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\3iJRjYG[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
 data
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{29CC5350-610D-11EB-90E5-ECF4BB570DC9}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{22CB6B3F-610D-11EB-90E5-ECF4BB570DC9}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\accesorios[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{22CB6B3D-610D-11EB-90E5-ECF4BB570DC9}.dat
 Microsoft Word Document
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\rep1_1[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 245x150, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\parches%20pa o%20de%20pool[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:25:47, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\mesas_de_billar[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fundas%20tacos%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 05:28:23, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\contempo_caram_510x320[1].jpg
 [TIFF image data, little-endian, direntries=0], baseline, precision 8, 510x320, frames 3
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\contacto[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\casquillos%20tacos%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 13:42:35, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bullet[1].png
 PNG image data, 12 x 9, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\botanas%20de%20billar%20hansinburg[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 12:52:10, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bolas%20de%20pool%20marca%20imperial[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 07:32:52, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\tizas%20cosmetico%20master[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 13:17:24, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Pool[1].htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Min960Max1719[1].css
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Min480Max959[1].css
 UTF-8 Unicode (with BOM) text, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Kronos[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Gabardina%20billar%20carambola[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:13 14:14:09, GPS (…)
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\GRC7VUR6.htm
 HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Eko[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Delta2[1].png
 PNG image data, 510 x 265, 8-bit/color RGBA, non-interlaced
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ArchitectsDaughter[1].ttf
 TrueType Font data, 11 tables, 1st "OS/2", 24 names, Macintosh, Copyright (c) 2010, Kimberly Geswein (kimberlygeswein.com)Architects DaughterRegular1.000;pyrs;
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\39Yryji[1].htm
 HTML document, ASCII text
 #
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\triangulos%20de%20billar[1].jpg
 [TIFF image data, big-endian, direntries=11, description= , manufacturer=Canon, model=Canon PowerShot SX500 IS, orientation=upper-left, xresolution=210, yresolution=218, resolutionunit=2, datetime=2015:03:10 06:27:41, GPS (…)
 #