Joe Sandbox Cloud Basic

Want to search on specific fields?


Try our:

Advanced Search

Want to search in depth on all Cloud Basic reports?

Try: Joe Sandbox View

Register Login
sloganpng
top title background image
flash

Next_Caller’s_Fraud___COVID-19_Report_(Week_6-9).pdf

Status: finished
Submission Time: 2021-06-22 09:02:58 +02:00
Suspicious
Trojan

Comments

Tags

Details

  • Analysis ID:
    438190
  • API (Web) ID:
    805781
  • Analysis Started:
    2021-06-22 09:04:41 +02:00
  • Analysis Finished:
    2021-06-22 09:16:16 +02:00
  • MD5:
    5cf5e5cf2ac5f1eba159d03842f9e7c9
  • SHA1:
    80e72b48c3c441900152ce45fcec3bb552ef1734
  • SHA256:
    c8471fe72419ed8c0c39cc5750e77cb9df3a1b4532f5a3117441755eb55d52cf
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
Full Report Management Report IOC Report
suspicious
Score: 24
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
143.204.98.59
 United States
143.204.98.18
 United States
143.204.98.9
 United States
Click to see the 21 hidden entries
35.244.174.68
 United States
198.61.165.71
 United States
143.204.98.2
 United States
18.215.95.219
 United States
3.94.218.138
 United States
52.210.44.111
 United States
54.85.240.191
 United States
142.250.186.161
 United States
143.204.98.76
 United States
143.204.98.70
 United States
94.31.29.64
 United Kingdom
143.204.98.119
 United States
216.58.212.161
 United States
239.255.255.250
 Reserved
162.222.177.102
 United States
74.125.140.157
 United States
151.101.114.208
 United States
23.253.41.115
 United States
216.58.212.150
 United States
18.211.164.153
 United States
50.16.7.188
 United States

Domains

Name IP Detection
segments.company-target.com
 143.204.98.18
api.company-target.com
 143.204.98.59
embeds.driftcdn.com
 143.204.98.9
Click to see the 68 hidden entries
stats.g.doubleclick.net
 0.0.0.0
connect.soundcloud.com
 0.0.0.0
connect.facebook.net
 0.0.0.0
lh6.googleusercontent.com
 0.0.0.0
conversation.api.drift.com
 0.0.0.0
flow.api.drift.com
 0.0.0.0
static.hotjar.com
 0.0.0.0
js.driftt.com
 0.0.0.0
clients2.googleusercontent.com
 0.0.0.0
f6d8b2eeb23e2fe14a6a-2d01bb8c606da8c715207a3eb162b3e6.ssl.cf2.rackcdn.com
 0.0.0.0
d.adroll.com
 0.0.0.0
metrics.api.drift.com
 0.0.0.0
connect.livechatinc.com
 0.0.0.0
presence.api.drift.com
 0.0.0.0
a9a6de4f8e5bae57304f-147f75b36ca8e198378094412a8c909e.ssl.cf2.rackcdn.com
 0.0.0.0
adserver-vpc-alb-0-1578609942.eu-west-1.elb.amazonaws.com
 52.212.91.150
customer.api.drift.com
 0.0.0.0
ib.adnxs.com
 0.0.0.0
cdn.livechatinc.com
 0.0.0.0
s.adroll.com
 0.0.0.0
api.livechatinc.com
 0.0.0.0
targeting.api.drift.com
 0.0.0.0
www.facebook.com
 0.0.0.0
x.bidswitch.net
 0.0.0.0
event.api.drift.com
 0.0.0.0
bootstrap.api.drift.com
 0.0.0.0
ads.yahoo.com
 0.0.0.0
in.hotjar.com
 0.0.0.0
1501707-7.chat.api.drift.com
 0.0.0.0
yt3.ggpht.com
 0.0.0.0
d.adroll.mgr.consensu.org
 0.0.0.0
driftt.imgix.net
 0.0.0.0
www.youtube-nocookie.com
 0.0.0.0
s.w.org
 192.0.77.48
adserver-vpc-alb-2-1264451658.eu-west-1.elb.amazonaws.com
 34.245.244.116
cm.g.doubleclick.net
 216.58.212.130
photos-ugc.l.googleusercontent.com
 142.250.186.161
script.hotjar.com
 143.204.98.104
idsync.rlcdn.com
 35.244.174.68
scontent.xx.fbcdn.net
 157.240.17.15
a2f905133e04e4d35ade9cd4751dd35b-4fd69d4b6621dbbd.elb.us-east-1.amazonaws.com
 54.85.240.191
tag.demandbase.com
 143.204.98.2
dl7g9llrghqi1.cloudfront.net
 143.204.98.70
dualstack.com.imgix.map.fastly.net
 151.101.114.208
alb-aws-fr-bswx-3-1125904451.eu-central-1.elb.amazonaws.com
 35.158.179.12
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com
 18.215.95.219
i.ytimg.com
 216.58.212.150
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com
 3.94.218.138
dqre9twuee0sw.cloudfront.net
 143.204.98.119
api.autopilothq.com
 23.253.41.115
secure.gravatar.com
 192.0.73.2
212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com
 94.31.29.64
googlehosted.l.googleusercontent.com
 142.250.186.161
alb-event-1454785217.us-east-1.elb.amazonaws.com
 18.211.164.153
ib.anycast.adnxs.com
 37.252.173.62
www.google.ch
 172.217.16.131
fasttiger.io
 198.61.165.71
in-live.live.eks.hotjar.com
 52.30.7.71
vars.hotjar.com
 143.204.98.32
i0.wp.com
 192.0.77.2
edge.gycpi.b.yahoodns.net
 87.248.118.23
stats.l.doubleclick.net
 74.125.140.157
us-u.openx.net
 35.244.159.8
match.prod.bidr.io
 52.210.44.111
star-mini.c10r.facebook.com
 157.240.17.35
static-cdn.hotjar.com
 143.204.98.76
nextcaller.com
 162.222.177.102
id.rlcdn.com
 35.244.174.68

URLs

Name Detection
https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1
https://js.driftt.com/core/assets/js/37.9400e58c.chunk.js
https://js.driftt.com/core/assets/js/24.6165b45c.chunk.js
Click to see the 97 hidden entries
https://connect.soundcloud.com/sdk/flashAudio.swf
https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/?
https://js.driftt.com/core/assets/js/23.dbd7bb7d.chunk.jsaD
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/h
https://driftt.com/
https://js.driftt.com/core/assets/js/5.67a119b2.chunk.js
https://s.adroll.com/pixel/3EMAQOKZ55ANJCJP3WV5SU/56SXJ6QRXRCDNKBYZBE26A/FKEEP7HYF5FM5HSOXR4D7G.js
https://conversation.api.drift.com
http://www.aiim.org/pdfa/ns/extension/
https://connect.soundcloud.com/sdk/sdk-3.1.2.js?ver=4bd0e6787e54cb84dd2083ee390e2aaeaD
https://nextcaller.com/blog/next-callers-fraud-covid-19-report-week-4-5/l
https://nextcaller.com/
https://tag.demandbase.com/0b89409e7860f117.min.js
http://www.osmf.org/default/1.0%http://www.osmf.org/mediatype/default
http://cipa.jp/exif/1.0/
https://meetings.api.driftqa.com
https://js.driftt.com/core/assets/js/11.a0a8230e.chunk.jsaD
https://twemoji.maxcdn.com/v/13.0.1/
https://api.giphy.com/v1/gifs
https://212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com
https://js.driftt.com/core?embedId=2eznhvmm4vg9&forceShow=false&skipCampaigns=false&sessionId=27409da5-0e60-4908-ac1b-7fbda07ce800&sessionStarted=1624378101&campaignRefreshToken=ec607e3c-19fd-4a1a-880a-da692e84e4ca&hideController=false&pageLoadStartTime=1624384308570&mode=CHAT
https://nextcaller.com/blog/next-callers-fraud-covid-19-report-week-4-5/W
https://js.driftt.com/core/assets/js/27.fca79052.chunk.jsaD
https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1
https://212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com/wp-includes/js/dist/dom-ready.min.js?ver=eb
https://lh6.googleusercontent.com
https://attachments.driftqa-files.com
https://nextcaller.com/blog/next-callers-fraud-covid-19-report-week-4-5/)
https://js.driftt.com/core/assets/js/main~970f9218.7999e723.chunk.jsa
https://js.driftt.com/core/assets/js/5.67a119b2.chunk.jsaD
http://iptc.org/std/Iptc4xmpExt/2008-02-29/O;
https://vars.hotjar.com/box-25a418976ea02a6f393fbbe77cec94bb.html
http://www.aiim.org/pdfe/ns/id/
http://www.aiim.org/pdfa/ns/schema#
https://js.driftt.com/core/assets/js/main~970f9218.7999e723.chunk.jsaD
https://js.driftt.com/core/assets/js/30.d4e3e0f6.chunk.js
https://script.hotjar.com/modules.9f99649151c1e38c217a.js
http://iptc.org/std/Iptc4xmpExt/2008-02-29/
https://js.driftt.com/core/assets/js/4.0b443ee6.chunk.jsaD
https://212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com/wp-content/cache/autoptimize/js/autoptimize
https://nextcaller.com/blog/next-callers-fraud-covid-19-report-week-4-5/C
https://iframe.ly/api
https://nextcaller.com//z
https://js.driftt.com/core/assets/js/43.a7bcbb00.chunk.jsaD
https://flow.api.drift.com
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/g/
https://js.driftt.com/core/assets/js/0.45eb4005.chunk.jsaD
https://api.autopilothq.com/anywhere/a226a61269bd46b49f99013b66ec690049378a691ede444f85200277cfa8380
https://api.soundcloud.com
https://connect.facebook.net/signals/config/520441704996187?v=2.9.41&r=stable
https://js.driftt.com/core?embedId=2eznhvmm4vg9&forceShow=false&skipCampaigns=false&sessionId=88786eb6-cf57-469c-bfdd-803c6977338b&sessionStarted=1624378066&campaignRefreshToken=ec607e3c-19fd-4a1a-880a-da692e84e4ca&hideController=false&pageLoadStartTime=1624384185679&mode=CHAT
https://js.driftt.com/core/assets/js/main~89e24786.1b59bcf0.chunk.jsaD
https://customer2.api.driftqa.com
https://www.youtube-nocookie.com/s/player/da9443d1/player_ias.vflset/en_US/embed.js
https://js.driftt.com/core/chat
http://www.osmf.org/drm/default
https://js.driftt.com/core/assets/js/24.6165b45c.chunk.jsaD
https://js.driftt.com/core/assets/js/1.0af467a5.chunk.jsa
https://nextcaller.com/d7M
https://js.driftt.com/core/assets/js/16.afbd9978.chunk.js
https://nextcaller.com/blog/next-callers-fraud-covid-19-report-week-4-5/2BNext
https://js.driftt.com/core/assets/js/34.b38589b0.chunk.jsaD
https://212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com/wp-includes/js/dist/vendor/wp-polyfill.min.
https://metrics.api.drift.com
https://212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com/wp-content/themes/nextcaller/img/favicon.ic
https://js.driftt.com/core/assets/js/23.dbd7bb7d.chunk.js
https://youtube-nocookie.com/
https://js.driftt.com/core/assets/js/11.a0a8230e.chunk.js
https://js.driftt.com/core/assets/js/2.6571b24d.chunk.jsaD
https://www.youtube-nocookie.com/s/player/da9443d1/fetch-polyfill.vflset/fetch-polyfill.js
https://messaging.api.driftqa.com
https://static.hotjar.com/c/hotjar-741444.js?sv=7
https://js.driftt.com/core/assets/js/main~53ca99a6.c734c4e2.chunk.jsa
https://feedback.googleusercontent.com
https://212mq33wcw14cr2kt2zmunq1-wpengine.netdna-ssl.com/wp-includes/js/jquery/jquery.min.js?ver=3.5
https://targeting.api.driftqa.com
https://ims-na1.adobelogin.com
https://js.driftt.com/core/assets/js/15.9b6202df.chunk.js
https://integration.drift.com
https://customer.api.drift.com
https://js.driftt.com/core/assets/js/45.bdf61037.chunk.jsaD
https://embeds.driftcdn.com
https://driftt.com/9Z
https://js.driftt.com/core/assets/js/31.8006e8ac.chunk.jsaD
http://www.adobe.c
https://enrichment.api.driftqa.com
https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_l
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
https://metrics.api.driftqa.com
https://js.driftt.com/core/assets/js/21.d75548a7.chunk.jsaD
https://PrefSyncJob/com.adobe.acrobat.ADotCom/Resource/Sync/Upload/I/z
https://identify.api.driftqa.com
https://cdn.livechatinc.com/tracking.js
https://js.driftt.com/core/assets/js/runtime~main.888ff9b8.js
https://conversation2.api.driftqa.com

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\55eba708-789f-4342-8466-abff3d85740f.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\114677e6c36ebcbb_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\109af07f8465e4da_0
 data
 #
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\108db05aa3f3ea38_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0cf5cd0fd4e0555b_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\03cf3aa0642e3d9a_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0315260b8fd07132_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\016c4df03233eaa9_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\00205d392dbf34d1_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG
 ASCII text
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8af52bd4-e629-4d23-b6ce-6987ffed5f85.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6dd32692-62bd-4678-8335-172bea349745.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\11b0a09e6e5e70bf_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4d3f529a-dc3f-4c17-a0ef-d0a2ca924f6e.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2e4ccea9-95e5-436f-91c3-5098813bf0b7.tmp
 very short file (no magic)
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1d9b0160-6a7e-4239-a47d-20468094dca6.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\16a69603-a73a-4e92-9b3c-d65d22c610e3.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\8f79e655-5aca-469e-8a22-65cac60a426d.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\797b02ec-10ef-4a9c-9015-09ab43fe9a03.tmp
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\78d6e871-cb53-4c3d-b9e2-5f9eae89ed1d.tmp
 ASCII text, with very long lines, with no line terminators
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3dbe54b7c92541c6_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\60f428732ff62a33_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5cacab30938835de_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5a50d7ed089c3a43_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5791574709173403_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4e9f9b0d0faf688a_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4e784ccbc3fc9dfd_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\49b640555bea3ff8_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4975958deb0979e3_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\484a67f8e93657dc_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\450142fd365c02e7_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4222ed98887eebda_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\41710f54b7373a18_0
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3ad14847f45a16b8_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\38f9dee56f1cd6b0_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\380a997560e7a532_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\343dbb1fd551b4f5_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\339aa4ac6ae7d1a2_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\335eb1734ce2fe09_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\30a537e7f6051f90_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\21965fb85a2acd6d_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1c5861241d6b406d_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1bcffcab8003e961_0
 data
 #
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\189065a0ece5b287_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6267ed4d4a13f54b_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\39c14c1f4b086971_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0
 data
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
 Microsoft Cabinet archive data, 60080 bytes, 1 file
 #
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
 SQLite 3.x database, last written using SQLite version 3024000
 #
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-210622174744Z-222.bmp
 PC bitmap, Windows 3.x format, 117 x -152 x 32
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
 ASCII text
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0
 data
 #
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0
 data
 #
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0
 data
 #